Can an accounting firm sell client data to AI companies?

Usually not without each client’s consent. The AICPA Code bars disclosing confidential client information without the client’s specific consent; IRC §7216 makes a preparer’s knowing or reckless disclosure of tax-return information a misdemeanor. The firm’s own records are another question.

What does an accounting firm keep that AI buyers ask for?

The record of engagements being worked, reviewed and signed off, most of it built from clients’ information. Telegraph Lab’s program page shows a payment to “A 60-person accounting firm. Five years of workpapers, reconciliations, financial models, and tax-preparation files.” Miro Advisory describes the accounting workflow it looks for as “Reconciliation through review and approval”, and micro1 lists “Financial processes, SOPs, reconciliations, approvals, reporting workflows” (all as of October 2026).

Traced through one individual tax engagement, the records fall on two sides of a line:

Step	Usually lives in	Whose information it holds
Engagement letter	Practice-management or document system	The client’s identity and the scope of work
Organizer, source documents, prior-year return	Client portal, tax software	The client’s tax-return information
Preparer workpapers and reconciliations	Workpaper or tax software, spreadsheets	Built from the client’s records
Review notes and partner sign-off	Workpaper software, email	Comments on the client’s return
E-file authorization and the filed return	Tax software	Tax-return information
Time entries and the invoice	Practice management, the firm’s books	The firm’s billing, describing client work
Review checklist, workflow procedure, staffing schedule	Firm drive or intranet	The firm’s own procedures

Bookkeeping and audit work look the same: the ledger is the client’s, and the workpapers are made from it. If the firm works in QuickBooks Online Accountant, or in Intuit Accountant Suite, which Intuit says all firms must switch to by December 31, 2026, the client companies there are the clients’ books; Intuit describes the separate Your Books section as “where you manage your firm’s books, rather than your client’s” (updated September 24, 2026).

Which buyers say they want accounting firm data?

As of October 2026, four providers name accounting as an industry on their own pages. Miro Advisory and Sell My Business Data only make introductions; neither pays you.

Provider	Type	What its pages say
micro1	Licenses directly	“Finance & accounting” under the heading “Operational data from every industry can contribute”
Miro Advisory	Introducer	Accounting among its highlighted industries (source)
Sell My Business Data	Introducer	Accounting among ten target industries (source)
Telegraph Lab (affiliated)	Licenses directly	“Accounting & finance” among target industries, and the accounting-firm card above (source)

Telegraph Lab’s card does not say how the client files in it were cleared for licensing; ask that question of any provider about your own files. Mercor, Polyshares, Scale AI and Troveo list professional services without naming accounting firms, and Nyne names accounting software such as QuickBooks, Xero and NetSuite (Nyne) rather than the trade. Ask them directly.

What does the AICPA Code say about client data?

That a member in public practice “shall not disclose any confidential client information without the specific consent of the client” (the Confidential Client Information Rule, 1.700.001). The Code, updated through September 2026, defines confidential client information as “Any information obtained from the client that is not available to the public”. In 2015 the AICPA’s Tax Adviser summarized the rule’s exceptions as matters such as professional standards, subpoenas and laws, practice reviews, ethics investigations and the review of a practice being bought or sold.

Two points matter for a data license:

• The rule and §7216 apply separately. The Journal of Accountancy put it this way: “Even if the disclosure would be permissible under Sec. 7216 without client consent, it might not be under Rule 1.700.001.” (March 2015).
• The definition is not limited to tax. It reaches any information obtained from the client that is not public, in audit, review, advisory and bookkeeping work alike.

What does IRC §7216 add for tax files?

A criminal rule, a civil penalty and a consent procedure. Section 7216 applies to anyone in the business of preparing income tax returns, or of providing services in connection with preparing them, who knowingly or recklessly discloses return information or “uses any such information for any purpose other than to prepare, or assist in preparing, any such return”. It is a misdemeanor, with a fine of up to $1,000 ($100,000 where identity theft is involved), up to a year in prison, or both. The civil penalty is $250 for each disclosure or use, capped at $10,000 a year ($1,000 and $50,000 where identity theft is involved) (26 U.S.C. §6713).

