Client trust is your firm's asset before it is ours. These are the controls we'd want applied to our own files — stated plainly, with nothing hedged.
A bookkeeper sees the client engagements they are actively assigned to, and nothing else. Access is logged and revoked when the engagement ends. It's the same principle any good audit trail is built on: if a question ever comes up about who could have touched a file, there's exactly one answer — not a team's worth of guesses.
We do not train models on your clients' books. Categorization draws on that client's own transaction history and general vendor reference data — never another firm's file, and never in aggregate for model training of any kind.
Each client's records are isolated by the database itself, not by an application rule that a query can forget. An application-level filter is one missed condition away from a mistake; isolating at the database means a bug in how one file is queried has no path to another client's records at all.
Work happens inside access-controlled sessions. No client file is downloaded to a personal machine. There's no laptop, personal drive, or email attachment anywhere in the chain to lose, sync, or leave behind — if a bookkeeper's own device is ever compromised, there's no client file on it to compromise.
Signed before any file, credential, or export changes hands — including on a pilot engagement. Mutual means it runs both directions: your client's data is protected on our side, and your firm's own pricing and process are protected on ours, before either side has committed to anything.
Records are held for the period your engagement letter specifies, then returned and deleted on request. There's no default of holding data indefinitely to negotiate down from — the retention clock starts at the engagement letter, not at whenever someone remembers to ask.
No tax return information is disclosed to us without a signed Section 7216 consent on file first. Section 7216 is the federal statute governing how tax return information can be used or shared by preparers and the firms working alongside them — the same standard your own procedures are already built around, applied to us as a matter of course rather than an exception.
Ask us anything on this page directly — specifics, not marketing language.
Kinshiro