AI-native playbook ยท Accounting, tax and audit

How to make an accounting firm AI-native: a playbook

Agents can now draft most of a tax return, a month-end close or an audit workpaper. Each of those still needs a named professional to review and sign it, and the reviewers have the same hours they had last year. This playbook lays out a staged path, fitted to the tax calendar, for adding agents without thinning that review, with sources for every figure.

Last reviewed
October 2026
Written for
Partners and managing partners of US firms with 10 to 500 people
Reading time
About 35 minutes
On this page
01

One signature, more drafts

In October 2025 Deloitte agreed to refund part of the A$440,000 (about US$290,000) it was paid for a report to an Australian government department. The report cited papers that do not exist and put words in a federal judge's mouth. A revised version disclosed that Azure OpenAI had been used[62]. A large firm's review process let it through.

In June 2026 the IRS Office of Professional Responsibility cited that report in its first guidelines on AI in tax practice. They say that "practitioners cannot rely solely on AI; human scrutiny and editing are essential", and that a firm should "fairly credit to the client's account any cost reductions" AI brings[13].

Staffing makes it harder. Accounting degrees fell 6.6% to 55,152 in 2023 to 2024[32]. Starting pay for master's hires rose 17% in two years[31]. Tax professionals e-filed 72.8 million individual returns by April 17, 2026, 53% of all e-filed returns[21], and the deadline did not move.

Agents can now do most of the preparing: sort the uploads, enter the figures, list what changed since last year, draft the workpaper. But each return still has one signing preparer, each audit one engagement partner, and the reviewers between them have no more hours than before. The question for a firm is whether its reviewers, its client consents and its records can keep up with what agents will draft. This playbook is about getting those three ready first.

02

The short version

03

AI-enabled vs AI-native accounting firm

AI-enabled

Staff use a chatbot for research and emails, practice management summarizes threads, the tax software imports a few more forms. The calendar, the staffing pyramid, the review chain and the billing stay as they were. Each tool's AI acts under its own login, and nobody can show which return lines an agent touched.

AI-native

Each service line is designed on the assumption that agents do the first pass of preparation, categorization, testing and chasing, and that people review, decide and sign. Review capacity, client consent and the record of who did what are planned for that volume.

Four things set the AI-native firm apart:

  1. The firm plans review capacity. It sets thresholds, sampling and a daily limit for each reviewer before agent volume arrives.
  2. Every agent action runs under a named professional's authority. The agent can do no more than that preparer may do, for that client and year.
  3. Client data stays in its lane. Return information serves only the return, SSNs stay onshore, and one client's file never informs another's draft.
  4. Pricing and staffing change on purpose, and clients are told how AI is used.
04

The missing layer: who reviewed what the agent prepared

No firm will replace its tax software, its clients' ledgers or its practice management system to become AI-native. Agents will work across them, and each product's own AI acts under its own login. None of them can say, across all of them, which agent touched which client's return, for which preparer, and who cleared it. The IRS expects firms to document their AI steps[13], and the Safeguards Rule expects them to log what authorized users do[22].

OrchKernel is a control layer that sits between agents and those systems. Agents ask it before they act. It checks what the agent may do and for whom, holds what needs a reviewer, hides fields the agent should not see, and keeps a tamper-evident record. It is not a tax engine, a ledger, a practice management system or an e-file provider, and it never signs anything. The blueprint near the end maps it to the firm's 18 control points.

05

Where the hours and margin go

People are the cost

Few accounting firms publish their numbers, but two public ones show the shape. At CBIZ, operating expenses were 86.4% of its $2.758 billion revenue in 2025, down from 88.9% in 2024, and "the majority of our operating expenses relate to personnel costs"[27]. Andersen reported cost of services at 71.0% of revenue in 2025, up from 63.1%, in a year that included its listing[28]. No public dataset breaks down costs for small and mid-sized firms; the AICPA MAP Survey does, for members only.

Four months carry the year

CBIZ tells investors its tax and accounting work has "a heavier volume of activity during the first four months" of the year[27], and extended returns make a second peak in the fall. Hiring cannot follow that curve, so the same reviewers absorb it. That is why every change in this playbook is tied to the calendar.

The pipeline is thinner and dearer

Enrollment in accounting programs rose 12.4% to 266,506 in spring 2025, but degrees awarded fell, and new CPA Exam candidates dropped from 42,626 in 2023 to 28,082 in 2024 after a rush to sit the old exam[32]. Starting salaries reached $67,750 for master's hires and $60,834 for bachelor's hires[31].

Government data is mixed: the occupation is projected to grow 5% over ten years[25], while employment at accounting and tax firms fell 0.6% in the year to September 2026[26]. The series measure different things, so read the gap as a hint.

Hourly billing turns saved time into lost revenue

Andersen says "the substantial majority" of its revenue is billed on time and materials[28]. The AICPA says many firms have moved to value pricing while others still bill hours[40]. Where fees are hours times rate, an agent that cuts preparation time cuts revenue unless pricing changes, and the IRS has now said the savings should reach the client[13]. Growth is slowing at the same time: median net client fee growth was 6.7% in the 2025 MAP Survey, against 9.1% in the previous one[31].

Where the hours go, by role

Admin and preparers
Where the time goes
Chasing documents and late K-1s; re-keying because import is weak
Evidence
Data import rated 3.4 out of 5[44]
Preparers
Where the time goes
Data entry from source documents; complex pass-through returns
Evidence
Vendor claim: a partner says returns with 60 to 70 or more K-1s went from more than 100 prep hours to 15 or 20[52]
Reviewers, senior to partner
Where the time goes
Fixed hours in a compressed season; agent volume piles up here
Evidence
The main AI risk in a 2026 framework[43]. No public time data
CAS staff accountants
Where the time goes
Categorization, reconciliations and data entry
Evidence
AI users moved about 3.5 hours a week to client communication and quality checks, in one-vendor data[45]
Audit staff
Where the time goes
Evidence matching, PBC tracking, tests of detail
Evidence
Vendor claim: 55% fewer engagement hours[57]
Partners and owners
Where the time goes
Hourly billing turns time saved into revenue lost
Evidence
The IRS now says AI savings should show up in fees[13]
06

What AI already does, by practice area

Adoption depends on who asks

Thomson Reuters found 21% of tax firms using generative AI at the organization level in early 2025 and 34% by late 2025, with 14% of tax firms using agentic AI[49,50]. It sells AI tax products and screened respondents for familiarity with AI, so treat those as upper bounds. Among 1,808 CPA tax preparers surveyed in June 2026, 65% use AI for tax research and 16% have no plans to use it, down from 24.3% a year earlier[44].

