Security & Technology

Your Clients' Financial Data, Handled Under Controls a CPA Firm Can Put in Front of a Peer Reviewer

A locked-down delivery environment, controlled physical access, and a review protocol you can put in front of a peer reviewer.

The first question a partner asks is not what software we run. It is where the data goes, who can reach it, and what happens on the day someone leaves. Those are the answers below.

Our professionals work in a locked-down remote environment: your systems, our controls, nothing resting on a local machine. The technology matters, but it is in service of that — not the other way round.

Independently audited

AICPA / SOC 2Certified

Security, availability and confidentiality

An independent auditor has tested the controls we describe on this page, rather than taking our word for them.

ISO/IEC 27001Certified

Information Security Management

The international standard for managing information security: documented policy, assessed risk, defined controls, and an audit that checks we still follow them.

Doing due diligence, or answering a client’s questions about who handles their data? Ask us and we will send the certification documentation, our access model and the confidentiality arrangements for your file.

Information Security

The Controls That Govern Every Engagement

Client financial data is the most sensitive thing a firm hands to a staffing partner. These are the specific controls that apply, not a description of our intentions.

Secure remote desktop environment

Work happens inside a controlled remote session against your systems. No client data is stored on the workstation in front of the professional.

USB and data ports disabled

Removable media is blocked at the device level. There is no route for a file to leave on a memory stick.

Restricted physical access

The delivery floor is access-controlled. Entry is limited to staff assigned to client work.

24/7 monitoring

The environment is monitored around the clock, so an anomaly is caught when it happens rather than at the next review.

Confidentiality agreements and access control

NDAs signed at organisation level and individually by every professional on your engagement, with least-privilege access provisioned per engagement and revoked on exit.

Layered review before delivery

Preparer, reviewer and engagement manager sign off before anything reaches your desk.

Technology

We Work in Your Systems, Not Ours

No migration, no parallel chart of accounts, and nothing your clients would notice. Automation is used where it removes error — it is not what we sell.

Remote access to your own environment

General ledger, tax, payroll and workpaper platforms

Multi-entity and multi-state reporting

Reporting packs to your format and calendar

Automation used where it removes error, not as a selling point

Software

We Work in Your Software

Our professionals work in the platforms U.S. firms actually run — general ledger, tax preparation, workpapers and payroll. You do not migrate, you do not retrain your staff, and your clients never see a change in how their work is handled.