AI for accounting firms pays off on the intake and admin layer — chasing missing client documents, answering the same dozen questions during filing season, booking appointments, and drafting routine client emails. It does not pay off on judgment work: return positions, advisory calls, and anything you sign your name to stay with a human, every time.
The thing that decides whether any of it is actually allowed, though, isn’t the technology. It’s two rules most firms discover late: the FTC Safeguards Rule, which explicitly names tax preparation firms as covered financial institutions, and IRC §7216, which makes disclosing or using tax return information without consent a criminal matter. Both of them govern what a third-party AI tool is permitted to touch, and both are covered below.
AI for accounting firms: what it actually does
Strip away the marketing and there are three layers, in ascending order of risk.
The reception layer. Answering the phone, taking a message, booking a consultation, telling a caller what to bring to their appointment. This is the layer with the least exposure and the fastest payback, because it touches almost no client data — a name, a phone number, and a reason for calling.
The chase layer. Knowing that the Hendersons still owe you a 1099 and a mortgage statement, and following up on Tuesday, and again on Friday, without a person remembering to do it. This is where most of the hours are, and where most firms are still using a spreadsheet and willpower.
The drafting layer. Turning a partner’s three-line instruction into a full client email, summarizing a long engagement thread, converting meeting notes into a to-do list. Useful, but this is the layer where a confident wrong answer can go out under your letterhead, so it stays in draft.
Notice what isn’t on the list. Preparing returns, taking positions, interpreting a client’s situation, and deciding what’s reasonable are not automation jobs. They’re the work you’re paid for.
The four jobs to automate first, in order
Order matters more than tooling. Run these in sequence and each one funds the next.
- The missing-document chase. Highest payback, lowest risk. A checklist per client, an automated reminder cadence, and a status board the whole firm can see. It removes the single most annoying task in the practice and it shortens the season, because returns stop sitting in “waiting on client” limbo for three weeks.
- Phone and inbox triage in season. From February to April a small firm can take more calls in a week than it takes in the other nine months combined, and almost all of them are four questions: is my return done, what do you still need, when is my appointment, how much do I owe. Answering those without interrupting a preparer is worth real money.
- Scheduling. Consultations, drop-offs, review calls, extensions. Removing the back-and-forth is a small win the rest of the year and a large one in March.
- Drafted client replies. Last, and always drafted rather than sent. A preparer reads it, edits it, and hits send. The time saved is real; the accountability stays where it belongs.
Cold outreach and marketing automation sit deliberately outside this list — partly because they’re lower value for a referral-driven practice, and partly because §7216 has specific things to say about using client information for solicitation.
The two rules that decide what your AI is allowed to touch
This is the section that separates a workable rollout from an expensive mistake, and it’s the part generic automation advice skips entirely.
1. The FTC Safeguards Rule — you are a financial institution
Most firm owners are surprised by this one. Under the FTC Safeguards Rule, “financial institution” is defined far more broadly than the phrase suggests, and §314.2(h) lists tax preparation firms explicitly among the covered entities. If you prepare returns, the Rule applies to you.
Practically, that means you need a written information security program with nine specified elements, including a designated Qualified Individual to run it, a written risk assessment, encryption of customer information at rest and in transit, and multi-factor authentication for anyone accessing that information. Firms holding information on fewer than 5,000 consumers are exempt from some provisions, but not from the core obligation.
Two elements bear directly on buying an AI tool. First, you must monitor your service providers — select them for their ability to maintain appropriate safeguards, and spell out your security expectations in the contract. A consumer AI subscription with click-through terms doesn’t clear that bar. Second, if you have a breach involving 500 or more consumers’ unencrypted information, you have to notify the FTC within 30 days.
2. IRC §7216 — consent before disclosure or use
Section 7216 makes it a criminal offense for a return preparer to knowingly disclose or use tax return information other than in preparing the return, without the taxpayer’s consent, with a parallel civil penalty under §6713. The consent itself has to meet specific formal requirements — the current framework sits in the final regulations effective December 2012 and Rev. Proc. 2013-14. The IRS keeps a §7216 information center with the underlying guidance.
The practical read for AI: routing a client’s return information through a third-party tool can be a disclosure. That doesn’t make it impossible — it makes it a decision your firm makes deliberately, with the vendor terms reviewed and, where required, consent obtained on the right form. It is not a decision a staff member should make on a Tuesday afternoon by pasting a K-1 into a chat window.