Firm-level change is rarer. In the 2025 MAP Survey, 13% of firms said they had implemented AI and automation successfully[31]. Karbon, which sells practice management software, reports that 98% of accounting professionals use AI (vendor survey)[51]. The 98% counts people who have tried a chatbot; the 13% counts firms that changed how a return or a close gets done.

Clients mostly do not know. In the 2025 Thomson Reuters survey, about 59% of tax-firm clients did not know whether their firm used generative AI[49].

By practice area

Named products are examples from the sources, not recommendations, and their performance figures are their own.

Tax preparation
What agents do today
Read source documents, enter them in the tax software, assemble workpapers ready for review
Sellers and evidence
Basis, from "client intake to review-ready workpapers"[52]; Black Ore for 1040s, with its own CPAs doing a first review[54]. Vendor claims
Tax research
What agents do today
Answer research questions with citations, draft memos and client letters
Sellers and evidence
Thomson Reuters CoCounsel[55]. The IRS lists Westlaw Edge, Bloomberg Tax and Lexis-Nexis as AI already in tax offices[13]
Client accounting (CAS)
What agents do today
Categorize transactions, reconcile, propose entries, draft close packages
Sellers and evidence
AI-native ledgers such as Rillet (vendor)[56]; Tabby, at pre-seed, wants to hide the ledger from small businesses[69]
Audit and assurance
What agents do today
Planning, tests of detail, matching evidence, drafting workpapers and financial statements
Sellers and evidence
Fieldguide, where "Practitioners stay in the reviewer's seat"[57,58]; DataSnipper inside Excel[59]. Vendor claims
Practice management
What agents do today
Summarize email, fix time entries, draft client requests, queue agent work
Sellers and evidence
Karbon, with agents announced "from client onboarding to tax preparation"[60]; Canopy, with a queue where staff approve AI-drafted items[61]

The case for keeping the tax engine

Language models are poor tax calculators on their own. In TaxCalcBench, frontier models calculated fewer than a third of federal returns correctly[46]; its authors work for a tax software company. A 2026 preprint found the best plain model right on 66% of 51 held-out returns, while model-written code checked against symbolic tax rules got all 51 right[47]. The practical reading for a firm: let agents extract, organize, draft and check, and let the tax software calculate.

Where the money went

Tools for firms got the venture money. Basis raised $100 million at a $1.15 billion valuation in February 2026[53]; Rillet raised $100 million at $1 billion in August 2026 and claims more than 600 customers[56]; Black Ore raised $60 million in 2023[54].

AI-led buyers bought firms. Thrive Holdings owns and runs more than 70 businesses, including accounting and IT services, raised over $2 billion at a $12 billion valuation in August 2026[71], and made OpenAI an owner in December 2025[72].

Private equity bought the mid-tier. Grant Thornton (2024)[75], Baker Tilly, which then combined with Moss Adams[76], Schellman (2026)[74] and Crowe (2026), where Crowe LLP keeps "all attest services" and a new Crowe Advisory LLC does tax and advisory[73]. If the two halves share an AI platform, that is a new independence question.

The best-known AI-adjacent firm failed. Bench, a venture-backed bookkeeping and tax firm, shut on 27 December 2024 after burning $135 million[66]. Its founder raised $10 million in 2026 for Synthetic, pitched as "a fully autonomous AI bookkeeper"[68]. MAVI, an offshore talent marketplace, argues AI will remove entry-level roles and deepen the mid-level shortage[70], a founder's view rather than data.

07

One return's path

An individual return from upload to the log, in a firm at Stage 3. A CAS close and an audit workpaper follow the same shape.

  1. 01Uploadยท Client

    A couple uploads two W-2s, a brokerage 1099, a 1098 and a partnership K-1.

  2. 02Sort and indexยท AI agent, checked by OrchKernel

    Names each file by year, form and payer, and flags what is missing against last year: a second K-1.

  3. 03Prepare in the tax softwareยท AI agent, checked by OrchKernel

    Enters figures for the named preparer it acts for, each linked to its source page. The software calculates.

  4. 04Change listยท AI agent, checked by OrchKernel

    Lists every line that moved past the reviewer's threshold since last year. The K-1 loss is on it; last year it was income.

  5. Agents stop here. They have no tool to clear a review, sign, or transmit.
    05Reviewยท Firm staff and the tax software

    The reviewer clears the change list and the sampled fields. Nothing moves until every item is cleared.

  6. 06Signยท Firm staff and the tax software

    The preparer responsible for the return's overall accuracy signs it.

  7. 07Form 8879ยท Client

    The clients review the return and sign Form 8879.

  8. 08Transmitยท Firm staff and the tax software

    Staff at the electronic return originator transmit the return.

  9. 09Recordยท Firm staff and the tax software

    The log links each step to a person: who the agent acted for, what it touched, who cleared, signed and transmitted.

The tax software, the portal and the e-file system stay the record of the return. OrchKernel holds the record of what the agent asked to do, for whom, and who cleared it.
08

The staged path

Six stages, ordered by how far an agent's work travels: inside the firm, to clients on templates, into a return or ledger under review, and only then, for non-attest clients, on its own. Each stage is also tied to the calendar. Launch in the change window from May to early October, prepare and run in shadow from November, and freeze from mid-January to April 15.

  1. Jan
  2. Feb
  3. Mar
  4. Apr
  5. May
  6. Jun
  7. Jul
  8. Aug
  9. Sep
  10. Oct
  11. Nov
  12. Dec
Busy season: freeze
No process changes from mid-January to April 15.
Change window
Build, test and launch stages.
Extension peak
Extended returns. Finish changes by early October.
Shadow and prepare
Run new workflows on last season's files.
Fiscal-year clients, CAS closes and audits run on their own calendars, but the tax season sets when a firm can change how it works.
  1. 0

    Stage 0: Get the file in order

    Clean client records, write the AI policy, settle the consent question.