The regulations add four points:

• Anonymizing does not take it outside the rule. Tax return information “includes statistical compilations of tax return information, even in a form that cannot be associated with, or otherwise identify, directly or indirectly, a particular taxpayer” (§301.7216-1).
• The statistics exception excludes sales. A preparer may produce anonymous compilations for its own tax-preparation business or for tax research, but “may not sell or exchange for value a statistical compilation” except when selling the practice (§301.7216-2(o)).
• Otherwise, written consent comes first. Unless an exception applies, a preparer may not disclose or use return information before getting the taxpayer’s written consent. It must be knowing and voluntary, signed and dated, and name the purpose, the specific recipient and the information; conditioning services on it makes it involuntary, and without a stated term it lasts one year (§301.7216-3).
• Individual returns have set wording. For Form 1040 filers, Rev. Proc. 2013-14 prescribes the consent’s mandatory statements, including “You are not required to complete this form to engage our tax return preparation services.”

The IRS keeps these materials on its Section 7216 information center (reviewed September 7, 2026).

Do state boards add their own rules?

Yes, and they differ by state. Two examples:

• California bars disclosing a client’s confidential information “without the written permission of the client”, subject to listed exceptions (Business and Professions Code §5063.3). Separately, working papers “shall be and remain the property of the licensee”, yet none may be “sold, transferred, or bequeathed, without the consent of the client” to anyone but partners or a successor firm (§5037). Owning the workpapers is not the same as being free to sell them.
• Texas Board Rule 501.75 says a person providing professional accounting services “shall not voluntarily disclose information communicated to him by the client” in connection with professional accounting work, except by the client’s permission (amended June 2020).

Read your own state’s accountancy act and board rules; AICPA members can also put questions on the Code to the AICPA Ethics Hotline. How they apply to a given file is a question for a lawyer who advises CPA firms.

What are the firm’s own records?

The records of running the firm rather than doing a client’s work: the firm’s own books, written procedures and review checklists, templates with no client data in them, training material, staffing and scheduling, recruiting, and internal IT and administration. micro1’s examples of SOPs and process documentation describe this kind of material.

Even these can hold client material. Internal chat and email drift into client matters, time narratives describe client work, and HR files hold employees’ personal data. Polyshares says “Data you hold for your own clients is out of scope”, and Miro Advisory says “Client information should not be included simply because it can be anonymized”. Whether a particular set of firm records can be licensed turns on what is mixed into them; leaving out records shows how to carve out folders, channels and names.

What could an accounting firm’s data be worth?

As of October 2026, one provider publishes an accounting-firm figure. These are providers’ own statements, not offers:

• Telegraph Lab (affiliated): $350K for the 60-person firm’s five years of workpapers, reconciliations, financial models and tax-preparation files; undated and unnamed. Its program range is $100K–$4M, “Subject to data review and agreed terms”.
• Miro Advisory: $100,000 to $1 million or more for strong operating datasets, which it calls “indicative potential ranges, not valuations or promises”; Miro is an introducer and would not be the party paying.
• micro1: tiers from $100K+ for qualified partnerships to $1M+ for “highly unique” proprietary data (source), across all industries.

None of the four publishes a figure for a firm licensing only its own operating records. A scope without client files is narrower than the Telegraph Lab card, so ask any provider which of your records its number assumes. For the rest, see how much is my company’s data worth?

How does an accounting firm start?

By splitting firm-side systems from client-side ones and counting only the firm side until a lawyer has looked at the rest.

1. Split the systems. Firm side: firm email, chat, intranet, the firm’s own books. Client side: tax and workpaper software, client portals, the client companies in QuickBooks Online Accountant or Intuit Accountant Suite.
2. Find the client material in the firm-side systems. Shared mailboxes, channels named for clients, time narratives.
3. Take client-side files to a lawyer first. The questions there are consent under the AICPA Code and your state’s rules, and §7216 for anything tax.
4. Count the firm-side records. The free sample tool reads .mbox or .eml mail, a Slack export and CSV reports, including QuickBooks reports from the firm’s own books, in your browser. Write the results into an inventory.
5. Apply with the scope stated. The application needs no files; say that client files are out of scope unless clients have consented.