Accounting Outsourcing Myths: Which Ones Are Actually True

Treasury Circular 230 §10.22(b) puts a condition on leaning on someone else's work. A practitioner "will be presumed to have exercised due diligence" when relying on another person's work product only if that practitioner "used reasonable care in engaging, supervising, training, and evaluating the person."

Presumed. The presumption turns on the care you take when you lean on that work.

Almost every page written about accounting outsourcing myths debunks every single myth on its list. That is the tell. A list where the vendor wins nine times out of nine was built to sell, not to inform.

So here is a verdict on each of the nine claims. Five are false. Four are true, and we say so. The most expensive of the false five is the last, because the phrase most firms accept as proof that their client data is safe is one the AICPA's own assurance leadership calls "not a certification."

Accountably places offshore accountants with US firms, so read the four verdicts we mark true as a seller grading its own category.

What are the most common accounting outsourcing myths?

Nine claims recur, and they are not equally wrong.

The same set turns up again and again: it's only worth it for large firms, you lose control of the work, outsourcing moves some of the liability off you, you'll have to lay off your local staff, quality suffers and you end up fixing the work, managing them becomes a second job, they churn and you retrain every year, it's mainly sold as a cost-cutting play, and your data is safe because the provider holds a SOC 2 certification. That last one names a credential; the AICPA's SOC framework produces an examination report.

Four of them are accurate descriptions of what happens when a firm buys offshore seats without buying the structure that makes seats work. What is mythical is the explanation, not the experience.

Here is the grading, in full. Read "false" as the claim is wrong, which is not the same as good news: claim three is wrong in a direction that should worry you more than the myth did.

Which accounting outsourcing myths are false?

Five of the nine claims are false as stated. Four of them fail for reasons you can read straight off the structure of an engagement. The fifth fails on the word "certified".

Is outsourcing accounting only for large firms?

No. The qualifier for outsourced accounting is not firm size or revenue. It is whether the firm has consistent work to hand off.

A solo practitioner with a steady 1040 season and no capacity to take the next 20 clients has a stronger case than a 40-person firm whose work is lumpy and bespoke. One of our engagements is a solo Enrolled Agent who doubled her client base with a single dedicated preparer and took her first April vacation in 12 years.

The reason the myth persists is that offshore vendors historically priced and staffed for enterprise volumes. That is a fact about vendor history. It says nothing about which firms outsourcing actually fits.

Do you lose control of the work when you outsource?

No, and the framing hides the real question. Control over a tax return has never lived in the room where it was prepared. It lives in who reviews it and who signs it.

When work is prepared offshore, the file still moves through your review, your standards and your workpaper conventions before it reaches the return. What you delegate is preparation. What you keep is the signature, the opinion and the final judgment.

The honest version of this myth is different. You keep control. What you can lose is visibility, unless the engagement is built to give it back through structured workpapers, standardised naming, version control and an agreed delivery window. Visibility is a design choice. Control is a legal fact.

Does outsourcing move any liability off the signing partner?

No. The liability stays exactly where it was, and the rules are specific about it.

Two federal rules settle it.

First, the penalty follows the signature. Under 26 U.S.C. §6694(a), a "tax return preparer" who prepares a return carrying an understatement due to an unreasonable position, and who "knew (or reasonably should have known) of the position," pays "the greater of $1,000 or 50 percent of the income derived (or to be derived) by the tax return preparer with respect to the return or claim." The same subsection spares the preparer who shows "reasonable cause for the understatement" and that they "acted in good faith." For willful or reckless conduct, §6694(b)(1) sets the penalty at the greater of "$5,000" or "75 percent of the income derived." Source: 26 U.S.C. §6694.

Who counts as that preparer? "An individual is a tax return preparer subject to section 6694 if the individual is primarily responsible for the position(s) on the return or claim for refund giving rise to an understatement." Inside one firm the regulation is blunt: "There is only one individual within a firm who is primarily responsible for each position on the return or claim for refund giving rise to an understatement." Source: 26 CFR 1.6694-1(b).

Across firms it opens a narrow door: "In some circumstances, there may be more than one tax return preparer who is primarily responsible for the position(s) giving rise to an understatement if multiple tax return preparers are employed by, or associated with, different firms." An offshore preparer sits at the vendor's firm, so that sentence is the one that could ever reach them. It lets responsibility be shared. It does not move responsibility. Source: 26 CFR 1.6694-1(b).

Where a firm has a signing preparer, the same regulation provides that "the signing tax return preparer generally will be considered the person who is primarily responsible for all of the positions on the return or claim for refund giving rise to an understatement unless, based upon credible information from any source, it is concluded that the signing tax return preparer is not primarily responsible." Source: 26 CFR 1.6694-1(b).

So the presumption starts on the person who signs, and somebody has to produce credible information to move it, in a dispute you never wanted.