    When: May to June, or October to December

    What to do

    • Clean client records: entity, year end, states, an attest flag, authorized contacts, and 2848 or 8821 status by year.
    • List every AI feature already switched on, and every personal chatbot account staff use for work.
    • Write the AI procedures the IRS now expects: approved tools and models per kind of data, review duties, accuracy monitoring[12,13].
    • Add AI vendors to the written security plan, and confirm MFA everywhere[19,22].
    • Ask counsel which AI uses need Section 7216 consent.
    • Name AI among third-party service providers in the engagement letter[30].

    Why now

    Extraction is only as good as the client file, and the confidentiality duties apply from the first upload.

    In place first

    • Nothing. Every firm starts here.

    What to measure

    • Share of clients with complete records
    • Share of staff AI use on approved tools, from a short survey

    Common mistakes

    • Banning AI outright, so staff use personal accounts without telling anyone.
    • Buying a preparation tool before the client file is clean.
  2. 1

    Stage 1: Read, sort and draft inside the firm

    Nothing an agent produces reaches a client, a ledger or the IRS.

    When: Build in the change window; run in shadow in November; live for the new season with review

    What to do

    • Request lists from last year's return; upload sorting and a document index with a prior-year comparison.
    • K-1 tracking: which partnerships have sent theirs.
    • Notice intake: type, tax year, amount and response date, routed to a person.
    • Research drafts with citations, PBC lists rolled forward, engagement-letter rollovers.

    Why now

    This is the chase-and-key work that fills the calendar, and none of it leaves the firm. Users rate data import into tax software 3.4 out of 5[44]. It also builds the accuracy record Stage 3 needs.

    In place first

    • Agents read one client's file per task.
    • A model cleared for return information, every read logged.

    What to measure

    • Extraction accuracy, sampled weekly against source documents
    • Days from organizer to ready for preparation
    • Reviewer minutes per return: the baseline for Stage 3

    Common mistakes

    • Counting documents processed without sampling accuracy.
    • Letting a research draft reach a client unchecked. That is the Deloitte failure.
  3. 2

    Stage 2: Talk to clients on approved templates

    First contact with clients

    Reminders and status updates, never advice.

    When: Start in September or October, before organizers go out

    What to do

    • Missing-item reminders listing only what this client still owes.
    • Chasing 8879 and engagement-letter signatures; status updates.
    • Monthly CAS question lists, drafted for the staff accountant to send.

    Why now

    Late documents push returns into April and onto extension. And about 59% of tax-firm clients did not know whether their firm used generative AI (vendor survey)[49], so this is also the stage to tell them.

    In place first

    • Manager-approved templates; anything else goes to a person.
    • Return information sent only through the portal.

    What to measure

    • Days to complete document collection
    • Unsigned 8879s ten days before the deadline

    Common mistakes

    • Letting an agent answer a free-text tax question.
    • A reminder that names another client's documents. Test merge fields first.
  4. 3

    Stage 3: Agents prepare; people review and sign

    Agent work enters returns and ledgers

    Draft returns, entries and workpapers, each held for a named reviewer.

    When: Configure in the change window; run for the first full season after Stage 1 has a season of data

    What to do

    • Draft returns in the tax software, which calculates, with a change list and sources for each.
    • Proposed entries and reconciliations for CAS; draft workpapers and tests of detail for audit.
    • Draft notice responses and the extension list.

    Why now

    Stages 1 and 2 show where extraction is reliable, and the season brings the volume to measure. In one 2025 benchmark, frontier models calculated fewer than a third of federal returns correctly[46], so the agent drafts around the tax engine, not instead of it.

    In place first

    • Review thresholds and a daily release limit per reviewer.
    • No posting to attest clients' books without their recorded approval.
    • Agents act for a named preparer, within that person's access.

    What to measure

    • Reviewer minutes per return against the baseline
    • Review notes per return; returns amended; errors found after filing

    Common mistakes

    • Control dilution: more returns, the same reviewers, less scrutiny each.
    • Treating agent output as staff work under Circular 230 without the supervision records that reliance on others requires[11].
  5. 4

    Stage 4: Narrow autonomy for non-attest work

    Pre-approved classes of work run without a person first, then get sampled.

    When: After a full season of Stage 3 data; CAS changes in the change window

    What to do

    • For non-attest CAS clients who agree in writing, agents post recurring transactions that match approved rules (vendor, amount band, account), reviewed afterward.

    Why now

    It needs Stage 3 data showing low correction rates for each class. Independence rules rule it out for attest clients.

    In place first

    • Correction rates per class over a full close cycle, and an attest flag checked on every call.

    What to measure

    • Autonomous postings and corrections per class
    • Days to close. One field study found AI-using accountants closed 7.5 days sooner, on data from one software partner[45]

    Common mistakes

    • Extending a posting class to a client that is also an audit client.
    • No sampling of autonomous work once it looks routine.
  6. 5

    Stage 5: The AI-native operating model

    Staffing, training, pricing and quality management built around agents.

    When: Over two to three years, one change window at a time

    What to do

    • Redraw the pyramid: fewer data-entry roles, more reviewers and advisers.
    • Train juniors on checking agent work, so the experience still counts toward licensure.
    • Move to fixed or value fees, with a plain statement to clients about AI.
    • Put AI controls into the quality management system and its annual evaluation.

    Why now

    Without these, the time agents save turns into slack or into lower hourly bills. Of firms in the MAP Survey with a plan for freed capacity, 39% would add clients without adding staff and 45% would reduce hours; a third have no plan[31].

    In place first

    • Stage 3 running across the main service lines, with the log as the record.

    What to measure

    • Net client fees per professional and realization
    • Busy-season hours, turnover and client retention

    Common mistakes

    • Cutting junior hiring without a plan for where future reviewers come from.
    • Changing fees without being able to show the client what AI did on their work.
09

Your first 90 days

Written for a firm starting in October 2026. Ninety days ends just before busy season, so the plan ends with a freeze, not a launch. Most of October is partner and admin work, so it can run around the October 15 deadline for extended individual returns.

