Begin with questions your finance team can verify
Evaluate an accounting assistant against a small set of records your team understands. Choose a bank balance, an unpaid customer invoice, a supplier bill, and a completed monthly report. Write the expected answer and its source before asking the assistant. A fluent explanation is useful only when the amount, entity, period, and accounting meaning are right.
NIST's AI Risk Management Framework organizes the work of identifying and managing AI risks. For a buyer, a practical application is to test the intended task and the consequences of getting it wrong. Answering where a document is stored and authorizing a vendor payment deserve different evaluation requirements. Decide which tasks the assistant will be allowed to perform before judging its overall usefulness.
References: NIST: AI Risk Management Framework
Questions 1 to 5: evidence and numerical accuracy
Build the first test around ordinary finance questions, then add one exception. For example, a bank balance and a cash-available figure can both be correct while representing different things. Ask the assistant to identify the source and explain exclusions. It should distinguish a forecast from a posted ledger amount and a processor balance from settled cash in the bank.
Use a correction to test freshness. In a permitted test environment, update an invoice or upload a revised report, then check when the assistant recognizes the change. Record the version or synchronization time it uses. A delayed system can still be usable when the delay is visible; an unexplained mixture of old and new records makes a confident answer difficult to review.
| Question | Evidence to request |
|---|---|
| 1. Which record supports this amount? | A permitted link or reference to the underlying ledger, report, or document. |
| 2. Which entity and period does it cover? | Explicit company, currency, dates, and any applied filters. |
| 3. Is this actual, forecast, or an estimate? | A clear distinction with the relevant assumptions. |
| 4. What changed after a source correction? | Updated output tied to the new record or a visible synchronization limitation. |
| 5. Can we reproduce the calculation? | Inputs, formula, and treatment of refunds, credits, and duplicates. |
Questions 6 to 10: privacy and permission boundaries
Test access with accounts and records created for the evaluation. A user assigned to one entity should not receive information from another entity simply because the assistant can search across a broader database. Check summary answers as well as document links. Refusing to open a file is insufficient if the answer has already disclosed its contents.
Ask how the service uses questions and attached records, including processing providers, retention, and any training use. The FTC's guidance supports limiting access to sensitive information and reviewing service-provider safeguards. Require product-specific answers rather than assuming that an assistant inherits every permission or data-handling rule from the screen around it.
| Question | Evidence to request |
|---|---|
| 6. Does the answer respect the user's entity access? | A controlled test with separate permitted accounts and fictional records. |
| 7. Are payroll and other restricted fields protected? | Role-specific results that avoid exposing excluded information. |
| 8. What happens after access is removed? | A retest of chat, saved answers, document links, and connected actions. |
| 9. Where do prompts and documents go? | The applicable processors, locations, retention terms, and training policy. |
| 10. Can uploaded text change its instructions? | A safe test showing document content cannot grant permissions or authorize actions. |
References: FTC: Start with Security, a guide for business
Questions 11 to 15: actions and failure handling
If the assistant can change records, define what it can prepare, what it can commit, and which actions require approval. Test a draft classification separately from a payment or tax-related action. An approval screen should identify the actual object and change. A broad confirmation such as proceed does not help a reviewer catch the wrong supplier or entity.
Include a failed connection and an unsupported question. The assistant should expose a material limitation and offer an appropriate next step instead of filling a gap with a plausible amount. Keep the test focused on the service being purchased. The purpose is to establish useful boundaries, not to reward the assistant for answering every imaginable question.
| Question | Evidence to request |
|---|---|
| 11. Which actions require explicit approval? | A clear permission list and a preview of the proposed change. |
| 12. Can a failed request run twice? | A controlled retry test and a record of the resulting actions. |
| 13. Can a reviewer see what changed? | Before-and-after evidence, actor, timestamp, and relevant approval. |
| 14. What happens when a source is unavailable? | A visible limitation instead of an invented answer or silent omission. |
| 15. Who handles a disputed result? | A support and correction process that retains the necessary evidence. |
Record failures by business consequence
Separate a cosmetic wording issue from the wrong currency, omitted liability, unauthorized disclosure, or duplicated action. For each failure, keep the question, expected result, actual result, relevant source version, and reviewer decision. Avoid placing live credentials or sensitive customer details in a test log when a fictional record can reproduce the issue.
Repeat the affected test after a correction. Do not replace your original examples with easier questions that happen to pass. Keep a small recurring set for changes to models, retrieval, integrations, and permissions. The release decision should reflect the tasks you plan to rely on and the material failures that remain, rather than an average score that hides a serious access problem.
Choose the level of reliance the evidence supports
An assistant may be useful for finding documents and explaining balances while still needing review for journal proposals or forecasts. Write down the approved uses and train staff to verify the parts that affect financial decisions. A product demonstration cannot establish professional authority for tax, legal, or accounting judgments outside the service's agreed scope.
Approve broader use only when the relevant evidence supports it. Identify who can pause an action feature, correct a misleading answer, and communicate a material issue to affected users. Keep source access and financial controls authoritative as the assistant evolves. That gives your team a useful tool with an understandable boundary and a repeatable way to decide when that boundary should change.
Sources
Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.
Related reading
Need help with this work?
General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.