The rule of thumb that keeps you out of trouble
Draw a hard line: tax return information does not go into the assistant. Names, appointment times, “which documents are outstanding,” and general questions are fine. Figures, forms, SSNs and source documents are not — unless your firm has specifically cleared that pathway with a vendor agreement that satisfies both rules above. The first four automations in this guide were chosen precisely because they sit on the safe side of that line.
Write the line down. A one-page policy naming approved tools, forbidden data, and who reviews what is the cheapest control you’ll ever implement — we’ve published a fill-in-the-blanks AI policy template you can adapt in an afternoon.
What not to hand over
- Return positions and technical conclusions. Language models produce fluent, confident, wrong citations. In a penalty-exposure context that is a catastrophic failure mode, not an inconvenience.
- Anything that goes out unreviewed. Draft, review, send. There is no version of this where the middle step is optional.
- Client-specific tax advice in a chat widget. A website assistant that answers “can I deduct my home office” with a number has just given advice your firm owns.
- Irreversible actions. Filing, transmitting, moving money, deleting records. Automate the reminder, never the submission.
This is the same autonomy question every firm eventually faces, and it’s worth deciding on purpose rather than by default — our guide to how much independence to give a tool before a human has to sign off lays out the four levels and where each one belongs.
What this costs and how long it takes
For a firm of two to fifteen people, a sensible first phase is one automation plus an always-on responder, live in roughly two weeks. Software runs a few hundred dollars a month; the real cost is configuration — writing the document checklists, setting escalation rules, deciding what the assistant may and may not say.
The honest comparison isn’t AI versus nothing. It’s AI versus a seasonal hire. A temp who works February through April costs a firm several thousand dollars and cannot answer the phone at 8pm — which is exactly when a stressed client with a deadline calls. Our breakdown of what AI automation actually costs shows where the money goes, and our pricing page lists the packages directly.
A rollout that survives filing season
- Do it in the off-season. Nothing new goes live between February and April. Build in the autumn, test in December, run it in January.
- Start with one client segment. Individual 1040 clients, usually — highest volume, most repetitive questions, lowest complexity.
- Write the escalation rules first. What does the assistant do when it doesn’t know, when the caller is upset, when the question is technical? Every one of those routes to a named human.
- Train the staff, not just the software. The people fielding the escalations decide whether this works. A short session on what the tool does, what it must never do, and how to take over is worth more than any feature — the same principle we cover in our guide to getting a team genuinely comfortable with AI.
- Measure one number. Days from engagement letter to complete document set. If that drops, the rollout worked. If it doesn’t, the configuration is wrong, not the idea.
Firms in adjacent professional-services verticals face a near-identical version of this problem with a different rulebook — our guide to client intake for law firms works through the professional-responsibility constraints in the same way.
Frequently asked questions
Is AI for accounting firms actually compliant?
It can be, but compliance is a property of your setup rather than of the tool. The two obligations that matter most are the FTC Safeguards Rule, which requires a written security program and vendor contracts that specify your security expectations, and IRC §7216, which requires consent before tax return information is disclosed or used outside return preparation. Automations that never touch return information — scheduling, document reminders, call answering — sit comfortably on the safe side of both.
Can AI prepare tax returns?
No, and you shouldn’t want it to. AI can assist with organizing source documents, flagging missing items, and summarizing a client’s situation for a preparer to read. The return positions, the judgment calls, and the signature are the preparer’s, and they carry professional and penalty exposure that no tool assumes on your behalf.
Will AI replace bookkeepers and accountants?
The pattern in small firms is absorption, not replacement — AI takes the repetitive slice of the role, and the person moves up into advisory and review work that bills at a higher rate. Most firms that adopt it end up handling more clients with the same headcount rather than shrinking the team.
What’s the single highest-ROI automation for a small firm?
The missing-document chase. It’s the biggest consumer of admin hours, it’s the reason returns stall, and it involves almost no sensitive data — a checklist and a reminder schedule. Firms typically feel the difference within one season.
Can I use ChatGPT with client tax data?
Not on a consumer plan, and not without a deliberate decision. Business and enterprise tiers of the major platforms offer clearer data-handling terms, but the §7216 disclosure question and the Safeguards Rule’s service-provider requirements still apply. The workable default is to use general assistants for internal drafting and research with no client-identifying data in the prompt, and keep return information in your professional software.
Want this set up without the guesswork?
Most firms don’t need more software — they need someone to decide which two automations matter, configure them against the rules above, and train the staff who’ll live with them. That’s what we do. See our AI automation services, or book a free AI strategy call and we’ll tell you which single change would save your firm the most hours next season, even if you’d rather build it in-house.