  1. Days 1 to 30 ยท October
    • Name the person who owns the firm's AI procedures under Circular 230 ยง10.36, and link the role to quality management.
    • Write the AI use policy: approved tools and models for each kind of data, no client data in personal chatbots, review duties.
    • Ask counsel the Section 7216 question, and add AI to the engagement letter's notice about third-party service providers.
    • List the AI features already switched on across your systems.
    • Pick two Stage 1 workflows for the coming season, such as request lists with upload sorting, and notice intake.
  2. Days 31 to 60 ยท November
    • Run both workflows in shadow on last season's files: the agent drafts, people compare.
    • Record extraction accuracy and every correction.
    • Start the log of agent actions by client.
    • Clean the client records behind your 50 largest returns: attest flag, 2848 or 8821, authorized contacts.
  3. Days 61 to 90 ยท December to early January
    • Turn on the two workflows for the new season, with review.
    • Prepare one Stage 2 workflow, 8879 and missing-document reminders, on approved templates.
    • Set up the kill switch and test it.
    • Freeze changes by mid-January. Decide what to widen after April 15, using the accuracy and reviewer-time data.
10

What not to fully automate

An agent can prepare each of these. A named person makes the decision and answers for it, however good the agent gets.

Signing a return as preparer
Why it stays with a person
The law names the individual "primarily responsible for the overall accuracy" of the return, and the penalties attach to that person[6,8].
Transmitting a return or extension
Why it stays with a person
Only after the client signs Form 8879, and the ERO answers for it[14].
Taking an uncertain position or giving written tax advice
Why it stays with a person
Written advice must rest on reasonable assumptions, and "if the system's logic is opaque, reliance may be unreasonable"[13].
Answering an IRS or state notice
Why it stays with a person
Representation is personal to the person the client authorized on Form 2848[16]. An agent can draft the response; the representative sends it.
Posting entries to an attest client's books
Why it stays with a person
Management must approve the classifications or the entries first, or independence is impaired[30].
Closing a period or issuing financial statements
Why it stays with a person
The client's management owns its financial statements; the firm owns its conclusion on the engagement. Both are judgments a person signs.
Concluding on audit evidence and signing the report
Why it stays with a person
Professional judgment under the auditing standards[35,38].
Client acceptance, independence and conflicts
Why it stays with a person
Quality management responsibilities[35], often resting on facts no system holds.
Sending client data to a new AI tool, model or offshore team
Why it stays with a person
Section 7216, the AICPA Code and the Safeguards Rule all turn on it[4,22,30].
Fees, scope changes and engagement letters
Why it stays with a person
Pricing judgment, and now the ยง10.27 question the IRS and the AICPA disagree about[13,40].
Telling a client about an error or a breach
Why it stays with a person
A professional and legal duty, with timing that may involve law enforcement and the IRS[18].
Changing what an agent may do
Why it stays with a person
Agent playbooks are firm procedures under Circular 230 ยง10.36[12] and belong in change management[42].
11

Control dilution: the risk sits at the reviewer's desk

Danny Werfel, a former IRS Commissioner, gives the main risk a name. Control dilution is when "the speed and volume AI introduces causes existing review and sign-off processes to become less rigorous in practice, even if they remain unchanged on paper. More returns get processed with less scrutiny per return." He describes the matching failure at the junior level, when "a junior associate accepts the AI suggestion without independent verification"[43].

Nothing in the firm's procedures changes when this happens, which is why it is easy to miss. The bottleneck and the main risk sit at the same desk. The figure below uses round numbers to show the mechanism.

Illustration, not a forecast: one reviewer through one season

Without a gate

Everything agents prepare goes straight to the reviewer.

  • Early February
    60 returns
    40 h
    40 min
  • Early March
    120 returns
    40 h
    20 min
  • Early April
    180 returns
    40 h
    13 min
With a gate

Release to review is capped at what the reviewer can clear at 40 minutes a return.

  • Early February
    60 returns
    40 h
    40 min
  • Early March
    60 returns
    40 h
    40 min

    60 of this week's returns wait: add a reviewer, extend, or reprioritize

  • Early April
    60 returns
    40 h
    40 min

    120 of this week's returns wait: add a reviewer, extend, or reprioritize

Returns sent to review that weekReview hoursReview minutes per return, fallingReview minutes per return, held
Illustration, not a forecast. Round numbers for one reviewer with 40 review hours a week; no public data gives review time per return.

What the gate does. It does not make reviewers faster. Each reviewer gets a daily release limit, and every return arrives with its change list, sources and a sample of unchanged fields to check. When prepared work outruns review, the queue grows where a partner can see it, and the firm decides: add a reviewer, extend, or reprioritize. Without the gate, reviewers make that choice silently by spending less time on each return.

Measure reviewer minutes per return from Stage 1. If the number falls in Stage 3, be able to say why, and show that post-filing errors did not rise.

12

When it goes wrong

The loudest AI failures in this sector so far are reports, not returns. Each real case below is tied to the control point that addresses it.

  1. Deloitte Australia: a government report with invented references

    The A$440,000 report from the opening cited papers that do not exist and misquoted a federal judge. Deloitte refunded the final installment[62]. The IRS cites the case in its 2026 AI guidance[13].

    The control: Sources checked before anything leaves the firm, and the deliverable waits for a named reviewer (control 12).

  2. Deloitte Canada: the same failure, months later

    A health workforce plan for Newfoundland and Labrador, costing nearly CA$1.6 million, contained at least four citations to papers that do not exist[63].

    The control: Same as above: sources checked and a named reviewer on every deliverable before it leaves the firm (control 12).

  3. KPMG withdraws a report on agentic AI

    KPMG pulled a report on agentic AI in June 2026 after citation problems, and organizations it named said its statements about them were untrue or misleading[64].

    The control: Client-facing and public content waits for review with sources checked (control 12).

  4. A KPMG Australia partner fined for using AI on an AI training test

    The partner was fined A$10,000, and about two dozen others were found doing the same, as reported in February 2026[65].

    The control: Competence shows in reviewed work, not course completions; the log shows who reviewed what.

  5. Bench shuts down overnight

    The venture-backed bookkeeping and tax firm closed on 27 December 2024 after burning $135 million; thousands of businesses lost access to their accounting and tax documents until a buyer stepped in[66,67].

    The control: Clients' books stay in their own ledgers, exportable (control 18).

  6. Tax professionals as targets

    The IRS warns that criminals go after tax professionals for client data "to file fraudulent tax returns"[18]. An agent with standing access to every client file is one more target.

    The control: Agents never hold credentials; every read is logged by client (controls 4 and 14).

Agent failures to design against (scenarios)

Scenarios, not reported events, each mapped to the control that stops it.

