The word "audit" gets used loosely in eCommerce. A CRO audit can mean anything from a 10-minute Google Analytics screenshot to a three-week research engagement.

Here's what a structured Shopify CRO audit actually covers - and why most of the "quick win" checklists you'll find online miss the point.

What a CRO audit is not

It's not a checklist.

Most CRO checklists cover surface-level "best practices" - add trust badges, use high-quality images, make your CTA button a contrasting colour. These are fine starting points, but they're not an audit. An audit is diagnostic, not prescriptive. It tells you what's wrong with your store, not what's theoretically true for all stores.

It's also not a speed test. Page speed matters for Core Web Vitals and SEO. It's not usually the primary driver of conversion rate. Fixing your LCP from 3.2s to 2.1s will not double your CVR. I've seen fast stores convert at 0.8% and slow stores convert at 3.2%.

What a real audit actually covers

1. Traffic analysis

Before looking at anything on the site, look at the traffic. What's the channel split? How do mobile vs desktop CVRs compare? What's the new vs returning visitor breakdown?

This sets the baseline for what you're solving. A store with 90% mobile traffic and 60% new visitors has different priorities to one with 70% desktop and mostly returning customers.

2. Funnel mapping

Where are people dropping off? Specifically: homepage → collection → PDP → add-to-cart → checkout → purchase. The conversion rate at each step tells you where the biggest leak is.

Most stores have their biggest drop at the PDP → add-to-cart step. Some have it at the checkout. The fix is completely different depending on where the drop is.

3. Product page review

The PDP is where most conversion revenue is won or lost. The audit covers:

  • Hierarchy - is the value proposition clear before the scroll? Does the main benefit lead or does the product name?
  • Social proof placement - are reviews visible without scrolling on mobile?
  • CTA logic - is the add-to-cart button prominent? Is there anything reducing confidence at the decision moment?
  • Copy - is it written for the customer's decision, or for a brand brief?
  • AOV - is there a cross-sell or bundle prompt at the right moment?

4. Cart review

The cart has two jobs: confirm the decision and complete the transaction. Most carts accidentally do a third thing: provide escape routes.

Audit questions: How many links are visible from the cart page? Is there a progress bar or spend incentive? Is the primary action (checkout) the most visually prominent thing on the page?

5. Trust signal architecture

Trust signals earn their place when placed at the moment of doubt. A trust badge row in the footer doesn't do much. The same information placed adjacent to the add-to-cart button converts.

The audit looks at where trust signals currently live and where they should be.

6. Mobile experience

Not "is it responsive" - everything is responsive now. Is the mobile experience optimised? On mobile specifically: how many taps to add to cart? Is the sticky CTA obscuring content? Does the image gallery work well with thumbs?

7. Heatmap + session review (when data exists)

If the store has Hotjar, Clarity, or Lucky Orange data, this is where qualitative insight meets quantitative. Rage clicks, dead clicks, scroll depth, and rage taps all tell a story that GA4 doesn't.

What the audit produces

A prioritised fix list - not a 50-item spreadsheet, but a ranked list of the three to five issues with the biggest estimated CVR impact.

"Estimated" is important. CRO is always probabilistic. An audit tells you what's most likely suppressing conversion based on structural analysis and available data. The A/B test tells you whether you were right.

How long a real audit takes

For a typical Shopify store (10–30 active products, 5–8 key templates), a structured audit takes one to two days of focused work. Anyone who says they can audit your store properly in 30 minutes is doing a checklist, not an audit.

The Revenue Scan I run is five to seven business days - enough time to review the data, record a full Loom walkthrough, build the prioritised report, and hold a 90-minute strategy session to review findings together.

That's what a CRO audit is supposed to be. For where the audit fits in the wider process, see the complete Shopify CRO guide.