The questions to ask before outsourcing accounting are the ones that test what happens after the sales call: who does the work, how quality is measured, how client data is kept safe, what the price becomes in year two and how you leave. Send them in writing and make sure each answer appears in the contract or its service schedule before anyone signs.
This guide groups the questions to ask before outsourcing accounting by topic, explains why each one matters for a US CPA firm, and points to the IRS, FTC and AICPA rules that already require some of them. It is written for the stage after you have a shortlist and before you sign. If you are still building the shortlist, start with the accounting outsourcing RFP template or the 30-point provider evaluation checklist.
Most firm owners open with two questions: can you do the work, and what will it cost. Every provider has a polished answer to both. The questions that protect your firm are the ones about failure and change. They cover a staff member who resigns in February, a missed deadline, a security incident, a price increase at renewal and a decision to bring the work back in-house.
The AICPA Code of Professional Conduct also expects this diligence. Its "Use of a Third-Party Service Provider" interpretation (ET 1.300.040) says that before using a provider for services such as bookkeeping or tax preparation, the member "should ensure that the third-party service provider has the required professional qualifications, technical skills, and other resources," and it lists references "from banks, other CPAs, and other customers" as useful evidence (AICPA Code of Professional Conduct, updated through September 2026). The same interpretation says the member "must adequately plan and supervise" the provider's work. The questions below are how you document that you did.
Ask for names, roles, experience and the software each person has used. Ask to meet the reviewer and at least one preparer by video before signing. A provider that will not introduce the team until after the contract is signed is asking you to buy an unknown.
Both models exist. Dedicated staff learn your methods and cost more. Shared or pooled staff cost less and may produce less consistent work. Neither is wrong, but the contract should state which one you are buying so you are never paying dedicated rates for pooled capacity. Our comparison of dedicated staff vs per-return pricing walks through the trade-offs.
Turnover happens everywhere. Ask how much notice you receive, how knowledge is handed over, whether trained backup staff exist and how long a replacement takes to reach full speed. Ask for the provider's annual staff retention figure as a number and ask how it is calculated.
Ask where extra capacity comes from during tax season and year-end, how much notice you must give, and whether the extra staff have been trained on your workflows. The busy season staffing comparison sets out what each option costs in time and risk.
"We deliver on time" is a promise, and a service level agreement needs a number. Ask for business-day turnaround by deliverable: monthly close packages, reconciliations, workpapers and returns at each complexity level. Ask when the clock starts, since many disputes come from a provider that counts from "complete information received."
An SLA with no consequence is decorative. Ask whether misses trigger service credits, an escalation path and, after repeated misses, a right to terminate without penalty. For clause wording, see the seven offshore accounting SLA clauses that keep quality from slipping, including first-pass yield and review sampling.
Ask what the provider tracks (for example, review points per return or rework hours per close), how often it reports to you and whether you can see the raw data. Ask for its error trend over the past 12 months. A provider that claims zero errors is either not measuring or not sharing.
This is where outsourcing questions stop being optional. Three sets of rules apply to most US CPA firms that send client data to a provider.
If the provider will see tax return information and is located outside the United States, the taxpayer's consent is needed first. Treasury regulations state: "If a tax return preparer to whom the tax return information is to be disclosed is located outside of the United States, the taxpayer's consent under § 301.7216-3 prior to any disclosure is required," and the consent "must be signed and dated by the taxpayer" (26 CFR 301.7216-3). For Form 1040 series returns, a US preparer generally may not obtain consent to send the Social Security number offshore and must redact or mask it, unless the SSN goes through "an adequate data protection safeguard" that the consent request verifies. Ask how the provider masks SSNs and who drafts the consent language. Our Section 7216 consent guide covers the form and timing.
The FTC Safeguards Rule treats tax preparers as financial institutions. Its definitions name "an accountant or other tax preparation service that is in the business of completing income tax returns" as an example (16 CFR 314.2). Section 314.4(f) then requires the firm to oversee service providers by "Requiring your service providers by contract to implement and maintain such safeguards" and by "Periodically assessing your service providers based on the risk they present and the continued adequacy of their safeguards" (16 CFR 314.4). Ask the provider to agree to those obligations in writing, to support your periodic assessment and to tell you which encryption it uses, since the rule generally requires customer information to be encrypted "both in transit over external networks" "and at rest." These rule references are current as of October 2026.
Ask for the full SOC 2 Type II report, its period and any exceptions, rather than a logo or summary letter. If the report period ended months ago, ask for a bridge letter covering the gap. The SOC 2 vendor due diligence guide explains what to read in the report and how ISO 27001 compares.
The Safeguards Rule requires firms to keep "a written incident response plan." Your own plan depends on how fast the provider reports to you. Ask for the provider's plan, its contractual notice period to you (in hours), and who pays notification and remediation costs. Ask whether it has had a breach and how it responded.
Ask about role-based access, how quickly access is removed when someone leaves or changes accounts, whether staff work in a virtual desktop with local downloads blocked, and which cloud region holds your data. Some clients restrict where their data can sit, so confirm this before signing.