A. The misread K-1
What happens
An agent reads a box 1 loss as income on a scanned K-1, and a busy reviewer approves the plausible draft.
What stops it
Each figure links to its source; changes above the reviewer's threshold must be cleared before signature (controls 8 and 9).
B. The borrowed paragraph
What happens
A research agent reuses facts from one client's planning memo in another's.
What stops it
One client's file per task, every read logged (control 4).
C. The helpful post
What happens
A CAS agent posts a month of transactions for a client that is also an audit client.
What stops it
Posting is denied for attest-flagged clients without their recorded approval (control 10).
D. The offshore view
What happens
A review packet with SSNs goes to the offshore review queue.
What stops it
SSN fields are masked for offshore roles and uncleared models (control 3).
E. The email that gives orders
What happens
A message posing as the client asks for last year's return and W-2s at a new address.
What stops it
Sending return information outside the portal needs approval of the exact recipient; new addresses go to a person (controls 2 and 11).
F. The rush to transmit
What happens
On April 15 an agent queues 40 returns for e-file; 3 have unsigned 8879s.
What stops it
Agents have no transmit tool, and a rule checks for a signed 8879 first (controls 6 and 7).
G. The soft fee
What happens
An agent drafts invoices from time entries without noting that half the work was agent-prepared.
What stops it
Invoices show agent and staff work, and a partner approves each (control 13).
13

Rules that reach accounting firms

No rule bans AI in this work, and none moves a duty to the software. The 2026 IRS guidance applies existing Circular 230 duties to AI[13], and the AICPA and Werfel have formed a council to refine his risk framework[41].

The hardest open question is the first. Section 7216 allows disclosure to software contractors but says nothing about a hosted model that drafts work. Until counsel or the IRS says otherwise, treat it as a disclosure that may need the taxpayer's consent. The IRS guidance adds that client data must be handled "using only secure, enterprise-approved AI"[13].

Tax return information: use, disclosure and consent

IRC 7216 and 6713[1,2]
What it asks
No disclosure of return information, and no use "for any purpose other than to prepare, or assist in preparing" a return. Civil penalty: $250 per disclosure or use, up to $10,000 a year ($1,000 and $50,000 where identity theft is involved); criminal penalties on top.
Status
In force.
Disclosures without consent, 26 CFR 301.7216-2(d)[3]
What it asks
Allowed to a preparer "located in the United States" for help that is not a substantive determination, and to contractors for "programming, maintenance, repair, testing, or procurement of equipment or software", with written notice of the penalties to each person who receives it.
Status
In force.To be confirmed: whether a hosted AI model provider fits the contractor exception. Neither the regulation nor any IRS guidance we found says.
Taxpayer consent, 26 CFR 301.7216-3, and Rev. Proc. 2013-14[4,5]
What it asks
Written, knowing and voluntary consent, separate for uses and for disclosures. For Form 1040 filers, Rev. Proc. 2013-14 sets mandatory statements and requires an affirmative consent, not an opt-out.
Status
In force.
Social Security numbers outside the US, 26 CFR 301.7216-3(b)(4)[4]
What it asks
A US preparer "may not obtain consent" to send a Form 1040 filer's SSN to a preparer abroad; it must be masked. The narrow exception needs "an adequate data protection safeguard" defined in IRS guidance, and verification that it is maintained.
Status
In force.To be confirmed: which Internal Revenue Bulletin guidance currently defines an adequate safeguard.

Practitioner duties and the 2026 IRS AI guidance

IRS Office of Professional Responsibility AI guidelines[13]
What it asks
Applies Circular 230 to AI: human review of AI output (ยง10.22), fees that reflect AI savings (ยง10.27), understanding "both the law and the technology" (ยง10.35), written firm procedures for AI (ยง10.36), and no reliance on opaque logic for written advice (ยง10.37). It warns against one client's data informing another's answer.
Status
Guidance of 24 June 2026, not a regulation. The AICPA disputes the fee language[40].To be confirmed: whether the ยง10.22(b) standard for relying on others' work applies to agent output.

Signatures, e-file, penalties and records

Signing preparer, 26 CFR 1.6695-1 and IRC 6695[8,9,10]
What it asks
The individual "primarily responsible for the overall accuracy" signs. The regulation still shows $50 and $25,000; adjusted for inflation, failing to sign costs $65 a return, up to $32,500 a year for returns filed in 2026 and $33,000 for 2027.
Status
In force.
Preparer understatement penalty, IRC 6694[6]
What it asks
An unreasonable position costs the preparer the greater of $1,000 or 50% of the income from the return. An AI-suggested position is still the preparer's.
Status
In force.
IRS e-file, Publication 1345[14]
What it asks
The taxpayer signs Form 8879 before transmission, and software must "not allow tax return transmission until Form 8879 is signed". The ERO keeps it for three years.
Status
Rev. 12-2025, current for the 2026 season.
Preparer records, IRC 6107[7]
What it asks
Keep a copy or a list of returns prepared for three years after the close of the return period.
Status
In force.
Representation and transcripts: Form 2848, the Transcript Delivery System and e-Services[15,16,17]
What it asks
Transcripts need a Form 2848 or 8821 on file. e-Services users accept terms of agreement at sign-in.
Status
In force.To be confirmed: whether the terms allow an agent to use a practitioner's login or pull transcripts. Assume not.

Professional standards: confidentiality, independence and quality

AICPA Code: third-party service providers, ET 1.150.040 and 1.700.040[30]
What it asks
Before a service provider sees client information, "inform the client, preferably in writing", and hold a confidentiality agreement or the client's consent. Administrative support, such as hosting or e-file transmittal, is exempt from the notice.
Status
Updated through September 2026.To be confirmed: whether an AI model provider used to draft work counts as administrative support or as a service provider. Treat it as a service provider.
AICPA independence for attest clients, ET 1.295.120 and 1.295.143[30]
What it asks
Recording to an attest client's ledger needs management to have "determined or approved the account classifications", and proposed entries need management's review first. Hosting the client's only copy of its records impairs independence.
Status
In force.
AICPA SQMS No. 1 and PCAOB QC 1000[35,36,37]
What it asks
A quality management system for attest work, with the managing partner ultimately responsible. AI tools sit inside it.
Status
SQMS 1 effective 15 December 2025, first evaluation by 15 December 2026. QC 1000 effective 15 December 2026, with simplifying amendments adopted in September 2026.To be confirmed: SEC approval of the September 2026 QC 1000 amendments (the PCAOB site could not be opened), and the exact SQMS 1 wording on technological resources.
PCAOB AS 1105, technology-assisted analysis[38]
What it asks
Auditors evaluate the reliability of electronic company information used in technology-assisted analysis.
Status
Effective for fiscal years beginning on or after 15 December 2025.
Audit documentation retention[24]
What it asks
Public-company audit and review records: seven years after the work concludes.
Status
In force.To be confirmed: the five-year minimum for private-company audits under AU-C 230 (the AICPA text sits behind a login).
Private equity and independence: PEEC exposure draft[39]
What it asks
Would redefine "network firm" for alternative practice structures, which matters if the attest firm and its investor-owned sister share an AI platform.
Status
Exposure draft voted 19 December 2025; comments closed 30 April 2026.To be confirmed: whether it has been adopted, and from when.

