In short
CTAPP is the State Bar of California's Client Trust Account Protection Program. Every active licensee must report each year whether they handled client money. Those who did must register every trust account, complete a self-assessment of their trust accounting and certify compliance. Reporting is part of annual renewal, which opens February 1; the 2026 deadline was March 30. Selected lawyers then face CPA compliance reviews.
Key takeaways
- CTAPP reporting is required of every licensee who held active status at any time in the reporting period, including those who never handled client money; only those on voluntary inactive status for the whole period are exempt.
- Licensees responsible for client money must register every IOLTA and non-IOLTA trust account open during the period, even with a zero balance, and complete an annual self-assessment.
- The reporting deadline is the annual license fee deadline under State Bar rule 2.11; renewal opens February 1 and the 2026 deadline was March 30, 2026.
- Since January 1, 2026 each trust account must name a designated licensee, who oversees or performs the monthly reconciliations, and a Notice to Financial Institution must be served for each account.
- Under State Bar rule 2.6, a lawyer selected for a compliance review has 30 days to engage a State Bar-approved CPA at their own expense and produce records covering at least one year.
What CTAPP is and why it exists
The Client Trust Account Protection Program, known as CTAPP, is the State Bar of California's system for checking how lawyers handle client money. The California Supreme Court approved its rules in October 2022. The program followed an audit of closed discipline cases against a disbarred lawyer. The first phase applied from the 2023 license renewal cycle. The requirements sit in California Rules of Court, rule 9.8.5, and in Title 2, Division 1.5 of the Rules of the State Bar, mainly rules 2.4 to 2.6.
CTAPP does not replace the underlying trust account rule, rule 1.15 of the California Rules of Professional Conduct. It adds annual reporting on top of it, and gives the State Bar the power to test compliance through reviews and audits. For the national rules that rule 1.15 is based on, see our guide to IOLTA trust account rules. Firms that also practice in New York should compare CTAPP with the New York attorney escrow account rules.
Who must comply
Every licensee who held active status at any time during the reporting period must complete CTAPP reporting, even one who never touched client money. For the 2026 cycle the reporting period was January 1 to December 31, 2025. From January 1, 2026, the only exemption is for licensees on voluntary inactive status for the whole reporting period.
The full set of duties falls on responsible licensees. Rule 2.4(K) defines a responsible licensee as one who, during the reporting period, was a signatory on a trust account, managed or primarily administered one, or had any duty under rule 1.15. In a firm this usually includes the partners who sign on the IOLTA account and any lawyer who handled client money on a matter.
| Licensee | Annual certification | Account registration | Self-assessment |
|---|---|---|---|
| Active licensee who handled no client money | Required: reports not responsible | Not required | Not required |
| Responsible licensee (signatory, administrator or rule 1.15 duties) | Required: certifies knowledge of and compliance with the rules | Required for every trust account | Required |
| Voluntary inactive for the whole reporting period | Exempt | Exempt | Exempt |
What the annual report contains
Rule 2.5(A) has three parts. First, each licensee certifies whether they were responsible for client or other entrusted money during the period; responsible licensees also certify that they know and comply with the trust account rules. Second, responsible licensees register every trust account: the bank name, routing number and account number, the account name, the dates opened and closed, the balance on a specified date, and the full name and license number of the designated licensee. Third, they complete the State Bar's self-assessment of their trust accounting practices.
The State Bar's FAQ adds practical detail. Each account is registered as either IOLTA or non-IOLTA, never both. An account must be registered even if it holds no money. For an account closed during the year, the licensee reports its balance at the closing date, and for open accounts the balance at December 31. Accounts outside California and outside the United States are reported too. A firm registered with the State Bar's Agency Billing may register accounts on its lawyers' behalf, but each lawyer must still complete their own steps.
The deadline
CTAPP reporting is due by the licensee's annual license fee deadline under State Bar rules 2.11 or 2.12, and is completed in My State Bar Profile. Annual renewal opens February 1. The State Bar set the 2026 deadline as March 30, 2026, and its CTAPP FAQ gives March 30 as the annual deadline under rule 2.11. Newly admitted lawyers have 45 days from the date of their fee invoice under rule 2.12.
Missing the deadline leads to a noncompliance penalty. A licensee who then ignores a noncompliance notice is enrolled as inactive, cannot practice law, and must prove compliance and pay further fees to be reinstated. The State Bar also warns that incomplete account information can lead to penalties even after the final declaration is submitted, so a firm should check every account detail against bank records before its lawyers file.
The designated licensee and the notice to the bank
Since January 1, 2026, each registered trust account must name a designated licensee. That lawyer is the primary account holder or signatory, oversees or performs the monthly reconciliations, and answers other licensees' questions about the account. For a solo practitioner, the designated licensee is the solo practitioner. Other lawyers in the firm keep their own duties under rule 1.15.
Rule 2.5(F) also requires a State Bar Notice to Financial Institution form to be served on the bank for each trust account. For accounts opened on or after January 1, 2026 this is done when the account is opened. Existing accounts had to be covered by July 1, 2026. If a designated licensee becomes inactive, becomes ineligible or leaves the firm, the firm has 30 days either to close the account or to name a new designated licensee and serve a new notice.