This one is a question for your own firm. ET 1.150.040 says that "before disclosing confidential client information to a third-party service provider, the member should inform the client, preferably in writing, that the member may use a third-party service provider." If the client objects, the member should not use the provider for that engagement or should decline it (AICPA Code). Ask the provider whether it supplies sample disclosure wording, and update your engagement letters before the first file moves.
Ask for every fee outside the base rate: onboarding, software licences, rush work, after-hours support, year-end premiums and extra review rounds. The hidden costs of cheap outsourcing shows how these add up.
Ask what triggers an increase, whether it is capped and whether the cap is in the contract. A small difference in the escalator compounds. The illustrative example below assumes a $6,000 monthly fee in year one.
| Annual escalator | Year 1 | Year 2 | Year 3 | 3-year total |
|---|---|---|---|---|
| 8% (uncapped, provider's discretion) | $72,000 | $77,760 | $83,981 | $233,741 |
| 4% (capped in contract) | $72,000 | $74,880 | $77,875 | $224,755 |
The capped contract costs $8,986 less over three years, and the year-three monthly fee is about $6,490 instead of about $6,998. The figures are hypothetical and are only there to show why the cap belongs in writing.
Ask whether there is a minimum commitment, what the penalty is for falling below it and whether per-unit prices rise when volume drops.
The contract should state that you or your clients own all work product, including workpapers, reconciliations, financial statements and returns. Ask separately about checklists and workflows built for your firm, and whether you can take them to another provider.
Ask for the return format, the timeline after termination, and a written certificate of deletion covering backups. Ask whether the provider uses client data for any other purpose, such as benchmarking or training software tools, and require that it does not.
Ask about the notice period, early termination fees, rights to terminate for repeated SLA misses or a security breach, and a right to exit on a change of ownership. Ask what the wind-down period looks like and who does the handover work. The accounting outsourcing contract template lists the clauses that should hold these answers.
Name your exact stack (for example, QuickBooks Online, Xero, UltraTax, Lacerte, Drake or CCH Axcess) and ask for confirmation for each one, with names of staff who use it.
Ask for a week-by-week plan, the hours your staff must commit, and the point at which the team is expected to work without daily guidance. A realistic plan, such as the one in our guide to onboarding an offshore accounting team in 30 days, prevents early frustration.
Ask for recovery time and recovery point objectives, backup sites, remote work capability and what happened during the provider's last real outage.
A provider's answers here tell you more than its references from satisfied clients.
Verbal answers carry no weight once a dispute starts. Use this table to make sure each answer lands somewhere enforceable.
| Question area | What a good answer includes | Where it belongs |
|---|---|---|
| Staffing | Named team, notice of changes, backup plan | Statement of work |
| Turnaround and quality | Business-day targets, metrics, credits for misses | SLA schedule |
| 7216 and SSNs | Masking method, consent process | Data processing terms |
| FTC Safeguards | Contractual safeguards, assessment rights, encryption | Security addendum |
| Incident response | Notice to you in hours, cost allocation | Security addendum |
| Pricing | Full fee list, capped escalator, volume terms | Fee schedule |
| Ownership and exit | Work product ownership, data return, deletion certificate | Master agreement |
What are the most important questions to ask before outsourcing accounting? The questions with the most legal weight cover data handling: Section 7216 consent and SSN masking for tax work, and whether the provider will accept FTC Safeguards Rule obligations by contract. After those, ask about named staffing, SLA consequences and exit terms.
Do I need client consent before using an offshore tax preparer? Yes for tax return information sent to a preparer outside the United States. Treasury regulations require the taxpayer's signed and dated consent before any disclosure, and Form 1040 SSNs generally must be masked unless an adequate data protection safeguard is in place and verified in the consent request.
Should a lawyer review the outsourcing contract? Yes, especially for a first outsourcing relationship. A lawyer who works with professional services contracts can review liability caps, indemnities and data clauses.
Do I have to tell clients that I use an outsourcing provider? Under AICPA ET 1.150.040, a member should inform the client, preferably in writing, before disclosing confidential client information to a third-party service provider. Many firms do this through a clause in the engagement letter.
How long should the first contract term be? There is no rule. Many firms prefer a short initial term with clear termination rights, so they can exit if the fit is poor. Whatever the term, the right to terminate for repeated SLA misses or a security breach should not depend on the renewal date.
Madras Accountancy provides outsourced bookkeeping, tax preparation and accounting support for US CPA firms and their clients. If you are preparing these questions for a provider review, contact our team to talk through your scope and the answers you need in writing.
The section 4960 excise tax is 21% of nonprofit pay over $1M. From 2026 it covers all employees. See the medical carve-outs, Form 4720 and a worked example.
The paid family and medical leave tax credit is permanent from 2026. See the 12.5% to 25% rates, the premium option, the 6-month rule and how Form 8994 works.
Opportunity zones become permanent in 2027 under the One Big Beautiful Bill. See the new deferral, rural bonus, and the 2026 handoff.