Data security and state law

FTC Safeguards Rule, 16 CFR 314[22,23]
What it asks
Covers tax preparers. A Qualified Individual, MFA for "any individual accessing any information system", logging of authorized users' activity, vetted service providers, and FTC notice within 30 days of a breach affecting 500 or more consumers.
Status
In force; breach notice since May 2024.
Written information security plan and PTIN renewal[19,20]
What it asks
FTC rules require a written security plan. The October 2025 Form W-12 asks PTIN applicants to acknowledge that.
Status
In force.To be confirmed: the first PTIN season that carried the acknowledgement.
State AI laws: California, Colorado, Illinois, Utah[13]
What it asks
The IRS notes these AI laws. Most target consequential decisions about consumers or employment.
Status
Varies by state.To be confirmed: whether any reaches routine tax and accounting work. Check each state where you or your clients operate.

Outside the US, for firms with UK or EU work

EU AI Act, Article 4[29]
What it asks
Deployers must support the AI literacy of staff who use AI systems.
Status
Applies from 2 February 2025.To be confirmed: that routine accounting uses fall outside the high-risk list.
IESBA technology revisions[48]
What it asks
Technology changes to the international ethics code.
Status
Effective 15 December 2024.
UK FRC guidance on AI in audit
What it asks
Reported as published in June 2025.
Status
Not opened.To be confirmed: what it asks of audit firms.

What they have in common

Across these rules, four requirements keep recurring. The exact obligation differs by rule and by service, but a firm that builds these four for every client has the base the others extend.

Use client data for that client's work
Section 7216, the IRS warning about cross-client data and AICPA client notice[1,13,30]. For agents: one client per task, cleared models per kind of data.
A named person answers for it
The signing preparer, the ERO, the managing partner for quality[8,14,35]. No duty moves to the agent.
Keep the evidence
Log user activity[22], keep returns or a list for three years[7] and public audit records for seven[24].
Tell the client
Consent beyond the return[4], notice of service providers[30], and fees that reflect AI[13].
14

How roles, training and pricing change

Preparers become checkers of agent drafts

The junior job moves from keying to verifying each figure against its source and explaining every change from last year. That is the job that prevents Werfel's failure case[43], and it has to be taught to people who have never prepared a return by hand.

Reviewers become the constraint to manage

Reviewer hours are the scarce input, so they get planned like a budget: release limits, change lists, sampling, and a weekly look at minutes per return. Partners remain the owners of judgment and signature, unchanged in law; the IRS says "final decisions must always rest with qualified professionals"[13].

A new owner for AI procedures

Circular 230 already puts procedures on whoever has "principal authority and responsibility for overseeing a firm's practice"[12], and SQMS No. 1 makes the managing partner ultimately responsible for the quality system[35]. Someone has to own the approved tools, the agent playbooks and the evidence, and put widely used AI tools through change management[42]. In a 20-person firm that is part of a partner's job.

Juniors still need two years that count

The AICPA and NASBA have added a licensure path of a bachelor's degree, two years of experience and the exam, enacted in 14 states by May 2025[33]. If agents absorb the first drafts that used to be that experience, the firm has to design work that still teaches and still qualifies. No source we found defines what qualifying experience looks like when agents prepare the first draft. Only 5% of firms in the MAP Survey had formal training for staff moving into new roles[31]. Cutting junior hiring without a plan means fewer reviewers in five years.

Offshore teams change role

Offshore staff can cost "as little as 25%" of a US hire, according to one conference speaker[34], an anecdote rather than data. Agents now take on much of the data entry those teams did, and the SSN rule limits what offshore staff can see[4], so field-level masking is what keeps them useful for review support.

The fee debate

The IRS guidance says billing for "time that was not actually spent or double billing for AI-assisted tasks may violate ยง 10.27", and that cost reductions should be credited to the client[13]. The AICPA answers that this ignores value pricing and the cost of AI itself; it has asked the IRS for clarification, and its CEO called the language not authoritative[40]. In the 2025 Thomson Reuters survey, 6% of tax firms expected rates to rise significantly and 37% slightly, and 25% planned to pass AI costs through to all clients (vendor survey)[49].

Whatever your pricing, be able to show a client what AI did on their work and how the fee reflects it. That record is cheap to keep if every agent action is already logged by client.

15

The OrchKernel blueprint for an accounting firm

OrchKernel is the layer between AI agents and the systems a firm runs on, as described in the missing layer. Agents ask it before they act; it checks the rules, holds what needs a person, and records what happened.

What it is not. OrchKernel does not replace the tax software, the general ledger, practice management, the portal or the audit platform; they stay the systems of record. It does not calculate tax, transmit returns or sign anything.

The mechanisms

Approvals
The action waits for a named person, who sees exactly what will happen: the change list, the entries, the message, the recipient. It runs once, as approved.
Rules
Checked on every call, for example a signed 8879 on record before a transmission request, or no posting for attest-flagged clients. A rule allows, holds or denies, with a reason.
Acting on a named person's authority
Each agent acts for a named preparer or accountant, with no more access than that person has. Remove the person's access in OrchKernel and the agent loses it too.
Data access by role and field
One client's file per task; SSN fields hidden from offshore roles and uncleared models.
Tamper-evident audit log
Every request, decision, approval and result, by client, chained so an edited or deleted entry shows.
Human queue
Low-confidence extraction, free-text client questions, notices and unknown senders land with a named owner.
Kill switches
Stop agents for one service line, one client or the whole firm, at once.
Connections to your systems
The firm connects practice management (such as CCH Axcess Workflow, Karbon, Canopy or TaxDome), the portal, document storage, email, clients' ledgers (QuickBooks Online, Xero, Sage Intacct, NetSuite) and audit tools, through MCP servers or REST adapters. Many desktop tax engines offer little or no API, so that connection may be an import or export file. Agents never hold the credentials.