Second, leaning on someone else's work is only presumptively diligent if you supervised them. Circular 230 §10.22(b) reads: "a practitioner will be presumed to have exercised due diligence for purposes of this section if the practitioner relies on the work product of another person and the practitioner used reasonable care in engaging, supervising, training, and evaluating the person, taking proper account of the nature of the relationship between the practitioner and the person." §10.36(a) adds that anyone with principal authority and responsibility for overseeing a firm's practice governed by Circular 230 must "take reasonable steps to ensure that the firm has adequate procedures in effect for all members, associates, and employees for purposes of complying with subparts A, B, and C of this part." The diligence rule quoted above is one of those, in subpart B. Source: Treasury Department Circular No. 230, Rev. 6-2014 (PDF).

That second rule is a shield, not a sword, and it is worth reading as one. Engaging, supervising, training and evaluating your offshore preparer is not overhead you outsourced away. It is the condition your own due-diligence presumption rests on.

"The signature, the opinion, and the final judgment stay with your firm. You sign; we make it signable."

Will you have to lay off your local staff?

No. Nothing about adding offshore capacity requires a headcount reduction.

The firms this works for are turning work away. Their partners are the bottleneck, their seniors are leaving, and the growth they decline never shows up in a spreadsheet. Offshore preparation absorbs the volume they were already losing.

The boundary matters, though. A firm with too many people and too little work has a demand problem, and offshore capacity does not solve demand problems. No vendor should tell you otherwise.

Which accounting outsourcing myths are true?

Four of the nine are true, in the ordinary case, under the way most offshore engagements are actually bought. Each one has a specific mechanism. Every mechanism is a purchasing decision rather than a fact about offshore accountants, which is a different sentence from "it isn't real."

Does outsourced work come back needing rework?

Often, yes. Rework is a common objection, usually phrased as "I tried offshore once and I spent more time fixing their work than doing it myself." That firm is not misremembering.

The diagnosis is almost always wrong, though. The failure is rarely the preparer's technical skill. It is that nothing stood between that preparer's first draft and the partner's desk. The firm hired a resume and never built the review process around it.

What protects your name isn't a preparer's credentials. It's the layered review standing between their mistake and your signature. In our engagements that means four passes before anything reaches the firm: preparer, then senior, then quality, then final. Your signature is the fifth mark on the return, and the first one that carries a penalty. One firm running eight placements said the workpapers were better than what they produced in-house.

So the myth is true, and the fix is boring. Buy the review, not the resume.

Does managing an offshore team become a second job?

Managing an offshore team becomes a second job if you bought seats; it doesn't if you bought a team that comes with its own management layer. Buy seats from anyone, including us, and you have bought the second job.

Staffing sold as raw headcount pushes every scheduling, quality and escalation decision back onto the partner who was already the bottleneck. That is the second job. It is also the default in this category, because headcount is easy to sell and management is expensive to deliver.

The structural answer is a managed offshore team with its own review layer, so the firm reviews output rather than supervising individuals. Time zones stop being a communication problem at that point, because the handoff is a queue with an agreed delivery window rather than a conversation you have to be awake for.

Expect the effort to be front-loaded either way. Ramping a team on your software and your standard operating procedures takes about three to four weeks before busy season, and mock returns run during that window so nobody practices on a live client file. Front-loaded is not the same as ongoing.

Do offshore accountants churn?

Sometimes, and whether that churn costs you anything depends on a clause most firms never read.

Attrition exists everywhere, onshore included. The difference is what happens on the way out. If your agreement says nothing about rolloff, a departure means you retrain from zero, in March.

Ask instead for two things in writing: a shadowing and handover period during the departing person's notice, so continuity survives the exit, and a replacement commitment if a placement isn't right. Ours is a 30-Day Fit Guarantee: if a team member isn't the right fit in the first 30 days, we replace them free, from our bench or recruited to your spec. The guarantee replaces the person rather than refunding the fee, because a refund would leave you exactly where you started, short a preparer in the middle of a season.

Is accounting outsourcing sold as a cost-cutting play?

For most engagements, yes. The savings are real. They are just not the reason to do this.

Cost is the entry ticket. The prize is removing capacity as the ceiling on the firm: the clients you stopped taking, the advisory work you never got to, the April you spent reviewing instead of deciding.

Firms that buy on rate optimise for rate. They pick the cheapest seat, skip the review layer because review is the expensive part, and then discover that the work comes back needing rework. The cost frame produces the quality failure. They are the same mistake.

If a provider leads with a savings percentage, ask what seniority and scope that number assumes. A savings percentage without those two variables tells you nothing.

Does a "SOC 2 certification" prove your client data is safe?

No, and the phrase itself is the problem. On the Journal of Accountancy podcast, the AICPA's vice president for assurance and advisory innovation, Amy Pawlicki, put it plainly: "SOC 2 is not a certification. It's actually an examination-level attestation engagement signed off on by a licensed CPA." What the AICPA's SOC framework produces is a report, and reports come in two strengths.

