For CPA & accounting firms
IT support for CPA firms that can't go down during tax season.
Your systems, your clients' financial data and your deadlines, protected by senior engineers who plan around April 15, not the other way around. In English or Spanish.
Tax-season readinessIllustration
- Backups tested with a real restore
- MFA on every email and tax software login
- Workstations patched before January
- Seasonal staff accounts set to expire
- WISP reviewed and up to date
Sound familiar?
Still working with an IT provider who…
Disappears in March
Tickets sit for days in the busiest weeks of your year, while preparers wait on a printer, a login or a frozen tax program.
Can't explain your WISP
You know the IRS and the FTC expect a written security plan, but nobody has told you what yours should say or whether your systems actually match it.
Treats you like any other office
Generic support that doesn't know Drake from Lacerte, schedules updates on deadline day and leaves seasonal staff with permanent access.
Deadlines don't move. Your IT shouldn't either. We plan your technology year around the tax calendar.
Built for how CPA firms work
Everything a tax and accounting practice depends on, managed in one place.
One accountable team for the systems, security and compliance work that keep your practice running and your clients' data safe.
Tax-season uptime
Continuous monitoring of servers, workstations and backups, with maintenance scheduled outside your filing peaks and a change freeze during crunch weeks.
WISP & Safeguards Rule readiness
We help you write or update your Written Information Security Plan and put in place the technical safeguards the FTC Safeguards Rule and IRS Publication 4557 describe.
Client data protection
Encrypted laptops and drives, least-privilege access to client folders, secure email and a written incident response plan you can actually follow.
Tax & accounting software
Installs, updates and troubleshooting for your tax and accounting applications, plus the servers, hosting or Remote Desktop environments they run on.
Secure client portals
Setup and support for secure file exchange, so clients stop emailing W-2s, bank statements and returns as plain attachments.
Seasonal staff, done safely
Fast onboarding for seasonal preparers with MFA and need-to-know permissions, and clean offboarding when the season ends.
Email & phishing defense
Filtering, impersonation protection and staff training against the tax-season scams that target preparers, from fake client documents to W-2 requests.
Backup & ransomware recovery
Encrypted, off-site and versioned backups of client files and tax data, tested with real restores, so ransomware is an inconvenience and not a closed office.
Compliance, in plain English
WISP, the FTC Safeguards Rule and the IRS Security Six, handled.
Under the Gramm-Leach-Bliley Act, tax and accounting firms are financial institutions. The FTC Safeguards Rule requires a written information security program, and the IRS expects every paid preparer to have a Written Information Security Plan. We turn those requirements into working technology and clear documentation.
What we help you put in place for the Safeguards Rule
- A written risk assessment of your systems and data
- Access controls, encryption and MFA
- A Written Information Security Plan (IRS Publication 5708 template)
- Security awareness training for staff
- Ongoing monitoring and periodic testing
- Oversight of your technology vendors
- A written incident response plan
- An annual report for your designated Qualified Individual
The IRS "Security Six"
- 01 Antivirus Managed endpoint protection on every device.
- 02 Firewalls Business-grade firewalls, configured and monitored.
- 03 Multi-factor authentication On email, tax software, portals and remote access.
- 04 Backups Encrypted, off-site and tested on a schedule.
- 05 Drive encryption Full-disk encryption on laptops and workstations.
- 06 Secure remote access VPN or zero-trust access for working from home.
We implement and document the technical safeguards. We are not attorneys, and this is not legal advice; we're happy to work alongside your attorney or compliance advisor.
Your year, planned around the tax calendar
We schedule your IT so it never competes with a deadline.
-
Oct 16 – Nov
Review & plan
Post-extension review, hardware and license check, and the project list for next season.
-
Dec – early Jan
Pre-season hardening
Updates, backup restore test, MFA audit, seasonal accounts ready and the WISP reviewed.
-
Jan – Apr 15
Busy season
Change freeze, close monitoring and fast help for preparers. No surprise updates.
-
Apr 16 – Oct 15
Extensions & upgrades
Seasonal access removed, then the bigger projects: migrations, new hardware and cloud moves.
Software we keep running
Experienced with the tools your practice already uses.
We install, update, host and troubleshoot the applications your preparers rely on, and we work directly with the vendor's support when needed.
- Drake Tax
- Lacerte
- ProSeries
- UltraTax CS
- CCH Axcess
- CCH ProSystem fx
- QuickBooks Desktop & Online
- Microsoft 365
- SmartVault
- ShareFile
- TaxDome
- Karbon
- Adobe Acrobat
- Remote Desktop Services
Max
Founder & Principal Engineer
One senior engineer accountable for your practice.
Every engagement is led by Max: more than 20 years in enterprise IT, CompTIA Security+, and the same hands-on approach whether you have three preparers or thirty.
- CompTIA Security+
- CompTIA Network+
- Claude Code · Anthropic Academy
- Google AI Professional Certificate
FAQ
Questions CPA firms ask us
Does my CPA firm need a Written Information Security Plan (WISP)?
Yes. Under the Gramm-Leach-Bliley Act, tax preparers and accounting firms are financial institutions, and the FTC Safeguards Rule requires a written information security program. The IRS also expects every paid preparer to have a WISP and publishes a template in Publication 5708. We help you write it and make sure your systems match what it says.
What is the IRS "Security Six"?
It is the IRS's baseline list of protections for tax professionals: antivirus software, firewalls, multi-factor authentication, backups, drive encryption and secure remote access through a VPN. We put all six in place and keep them monitored.
Will switching IT providers disrupt our firm?
We plan the transition around your calendar, ideally outside busy season. We document your current setup first, take over passwords and licenses in an orderly way and coordinate with your previous provider, so preparers keep working throughout.
Do you support our tax software?
We support the systems around it and the applications themselves: installs, updates, permissions, servers, hosting and Remote Desktop environments for packages such as Drake, Lacerte, ProSeries, UltraTax CS and CCH Axcess. For product-specific issues we work directly with the vendor's support team.
How do you handle seasonal staff?
We set up seasonal accounts with multi-factor authentication and access only to what each person needs, with an end date from day one. When the season ends, access is removed and devices are recovered or wiped.
Can our preparers work securely from home?
Yes. We provide encrypted laptops, secure remote access to your office systems or cloud applications, and MFA everywhere, so working from home meets the same standard as the office.
Free assessment
Let’s talk about IT support for CPA firms.
Tell us a little about your business. A senior engineer replies within one business day with clear next steps, no obligation.
Prefer to talk now?