A client portal for accountants is the secure place where a firm and its clients swap documents and messages: clients upload receipts and forms, the firm posts drafts, returns and letters. It doesn't replace email, it changes what email is for: the email says something is waiting, the portal holds it. For US tax preparers, this split also lines up with the rules: the FTC Safeguards Rule requires encryption of customer information in transit over external networks, and IRS Publication 4557 tells tax professionals to send files only encrypted if they must use email. An AI employee can sort the firm's inbox, draft replies from answer templates you've approved and list incoming letters with their dates. It doesn't judge a notice, calculate a deadline or keep your docket.
This isn't legal or tax advice. It's based on the FTC Safeguards Rule (16 CFR Part 314) as published in the eCFR and on IRS Publication 4557 (Rev. 6-2024), as of November 2026, plus a short section on the German rules. For the AI side of accounting firms, start with AI Agents for Tax Firms: A Real Case.
Email, client portal, phone: what goes where
For the phone, there are AI receptionists that pick up and take messages; providers, pricing and the legal side are in AI Receptionist: Providers, Pricing, Law. I run my business with fifteen AI employees, but I do not use an AI receptionist; my employees work with text and files.
What the FTC Safeguards Rule and IRS Publication 4557 say
The FTC Safeguards Rule applies to tax preparers. Its definitions say it directly: "An accountant or other tax preparation service that is in the business of completing income tax returns is a financial institution" (16 CFR 314.2). Three requirements in 16 CFR 314.4 bear on client communication:
- Encryption (314.4(c)(3)): "Protect by encryption all customer information held or transmitted by you both in transit over external networks and at rest." If you find that infeasible, you may use "effective alternative compensating controls reviewed and approved by your Qualified Individual".
- Multi-factor authentication (314.4(c)(5)) "for any individual accessing any information system", unless your Qualified Individual approves an equivalent control in writing.
- Service providers (314.4(f)): select providers that can keep appropriate safeguards, require them "by contract to implement and maintain such safeguards", and assess them periodically. That includes an AI vendor that reads client email.
Firms with customer information on fewer than five thousand consumers are exempt from some parts (314.6): the written risk assessment, continuous monitoring or penetration testing, the incident response plan and the Qualified Individual's annual written report to the board. Encryption, MFA and service provider oversight aren't on that list.
IRS Publication 4557, the IRS guide "Safeguarding Taxpayer Data", is blunter about email: "Send only password-protected and encrypted documents if you must share files with clients via email or use Secure File Transfer Protocol (SFTP) to transmit files instead of email." It also asks firms to "caution customers against transmitting sensitive data, like account numbers, via email". A client portal is the everyday way to follow that advice. Which portal fits depends mostly on your tax and practice software; I don't compare vendors here. Whatever you pick, check that clients can upload and download there, that messages stay with the document instead of going out as attachments, and that access is logged.
Answer templates for common client questions
Some client questions come back every season: Where's my return? What do you still need? I got a letter from the IRS. Rewriting the answer each time costs time and gives a slightly different answer. A template solves that when it has three parts: the question as clients ask it, the approved answer, and the limit, meaning what never comes from a template but from a person.
Template: answer library and inbox rules
The answer library works with or without AI. The inbox rules are what an AI employee gets from you before its first run.
CLIENT ANSWER LIBRARY Version: [date]
Approved by: [partner / CPA] Next review: [date]
1. QUESTION: "Where's my return?"
ANSWER: Your [year] return is in progress, status: [status from
your practice software]. When the draft is ready, you'll find it
in the client portal and get a short email from us.
LIMIT: no completion date that isn't in the system; nothing about
refund or balance due.
2. QUESTION: "What do you still need from me?"
ANSWER: The open items are listed in the client portal under
[location]. Please upload them there rather than by email.
LIMIT: no answer on whether something is deductible.
3. QUESTION: "I got a letter / notice from the IRS or the state."
ANSWER: Thanks for letting us know. Please upload every page in the
client portal. [Name] will review it and get back to you by [time].
LIMIT: no view on whether the notice is right or what to reply;
the date goes to [name] for the deadline calendar.
4. QUESTION: "Can I deduct [expense]?"
ANSWER: We'll look at that together with your return. [Name] will
get back to you, or you can book a call at [link].
LIMIT: tax questions are answered by a person at the firm.
5. QUESTION: "I can't log in to the portal."
ANSWER: The sign-in guide is at [link]. If it still doesn't work,
please call [name] at [phone].
LIMIT: no passwords or login details by email.
6. QUESTION: "My bank account / address has changed."
ANSWER: Thanks. Please enter the new details in the client portal
under [location]; we'll take them from there.
LIMIT: never take bank details from an email; confirm any change by
calling the client at the number already on file.
