How to use AI for accounting without breaking client confidentiality
Pasting sensitive trial balances and client data directly into public AI tools violates firm policies and engagement letters. Accountants need secure, siloed workflows that prevent confidential information from being exposed to external language models during technical work.
What the numbers show
Counted from the threads quoted below. How we count
- The most recent one is from October 2026.
- This comes up 24.1× more often in r/nonprofit than across the site as a whole.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
Found another way around this?
Share your steps and trade-offs so fellow engineers don't have to reinvent the wheel. No account required.
- 1Outright banning the use of external AI tools for client dataDid this help you?
- 2Using enterprise instances with data isolation clausesDid this help you?
- 3Using privacy-preserving enterprise tools like Microsoft Copilot approved by the firmDid this help you?
- 4Arguing that proper safeguards make AI usage a non-issue similar to using SharePoint.Did this help you?
- 5Considering whether to eat the cost of the subscription and pursue a different vendorDid this help you?
- 6Weathering the storm and seeing what impacts it has on employee participationDid this help you?
- 7Reviewing contracts with legal and information security teams before approvalDid this help you?
- 8Using external third-party form builders like FormAssembly EU, Jotforms EU, or Tally forms.Did this help you?
- 9Using connector plugins or embedding forms via iframes.Did this help you?
- 10Relying on employment agreements, confidentiality agreements, and lawsDid this help you?
- 11Masking social security numbers before offshore access when safeguards are in placeDid this help you?
- 12Using Data Loss Prevention (DLP) systemsDid this help you?
- 13Implementing Zero Trust Architecture (ZTA) and SASE platformsDid this help you?
- 14Using Web and DNS filters to block AI sitesDid this help you?
- 15Registering company domains with popular AI services to prevent employee accountsDid this help you?
- 16Skipping commits for projects that contain sensitive data or personally identifiable informationDid this help you?
- 17Manually scrubbing personally identifiable information before saving or logging informationDid this help you?
- 18Self-hosting open-source PDF tools locally via Proxmox LXC helper scripts (like BentoPDF, Sterling-PDF, or OmniTools)Did this help you?
- 19Using local desktop applications or utilities like PDF-Xchange PDF-Tools, Nitro, Foxit, Bluebeam, Tungsten Power PDF, or PDFGearDid this help you?
- 20Performing periodic manual purges of chat history and projectsDid this help you?
- 21Banning the use of AI tools or forbidding client data input entirelyDid this help you?
- 22Using custom platform APIs with zero data retention agreements (ZDR) and backend data processingDid this help you?
- 23Creating an open SharePoint folder linkDid this help you?
- 24Using OneDrive File Request featureDid this help you?
- 25Using third-party platforms like ShareFile, TonicDM, or THRUDid this help you?
- 26Using Microsoft Copilot because it operates under the same privacy guardrails as Office 365.Did this help you?
- 27Restricting the specific CRM fields the AI is allowed to pull data from.Did this help you?
- 28Refusing to upload any donor data until the AI provider's data usage ecosystem is fully documented.Did this help you?
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“Do you have good documentation and policies around what the AI can access re: donor information?”source ↗
“I'm not giving OpenAI my donor data, though, until I understand how it utilizes it across their entire ecosystem.”source ↗
“How well does it avoid taking confidential information from your CRM?”source ↗
“If you're just pasting client trial balances into the free ChatGPT window, you're already violating firm policy and probably some engagement letters too.”source ↗
“For those working in public accounting and use OpenAI or Anthropic products for the technical work, how are confidentiality silos maintained regarding PBC information in your firms?”source ↗
“The main fear with outsourcing is that the bar to enticing someone to leak the info may be lower.”source ↗
“How is PIA of US citizen is protected when all the tax works are outsourced to India? Are Indian employee of tax firms able to see SSN?”source ↗
“one of the partners said they had given GPT (or Claude, copilot… one of those) *complete access* to all the client data on the shared network in order for it to generate a priority list on who gets estimates with their statements this month. Complete. Access. Everything that was in the folders. BRUH.”source ↗
“I am experiencing massive problems with our ninja-forms installation (dont use it guys).”source ↗
“I am now looking for a Solution where I can use an external Tool (3rd Party Website) where I can create my forms (realy complex in some cases).”source ↗
“Also I want to push data from my website into these forms (hidden fields) and I want to be able to give custom classes to the submit button for example.”source ↗
“if participation tanks it kinda defeats the whole point of having the platform. curious what other vendors you're looking at, most of them have equally vague TOS fine print these days”source ↗
“brought to our attention by an employee that Culture Amp are reserving the ability to train generative AI models on our employee data.”source ↗
“while they keep explaining they don’t permit their GenAI vendors (so I’m guessing OpenAI and Anthropic) to train off of customer data, they won’t commit to not doing it themselves; all they say is they aren’t currently doing it today.”source ↗
“A lot of orgs use ShareFile or another system separate from SharePoint because they want to leave OneDrive/SharePoint fully restricted from external sharing.”source ↗
“We bought into TonicDM to do this, because we'd also have outsider clients wanting to send files to our employees, and security controls were needed (along with traceability).”source ↗
“En tant que dsi comment peut ont encadrer l’ia en entreprise et verifier qu’aucune donnée de l’entreprise n’est envoyé ?”source ↗
“Every other project gets committed to GitHub at the end of a session, which is both the backup and the history. This one has been skipped several times because each time the question of what would become visible was too big to settle at the end of a session.”source ↗
“What would go up: the ticket list, which now carries real people's names and email addresses including a departed employee's; the inventory of every domain we own across four registrar accounts; and a full listing of every shared mailbox and distribution list in the Microsoft 365 tenant with their addresses.”source ↗
“I have a hard time paying for such simple tools that a large set of my users would like to have.”source ↗
“So has anyone have a recommendation of a local based solution that doesn't send any data externally? I have sensitive documents that cannot share detail out.”source ↗
“We have obligations to purge client data on request and after churn. I don't want to solve that by banning client data from AI tools entirely, because that's where a lot of the value is.”source ↗
“The issue is data that persists in chat history, projects, uploaded files, and memory. The only feasible and comprehensive solution I can think of is periodic purges of chat history and projects, but that feels blunt and destroys useful context.”source ↗
Where this came up
People with this problem also raised
- 3Why do CRM apps share my customer data with other companies?
- 2How to secure sensitive form data in databases
- 4Why does a CRM get so messy as outbound volume grows?
- 2How to secure vendor emails on personal devices without MDM
- 3Why is keeping a professional network CRM updated so tedious?
- 12How do you keep track of clients, projects, deadlines, and follow-ups?