Eighteen control points

The controls a firm needs whatever tools it uses, who owns each, and what enforces it.

Client data and consent

01
Return information used only for the client's return; any other use needs a recorded Section 7216 consent
Owner or approver
Tax partner and the AI lead
What enforces it
Rules check for a recorded consent first. Whether it is valid is for counsel.
02
Disclosure outside the firm (new tools, models, contractors, offshore teams) with notice or consent
Owner or approver
Managing partner and the Qualified Individual
What enforces it
Rules allow only approved models and recipients per kind of data; adding one needs approval.
03
SSNs of individual filers never reach offshore roles or uncleared models
Owner or approver
Data owner
What enforces it
Data access by field: SSNs masked for those roles and models.
04
One client's data per task
Owner or approver
AI lead
What enforces it
Data access by client. Every read is logged against the client.

Authority, signatures and filing

05
Agents act under a named preparer's authority; transcript requests only with a 2848 or 8821 on file
Owner or approver
Engagement owner
What enforces it
Acting on a named person's authority, plus a rule on the authorization.
06
No agent signs, transmits or submits a return, extension, notice response or 2848
Owner or approver
ERO and the tax partner
What enforces it
Agents are given no signing or transmit tool. The request goes to staff.
07
A signed Form 8879 on record before any transmission request
Owner or approver
ERO
What enforces it
A rule checks the live record; the e-file software's own block stays.

Review and independence

08
A review gate for every prepared return, entry, workpaper and memo, with sources and a change list
Owner or approver
Reviewer of record
What enforces it
Approval: the reviewer clears the change list before the item moves on.
09
Per-reviewer limits and sampling, so volume cannot thin review
Owner or approver
Tax and audit partners
What enforces it
Rules cap release at each reviewer's limit; the backlog shows in the human queue.
10
Attest clients' books: no agent posting without the client's recorded approval
Owner or approver
Engagement partner
What enforces it
Rules deny posting for attest-flagged clients without that approval.
12
Citations and sources checked before research, memos or reports leave the firm
Owner or approver
Reviewer of record
What enforces it
Approval before release; the log shows who checked.

Clients and fees

11
Client messages only on approved templates; free text goes to a person; AI use disclosed
Owner or approver
Manager
What enforces it
Rules allow templates; anything else is held for approval.
13
Invoices show agent and staff work, and a partner approves them
Owner or approver
Billing partner
What enforces it
Approval on every invoice, showing the agent's share.

Records, change and stopping

14
A tamper-evident record of agent actions, kept as long as the work it supports
Owner or approver
Quality management owner
What enforces it
The tamper-evident log, exportable per client or engagement.
15
Changes to agents reviewed before going live and recorded in the quality system
Owner or approver
AI lead and the quality management owner
What enforces it
Approval before a change goes live; the log records which version acted.
16
A kill switch per service line and firm-wide, usable in busy season
Owner or approver
Any partner
What enforces it
Kill switches, tested before the freeze.
17
Breaches and errors reach a person, then the FTC, IRS and state steps
Owner or approver
Qualified Individual
What enforces it
Human queue at once, with the log as evidence.
18
Clients' books and documents stay exportable from their own systems
Owner or approver
Managing partner
What enforces it
Partly: OrchKernel keeps no client books. Exportability is a vendor-contract question.

What belongs elsewhere

The tax calculation
Stays in the tax engine.
E-file, Form 8879 and identity checks
Stay in the ERO's software and portal.
The workpaper archive
Stays in the audit and document systems. OrchKernel's log is not the binder.
Firm processes
Independence checks, acceptance, peer review and quality documentation. OrchKernel supplies evidence.
Legal documents
Consent wording, engagement letters, AI vendor contracts.
People's credentials
PTINs, EFINs, CAF numbers and e-Services logins never go to agents.

OrchKernel is source-available under the Business Source License 1.1 and runs on your own servers, so you can read the code that enforces these controls. Running it in production for your own firm is covered; the license page says what needs a commercial license.

16

Scorecard by stage

Record the baseline before Stage 1, then track the same numbers at each stage. Public benchmarks barely exist for this sector: the MAP Survey detail is for AICPA members, and other benchmark studies are paid. We have not quoted any number we could not source.

Complete client recordsStage 0
How to count it
Share of clients with entity, attest flag, contacts and a current 2848 or 8821
Public benchmark
No public benchmark
Extraction accuracyStage 1
How to count it
Fields matching the source document, from a weekly sample
Public benchmark
No public benchmark. Vendor case studies only, such as prep hours on large K-1 returns falling from over 100 to 15 or 20[52]
Document collectionStage 2
How to count it
Days to a complete file; share of clients complete by the firm's date
Public benchmark
No public benchmark
Unsigned 8879sStage 2
How to count it
Count ten days before each deadline
Public benchmark
No public benchmark
Reviewer minutes per returnStage 3
How to count it
Review time logged per return, against the Stage 1 baseline
Public benchmark
No public benchmark. The MAP Survey has utilization data for members[31]
Errors after filingStage 3
How to count it
Returns amended, and notices traced to a preparation error
Public benchmark
No public benchmark
Days to close (CAS)Stage 3
How to count it
From period end to the client's reports
Public benchmark
Independent analogue: 7.5 days faster and 55% more clients supported each week for accountants using AI, on data from one software partner[45]
Autonomous postings and correctionsStage 4
How to count it
By class of transaction and by client
Public benchmark
No public benchmark
Fee growth and owner economicsStage 5
How to count it
Net client fees per professional, realization, net remaining per owner
Public benchmark
MAP medians only: net client fee growth 6.7% and net remaining per owner $252,663 in the 2025 survey; detail is for members[31]
17

Sources and further reading

Sources were read in October 2026; dates are publication or data dates. Last reviewed October 2026.

Primary sources

Statutes, regulations, IRS and FTC publications, Bureau of Labor Statistics data and SEC filings. Statutes and regulations are read in the Cornell Legal Information Institute copy; the EU AI Act in an unofficial copy.

