What auditors actually check in a locked file pdf file
When a senior auditor opens a submitted file pdf file, the first thing they do is try clicking a formula cell. If they can edit it, the document fails the locking requirement. The second thing they check is document properties under File, Properties. Anything in the author, company, or manager field is a metadata leak. In a discovery or regulatory review, that metadata is technically a disclosure record. Finance teams rarely think about either check until the rejection notice arrives with a re deadline and a penalty clause ticking.
Controllers submitting complex Excel models also face a subtler risk: whether the PDF preserves the exact column widths, row heights, and print area settings from the original workbook. A SUM formula that calculated correctly in Excel may render incorrectly if the PDF conversion rescales merged cells or shifts hidden columns. The result looks fine to the submitter but fails the auditor's recalculation check. At that point, the team scrambles to re-export, re-verify, and re-submit under a tighter deadline.
- Verify the PDF locks all formula cells before sending
- Strip metadata including author name and company from document properties
- Confirm column widths and print area match the original Excel exactly
- Use a field-flattener, not print-to-PDF, for any cells containing signatures or approvals
- Flatten the PDF after final export to prevent any post-submission edits