Security
What happens to the data, in plain terms
Offshore delivery raises a fair question about where client information goes. These are the controls we work to, and the ones that remain yours.
Controls
How client data is handled
Access is granted by you, and withdrawn by you
We work inside your accounting or tax software as a named user that you create. There is no separate copy of your data to retrieve, and removing the user ends our access immediately.
No client files on local machines
Working files stay in your systems. Where a document has to be exchanged, it goes through the channel you nominate rather than personal email or consumer file sharing.
Multi-factor authentication
Every account used to reach a client system is protected by multi-factor authentication, and access is limited to the staff assigned to your work.
Confidentiality in writing, before anything moves
A confidentiality agreement is signed before the first file is opened. Named staff are bound by it individually, not only the firm.
Consent for offshore processing sits with the CPA
US rules require the client’s consent before return information is disclosed to a preparer outside the United States. That consent is obtained by the CPA firm. We can supply draft wording; your own counsel should confirm it.
What we are not
The limits, stated up front
We are a chartered accountancy practice in India. We do not hold a PTIN or an EFIN, do not sign or file US returns, and are not a CPA firm licensed in any US state. Return preparation is performed as support to a licensed CPA who reviews and signs the work. Bookkeeping is performed directly, and bookkeeping is not tax advice. Nothing on this site is an offer to practise before the IRS.