Security and compliance
Client data security, taxpayer consent, e-file authorization and preparer responsibility for US tax firms. Related service: How Tax Brew handles client data.
Other topics: US CPA firm operations · UK practice and MTD · Bookkeeping and payroll · US tax preparation
IRS e-file Provider Roles and EFIN: ERO, Transmitter, Online Provider—What US CPA Firms Need
IRS e-file provider roles, EFIN vs PTIN, ERO suitability, and Pub. 1345 rules US CPA firms need.
Form 8879 and §7206(1): United States v. Abramson E-File Authorization Guide for US CPA Firms
Form 8879 and §7206(1): 7th Cir. affirms Abramson tax-fraud convictions—signing e-file authorizations is making and subscribing for CPA firms.
Paid Preparer Due Diligence and Form 8867: What the 2026 Pub 4687 and Draft Checklist Mean for US CPA Firms
Paid preparer due diligence for EITC, CTC, AOTC and HOH: Pub 4687 (Rev. 9-2026), new draft Form 8867 SSN questions, and the $650–$665 penalty.
Taxpayer Confidentiality After TIGTA’s UNAX Report: §6103, §7213A, §7431 and What US CPA Firms Should Tell Clients
Taxpayer confidentiality after TIGTA’s IRS UNAX report: 86 suspicious accesses, §6103, §7213A, §7431 damages and a CPA firm checklist.
AI Tools, Offshore Teams and Section 7216: A Compliance Checklist for US CPA Firms
Circular 230 responsibility and IRC §7216 consent when CPA firms use AI tools or offshore and outsourced preparers: a practical checklist.
Your Firm's WISP: A Practical Guide to the FTC Safeguards Rule and IRS Security Six
Why tax firms need a written information security plan under the FTC Safeguards Rule, what it should cover, and IRS Pub. 4557 and Pub. 5708 basics.
Ghost Preparers and Preparer Responsibility: Lessons for CPA Firms from Recent IRS-CI Cases
What recent IRS Criminal Investigation preparer cases show about ghost preparers, client responsibility, due diligence and review standards for CPA firms.
Checking how an outsourcing partner handles client data?
We sign a mutual NDA before any client data is shared, work inside your own software, follow your firm’s IRC §7216 consent process and offer a UK GDPR data processing agreement on request.
Read how we handle client data How the free trial works