  1. 1
    26 USC 7216: disclosure or use of information by preparers of returns. Legal Information Institute, Cornell Law School.
  2. 2
  3. 3
  4. 4
  5. 5
    Rev. Proc. 2013-14: consent to disclose or use Form 1040 tax return information. Internal Revenue Service, Internal Revenue Bulletin 2013-3, January 2013.
  6. 6
    26 USC 6694: understatement of taxpayer's liability by tax return preparer. Legal Information Institute, Cornell Law School.
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
    31 CFR 10.22 (Circular 230): diligence as to accuracy. Legal Information Institute, Cornell Law School.
  12. 12
    31 CFR 10.36 (Circular 230): procedures to ensure compliance. Legal Information Institute, Cornell Law School.
  13. 13
    Introductory guidelines for responsible AI use in federal tax practice. IRS Office of Professional Responsibility, 24 June 2026.
    Guidance, not a regulation
  14. 14
  15. 15
    Transcript Delivery System (TDS). Internal Revenue Service.
  16. 16
  17. 17
    e-Services. Internal Revenue Service.
  18. 18
  19. 19
    Protect your clients; protect yourself. Internal Revenue Service.
  20. 20
  21. 21
    Filing season statistics for week ending April 17, 2026. Internal Revenue Service, April 2026.
  22. 22
  23. 23
  24. 24
    17 CFR 210.2-06: retention of audit and review records. Legal Information Institute, Cornell Law School.
  25. 25
    Occupational Outlook Handbook: accountants and auditors. US Bureau of Labor Statistics, data for 2025.
  26. 26
  27. 27
    CBIZ, Inc. annual report on Form 10-K for 2025. US Securities and Exchange Commission, EDGAR, filed 26 February 2026.
  28. 28
    Andersen Group annual report on Form 10-K for 2025. US Securities and Exchange Commission, EDGAR, filed 27 March 2026.
  29. 29
    EU AI Act, Article 4: AI literacy. artificialintelligenceact.eu (unofficial copy of Regulation (EU) 2024/1689), applies from 2 February 2025.

Industry bodies and independent research

The AICPA Code, the Journal of Accountancy and The Tax Adviser (both AICPA & CIMA publications), IESBA, and academic research.

  1. 30
    AICPA Code of Professional Conduct. AICPA, updated through September 2026.
    ET 1.150.040, 1.295.120, 1.295.143 and 1.700.040
  2. 31
    MAP Survey finds big jumps in CPA firm starting pay. Journal of Accountancy, September 2025.
    Summary of the AICPA/CPA.com MAP Survey; the full survey is for members
  3. 32
    The accounting graduate pipeline: where do things stand?. Journal of Accountancy, October 2025.
  4. 33
    AICPA, NASBA approve new CPA licensure path. Journal of Accountancy, May 2025.
  5. 34
    The case for outsourcing: 3 ways to win. Journal of Accountancy, July 2025.
  6. 35
  7. 36
  8. 37
    PCAOB finalizes simplified quality control amendments. Journal of Accountancy, September 2026.
  9. 38
  10. 39
  11. 40
    AICPA seeks IRS clarity on AI guidelines, CPA fees. Journal of Accountancy, September 2026.
  12. 41
  13. 42
    New checklist helps CPAs manage AI cyber risks. Journal of Accountancy, October 2026.
  14. 43
    A risk framework for AI use in tax administration and preparation. Danny Werfel, The Tax Adviser, August 2026.
  15. 44
    2026 tax software survey. The Tax Adviser, August 2026.
    1,808 CPA tax preparers, June 2026
  16. 45
    Human + AI in accounting: early evidence from the field (working paper 4261). Jung Ho Choi and Chloe Xie, Stanford Graduate School of Business, 7 May 2025.
    Transaction data from one AI software partner
  17. 46
    TaxCalcBench: evaluating frontier models on the tax calculation task. arXiv 2507.16126, 22 July 2025.
    Authors work for a tax software company
  18. 47
    Law and order: tax law autoformalization. arXiv 2610.02792, 2 October 2026.
    Preprint, 51 held-out returns
  19. 48
    Final pronouncement: technology-related revisions to the Code. International Ethics Standards Board for Accountants, 11 April 2023.

Vendor sources

Published by companies that sell AI or software to accounting firms, including the Thomson Reuters surveys. Directional, not an industry benchmark.

  1. 49
    2025 Generative AI in Professional Services report. Thomson Reuters Institute, 2025.
    Vendor sourceSurvey by a company that sells AI tax products; respondents screened for familiarity with AI
  2. 50
    2026 AI in Professional Services report. Thomson Reuters Institute, 2026.
    Vendor sourceSurvey by a company that sells AI tax products
  3. 51
    State of AI in Accounting 2026. Karbon, 2026.
    Vendor source
  4. 52
  5. 53
  6. 54
    Black Ore emerges from stealth with $60 million in funding. Black Ore, 7 November 2023.
    Vendor source
  7. 55
    CoCounsel for tax and accounting. Thomson Reuters.
    Vendor source
  8. 56
    Rillet raises $100M Series C at $1B valuation. Rillet, 17 August 2026.
    Vendor source
  9. 57
    Fieldguide: audit and advisory platform. Fieldguide.
    Vendor source
  10. 58
    Building the agentic firm. Fieldguide, 12 August 2026.
    Vendor source
  11. 59
  12. 60
    Karbon AI. Karbon.
    Vendor source
  13. 61
    Canopy practice management. Canopy.
    Vendor source

Company and press

Company announcements, news coverage and encyclopedia summaries.

  1. 62
  2. 63
    Major N.L. healthcare report contains errors likely generated by A.I.. The Independent (Newfoundland and Labrador), 22 November 2025.
  3. 64
  4. 65
    KPMG. Wikipedia.
    Secondary source; cites The Guardian, 16 February 2026, which we could not open
  5. 66
  6. 67
    Bench Accounting. Wikipedia.
    Secondary source
  7. 68
  8. 69
  9. 70
  10. 71
    Thrive Holdings fundraise. Thrive Holdings, 12 August 2026.
  11. 72
    Thrive Holdings x OpenAI. Thrive Holdings, 1 December 2025.
  12. 73
  13. 74
  14. 75
    Grant Thornton LLP. Wikipedia.
    Secondary source; cites the Financial Times
  15. 76
    Moss Adams. Wikipedia.
    Secondary source

Become a design partner

Run Stage 0 and one Stage 1 workflow on your own files with us, in the change window, before the next busy season. You get early access, help with setup, and a say in what we build next.

Or email support@prefero.ai