Skip to content
Enjoy complimentary data migration when switching from your existing bookkeeper or CPA to Institution.

Choosing a provider

Ask who else works on your accounting engagement

Review an accounting firm's subcontractors, partner firms, supervision, and disclosure terms before confidential information or responsibility moves.

By Institution4 minute readPublished View sources
In this guide

Ask about the delivery chain behind the firm name

The firm that signs your agreement may use employees, independent contractors, another accounting practice, or a specialist service to complete parts of the work. Ask which arrangement applies to your engagement. You need to understand who can see information, who supervises the work, and who remains responsible for delivering the agreed result.

Start with a description of activities rather than a request for a list of everyone the firm has ever hired. Data entry, reconciliation preparation, tax research, software support, and specialist advice raise different questions. A useful disclosure links the outside party to the task it performs.

The Journal of Accountancy's guidance on outsourcing emphasizes supervision and the firm's responsibility for its final deliverable. A buyer should ask how that supervision appears in this engagement. The existence of a subcontractor is not, by itself, evidence of poor service.

References: Journal of Accountancy: Outsourcing and professional liability

Distinguish a subcontractor from your own second provider

If the accounting firm engages and manages another party to perform its work, ask how the firm's obligations continue through that arrangement. If the firm merely introduces a specialist whom your company engages directly, the specialist's scope, fees, and responsibility should be established separately.

A referral can become confusing when the original accountant attends calls and forwards documents but nobody states who owns the specialist's answer. Confirm whether that coordination is included and who turns the conclusion into an accounting action. Avoid assuming that a friendly introduction creates a complete managed service.

Distinguish a subcontractor from your own second provider
ArrangementQuestion to settle
Provider employeeWho supervises and substitutes for this person?
Provider subcontractorWhich obligations and review remain with the contracting firm?
Affiliated or network firmIs this the same legal entity or a separate engagement?
Specialist hired by the companyWho defines the assignment and accepts the advice?
Software or technical supportWhat information can support personnel access and why?

Request a disclosure that can be kept current

Ask for the outside party's identity or a sufficiently precise description, the service performed, relevant work locations, information involved, access method, and supervising owner. For a recurring material subcontractor, establish how the company will learn about changes before they affect the engagement.

Decide which changes require notice, discussion, or consent under the agreement and applicable rules. A replacement contractor doing the same bounded task may call for a different process from moving sensitive work to a new organization or country. The contract should express that distinction clearly.

Do not confuse an office address with the locations where people access data. Ask about support, backup coverage, and any further subcontracting. Keep this inquiry proportionate to the service, but follow a vague answer until you understand the actual route your information will take.

Check the applicable confidentiality requirements

Permission requirements depend on jurisdiction, professional rules, information, and the proposed disclosure. For California licensees, the Board of Accountancy's enforcement FAQs address written permission for confidential information disclosed to an external service provider and specific permission for anticipated disclosure outside the United States. The same FAQ distinguishes storage from disclosure and identifies exceptions.

That California guidance should not be presented as a rule for every bookkeeper or every country. Ask the firm to identify the requirements governing your engagement, including any separate tax-information restrictions. Have the responsible professional explain the consent being requested before information is transferred.

Read the consent and contract together. A broad general clause may not answer a more specific question about the recipient, location, purpose, or information involved. Conversely, a software storage arrangement may be different from allowing an outside person to process the records. Describe the facts accurately before deciding which requirement applies.

References: California Board of Accountancy: Confidential information and external providers

Look for review and access controls that match the work

Ask how the provider checks an outside preparer's output, handles errors, and prevents incomplete work from being released. A named reviewer, a reviewed work record, and a clear escalation route are more informative than a statement that all partners are trusted.

Review access at the task level. The company should understand why the outside party needs particular records, whether access can be limited, and how it ends when the assignment is complete. Include locally downloaded files and working copies in the discussion rather than considering only the login to your accounting system.

Use a representative scenario. If a subcontractor discovers an unexplained payment while reconciling an account, who receives the question, who can contact the company, and who decides the treatment? The answer should preserve both supervision and a timely route to the relevant facts.

Record what happens if the arrangement changes or ends

Establish who transfers unfinished work, removes unnecessary access, and addresses retained records when a subcontractor leaves. Ask the contracting firm to remain the accountable contact for work it has accepted unless the company agrees to a different arrangement.

If a proposed outside party is unsuitable, discuss a concrete alternative: a different team, a narrower information set, a separately engaged specialist, or a revised service. Confirm cost and timing consequences before assuming the existing fee covers every option.

Keep the final disclosure with the engagement records and revisit it when the provider changes its delivery model. The point is to make the service understandable and governable, with a clear answer to who performs the work and who stands behind it.

Sources

Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.

Related reading

Need help with this work?

General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.