The self-assessment and monthly reconciliation
The self-assessment asks about the practices that rule 1.15 and its recordkeeping standards require. Those standards require a client ledger for each client, an account journal for each account, bank statements and cancelled checks, and a monthly reconciliation balancing the client ledger, account journal and bank records. The FAQ gives monthly reconciliation as an example of what the self-assessment asks. A truthful no is acceptable, and the State Bar recommends recording the reason.
The State Bar also publishes an optional law firm self-assessment for designated licensees. It covers five areas: trust bank accounts; trust accounting and funds management, including monthly three-way reconciliations; timely communication with clients; disbursements; and supervision. Rule 1.15 sets the timing duties it tests. Clients must be told within 14 days of money arriving. A failure to pay out undisputed funds within 45 days is presumed to be a violation. Records must be kept for at least five years after final distribution. How to perform the monthly check is set out in our guide to three-way trust account reconciliation.
Worked example: a 12-lawyer firm's CTAPP filing
A 12-lawyer family law and estate planning firm in Sacramento has three partners who sign on its trust accounts and nine associates. It holds one IOLTA account, one non-IOLTA interest-bearing account for a single client's sale proceeds, and an IOLTA account it closed in August. All 12 lawyers must report. The three partners and the four associates who handled client money on their matters are responsible licensees; the other five associates certify that they were not responsible.
The firm registers all three accounts once through Agency Billing, including the closed one, and names the managing partner as designated licensee for each. Each responsible licensee then completes the self-assessment and certification individually before the deadline. Because the self-assessment asks about monthly reconciliation, the firm checks that it holds signed three-way reconciliations for all 12 months of the reporting year for each account, including the months before the closed account was shut.
| Account | Type | Status | Balance reported | Designated licensee |
|---|---|---|---|---|
| Main client trust account | IOLTA | Open | $286,410.00 at December 31 | Managing partner |
| Client sale proceeds account | Non-IOLTA | Open | $742,000.00 at December 31 | Managing partner |
| Former probate trust account | IOLTA | Closed August 14 | $0.00 at closing date | Managing partner |
Compliance reviews and investigative audits
Rule 2.6, in force since February 21, 2025, gives the State Bar two tools. A compliance review covers at least one year of trust account activity. Within 30 days of the notice, the lawyer must name a State Bar-approved CPA engaged at the lawyer's own expense, provide the records requested and identify the designated licensee for each account. The lawyer must sign a statement of representations before the review is completed and acknowledge any findings within 14 days. An investigative audit covers at least three years, with records due within 14 days.
Where a review finds a possible violation, the State Bar may impose a corrective action plan that the designated licensee and named firm lawyers must carry out and verify. A written request for a 14-day extension must arrive at least five days before the due date and show good cause. Failing to cooperate is itself noncompliance and can be referred to the Office of Chief Trial Counsel. A firm whose monthly reconciliations are complete, signed and stored with their supporting records can answer a 30-day request without strain. Safeheld reconciles client money every day for regulated firms, works every difference to its cause and keeps the record auditors ask for, and is extending that work to law firm trust accounting in the United States. If your firm holds client money in California trust accounts, talk to us about CTAPP.
Frequently asked questions
What is CTAPP in California?
The State Bar of California's Client Trust Account Protection Program. It requires licensees to report annually on client money, register trust accounts, complete a self-assessment and certify compliance, and it allows the State Bar to run compliance reviews.
When is the CTAPP deadline?
CTAPP reporting is due by the annual license fee deadline under State Bar rule 2.11. Renewal opens February 1, and the 2026 deadline was March 30, 2026.
Do I have to complete CTAPP if I do not handle client funds?
Yes. Every licensee who was active at any time in the reporting period must report, even if only to certify that they were not responsible for client money.
Do I need to register a trust account with a zero balance?
Yes. The State Bar requires every trust account open during the reporting period to be registered, even if it holds no money, and closed accounts are reported with their balance at the closing date.
What is a designated licensee under CTAPP?
The lawyer named for each trust account who is its primary account holder or signatory and who oversees or performs its monthly reconciliations. The requirement applies from January 1, 2026.
What happens in a CTAPP compliance review?
The lawyer has 30 days to engage a State Bar-approved CPA at their own expense, provide records covering at least one year and identify the designated licensee. Findings must be acknowledged within 14 days of completion.
What happens if I miss CTAPP reporting?
A noncompliance penalty applies, and a licensee who ignores the noncompliance notice is enrolled as inactive and cannot practice law until they comply and pay the fees.
References
- State Bar of California, Rules of the State Bar, Title 2, Division 1.5: Client Trust Account Protection Program
- State Bar of California, Frequently Asked Questions: CTAPP Annual Reporting
- State Bar of California, 2026 Attorney Annual Renewal
- State Bar of California, Rules of Professional Conduct, Rule 1.15
- State Bar of California, CTAPP Law Firm Self-Assessment
- State Bar of California, California Supreme Court Approves Client Trust Account Protection Program
About Safeheld
Safeheld reconciles client money every day, resolves every difference and prepares every regulatory return for sign-off, for regulated firms in the United States, the United Kingdom, the European Union, Canada, Australia, Singapore and Hong Kong. To discuss your operations, contact us at safeheld.com/contact.
This article is for general information and does not constitute legal or regulatory advice.