INBOX RULES
Inbox the AI reads: [office@...], not personal mailboxes
Off-limits, not even sort: [HR, applications, health, disputes/claims]
Cleared beforehand: service provider contract and safeguards
(16 CFR 314.4(f)), MFA, on [date] by [name]
Pile Examples What the AI does
Now IRS/state notices, letters add to deadline list,
with a date tell [name]
Today client questions 1 to 6 draft from the library
Can wait newsletters, vendor updates nothing
Trash ads nothing
Judgment (person) tax questions, complaints, nothing beyond the pile
anything without a template
Deadline list (AI): client no. | sender | type of letter |
date on letter | received on | channel
The AI does not: calculate deadlines, keep the docket, judge a notice
Docket entry: [name]
Docket review: [name], backup [name]
Sending: drafts only; out goes what [name] approves
Attachments with tax data: client portal only
Fill the brackets once for your firm. More on reusable email wording is in Business Email Templates That Work.
Deadlines from the inbox: a list, not a docket
A notice in the inbox has a date on it, but the response window and what counts as a timely reply depend on the notice and the rules behind it. That's a judgment call. So the work splits like this: the AI employee logs every letter with its date, sender and channel and tells the person in charge. Entering the deadline and checking it stays with people. The same line applies to law firms, see AI for Lawyers in Germany: What Works.
What Frieda and Sonja do
At a tax advisory firm where I built AI employees, part of this is handed over. Under "Email monitoring and simple tasks", the case write-up says: "An AI employee monitors the mailbox and works through simple cases. What counts as ‘simple’ is defined by the firm, not by the AI." I don't publish more about this part of the case; the library and rules above are my template, not that firm's setup.
In my own business, two roles fit. This is how you put them to work in a firm.
Frieda sorts the inbox. She puts incoming mail into Now, Today, Can wait and Trash, with a fifth pile for anything that needs my judgment. For the Today pile she prepares replies, and each one stays a draft until I approve it. Folders with personal matters, job applications, health or legal disputes are off-limits to her. In a firm, her piles follow the inbox rules above, and you describe the deadline list to her once; she doesn't track deadlines. The pile system is in Sorting Your Inbox: The Pile System, and when a separate role beats a mail app feature is in AI Email Triage: Agent or Tool?.
Sonja gives the templates the firm's voice. She has been running in my business since July 17, 2026, and learned my tone from 50 of my own real sent emails. Sending happens only after explicit approval, case by case. For a firm, she drafts the six answers from your sent mail, for a partner to approve. How the tone learning works is in Can AI Write Emails in My Voice?.
What stays with people: any tax answer, judging notices, the docket and approving what goes out. Nobody in this workflow files anything with a tax authority.
In Germany: professional secrecy and the data lock
German tax advisers face criminal liability for disclosing client secrets without authorization (§ 203 of the Criminal Code). For service providers such as an AI vendor, § 62a of the Tax Advisers Act requires careful selection and a contract in text form that binds the provider to confidentiality, and the client's consent where a service directly serves a single engagement. Germany's data protection authorities add, in their 2021 guidance on email, that professional secrecy can indicate a high risk, which regularly calls for end-to-end encryption.
For client data, there's my data lock. It sits between your team and Claude. Before a request goes to Claude, it replaces names and other details that point to a person with placeholders. Which details get replaced and which stay readable is set up per client. The data lock is ready for use and already in operation. I set it up for each client individually and tailor it to their work; what your case needs, we work out together in a call. It lowers the risk but doesn't take obligations off your hands: contracts, confidentiality and data processing terms are still needed. No automatic detection catches every detail, so the setup also covers what shouldn't go to Claude at all. How I decide what an AI gets to see is in AI and Privacy: What the AI Gets to See, and how Claude Code is secured in a tax firm is in Claude Code Mods for Tax Firms: Uses, Risks.
More for accounting and tax firms
Frequently asked questions
What is a client portal for accountants?
A secure area where the firm and its clients exchange documents and messages: clients upload, the firm posts drafts and letters, and access is logged. For anything with tax data, it's the safer route than an email attachment.
Can accountants email tax documents to clients?
The FTC Safeguards Rule requires encryption of customer information in transit over external networks, and IRS Publication 4557 says to send only password-protected, encrypted documents if you must use email, or to use SFTP instead. A portal plus a short notice email covers both.
Does the Safeguards Rule apply to small firms?
Yes. Firms with information on fewer than five thousand consumers are exempt from a few parts listed in 16 CFR 314.6, but not from encryption, multi-factor authentication or overseeing service providers.
Is an AI email assistant reliable for an accounting firm?
That depends less on the tool than on the rules: which inbox it reads, which templates are approved and who checks before anything goes out. It's built for sorting and drafting. Tax answers, judging notices and tracking deadlines aren't its job.
How to continue
Collect one week of client emails and mark the questions that come up more than once. Write answers with limits for the top six and have a partner approve them. Then set the inbox rules: which inbox, which piles, who keeps the docket. That's half of the written instructions for an AI employee. If you want to go through your firm's setup together, get in touch. More industries are on AI by Industry.
