Skip to content
Enjoy complimentary data migration when switching from your existing bookkeeper or CPA to Institution.

Choosing a provider

Share enough accounting data for a quote without opening the whole business

Use staged disclosure during an accounting tender, with redacted samples, permission boundaries and a record of which bidder received which information.

By Institution3 minute readPublished View sources
In this guide

Match the information to the buying stage

An initial accounting inquiry usually needs a description of entities, systems, activity and reporting needs before it needs a complete payroll file or customer ledger. Ask candidates which facts they need to decide whether they can quote. Supply enough to reveal complexity, then reserve detailed records for a smaller group with a defined reason to inspect them.

Create a short disclosure plan for the procurement. Identify the owner who may release information, the recipients, the permitted purpose and the place where records will be shared. Keep confidential employee, customer and transaction data out of informal email chains used to schedule sales calls.

Redact identity while preserving the accounting problem

A useful sample keeps the relationships the bidder must understand: dates, transaction patterns, account structure and the source of exceptions. Replace unnecessary names and sensitive identifiers consistently. If every amount is changed independently, the sample may no longer show why records fail to reconcile. Explain what has been altered so the bidder does not draw conclusions from a fictional inconsistency.

FTC guidance recommends limiting sensitive information to what the business needs. Apply that principle to procurement by providing summary counts or masked examples where they answer the scoping question. If detailed data is necessary, ask why and have the authorized owner approve the narrower release.

References: FTC: Protecting personal information

Set the access terms before uploading

Agree confidentiality, permitted use, onward sharing and deletion or retention treatment with appropriate advice. Ask whether a bidder will involve another firm, subcontractor or tool in evaluating the records. A confidentiality agreement is useful, but the company should also control the technical access it grants.

FTC security guidance supports access limited to need. Use named users and a controlled repository where practical, with access expiring when the evaluation ends. Avoid giving a prospective provider payment authority or broad administrator permissions merely to estimate bookkeeping work. Verify the actual permissions before the invitation is accepted.

Identify who can answer bidder questions and how material clarifications reach the other candidates. Consistent factual answers improve comparison. Preserve each firm's confidential proposal and proprietary approach while giving all bidders the same relevant facts about your own business.

References: FTC: Start with security

Keep a record of what each bidder relied on

Log the version, date and scope of each shared dataset. Record known gaps and corrections. If a source file changes, notify affected bidders and ask whether their price or assumptions change. A bid based on incomplete records should remain visibly conditional until the company supplies the missing evidence.

Ask the shortlisted provider to state its remaining assumptions before signing. If it needs broader access to validate a fixed price, consider a separately authorized diagnostic. That gives the company a defined deliverable from the deeper review and avoids an unbounded pre-sales inspection of sensitive systems.

Close access when procurement ends

Remove unnecessary bidder access and confirm the agreed treatment of retained copies. Record any permitted retention for professional or legal reasons instead of assuming every copy can be immediately erased. Keep the company's own procurement record, including the evidence on which the winning quote relied.

Transfer the accepted factual package into onboarding so the delivery team does not restart discovery from conflicting files. The final handoff should identify what was disclosed, what remains restricted and which assumptions still need verification. That lets the service begin with an accurate scope and deliberate permissions.

Sources

Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.

Related reading

Need help with this work?

General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.