What is a SOC 2 report, exactly?

A SOC 2 report is the output of an examination. The AICPA promulgates the professional standards for SOC engagements, and its own guide is titled SOC 2® Reporting on an Examination of Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy. The AICPA describes the whole SOC suite as assurance reports that help users "assess and address the risks associated with outsourcing services." Source: AICPA & CIMA, SOC Suite of Services.

Testifying to the US Department of Labor's ERISA Advisory Council, the AICPA set out what the engagement actually delivers: CPAs "examine and report on a service organization's system description and the suitability of design and operating effectiveness of the security controls within that system," measured against the trust services criteria, which "includes the criteria used to evaluate the suitability of design and operating effectiveness of controls stated in the description." Source: AICPA statement to the ERISA Advisory Council, 2022 (PDF, dol.gov).

Follow that sequence to its end. An examination produces an opinion, an opinion lives in a report, and the report is where the AICPA's SOC framework stops. A provider who claims a "SOC 2 certification" either holds a report and is describing it wrongly, or holds nothing.

What is the difference between SOC 2 Type 1 and Type 2?

A Type 1 report gives an opinion at a moment; a Type 2 report gives one across a period. In the AICPA's account, a "Type 1 SOC 2 report provides a CPA's opinion" on whether controls "were suitably designed as of a point in time." A Type 2 SOC 2 report provides that opinion and adds "an opinion about whether controls stated in the description operated effectively," together with "a detailed description of the service auditor's tests of controls and the results of those tests." Source: AICPA statement to the ERISA Advisory Council, 2022 (PDF, dol.gov).

A presentation on SOC reporting published by the Council of the Inspectors General on Integrity and Efficiency compresses the same split into one line: Type 1 is an "assessment of design of controls at a point of time," Type 2 an "assessment of design of controls and their operating effectiveness for a period of time." Source: System and Organization Controls (SOC) Reports and FedRAMP (PDF).

A Type 1 says the lock existed on the day someone looked. A Type 2 says it stayed locked.

What should you ask a provider about security?

Ask three questions, and treat any badge as an answer to none of them. Which report do you have, Type 1 or Type 2? What period does it cover? Can I read it?

A provider with a real report will send it under NDA when you ask. A provider with only a badge has nothing else to send.

Accountably describes its own controls as SOC 2-aligned. That is a deliberate word and we choose it because it is accurate. Our controls are mapped to the AICPA's trust services criteria: NDA-backed confidentiality, background-verified staff, role-based access, secure VPN, encrypted file exchange, audit logs, zero local storage. It does not mean an independent CPA firm has examined them and issued an opinion. Aligned is not attested.

So put the three questions to us, and ask us for evidence of the controls themselves. Then put them to every other provider on your list, in the same words.

Why does the standard myth list keep failing firm owners?

Because it is written for the wrong reader. The standard myth list speaks to a business owner buying bookkeeping. The buyer at a CPA or EA firm is a different animal: the person whose name goes on the return, who is personally the constraint, and whose downside is not a bad month but a penalty and a client relationship.

That reader does not need to be told their fears are irrational. They have evidence. They tried offshore, it went badly, and a myth list that opens by calling that experience irrational has already lost them.

What failed was the setup. No review layer, no management layer, no continuity clause, no proof before live work. Offshore accounting seldom breaks on talent or process. It breaks on trust, and trust cannot be asserted. It has to be proven before your name is on the line.

"The person designing your offshore team has sat in your seat, signed off on returns, and felt your April. That's not a recruiter's promise; it's a practitioner's."

Firms often arrive at a second offshore attempt before it works. The difference is rarely a smarter vendor. By then the firm knows which questions to ask.

How do you test a provider before your name is on the return?

Run five checks, in this order, before your name is on a return. Each one is a question you ask, and the answer arrives in days rather than quarters.

1. Ask for the report, not the badge. Which report, what period, can you read it. Then read the exceptions section, which is the part of a report that tells you what did not work. If there is no report, ask what the controls are and how they are evidenced.
2. Name the reviewer, not the preparer. Ask who reviews the preparer's work, what their credential is, and how many passes a file makes before it reaches you. A provider who can only describe the preparer is selling you a resume.
3. Send real work, not a sample. Give the provider a fixed block of your own representative files, on your software and your standard operating procedures, and let their review chain run end to end. Those files are tax return information, so the consent required by 26 CFR 301.7216-3 has to be in place before they cross the border, not after. A sample the provider chose proves nothing about your work.
4. Grade the workpapers, not the return. Have your own reviewer mark the supporting file, not the finished output. Workpaper quality is where you can see whether a review layer exists.
5. Put an exit in the contract. Require a defined replacement term if a placement isn't a fit, and a shadowing and handover period on rolloff. Continuity that isn't written down is a hope.

Step three is the one nobody offers, which is why we built the engagement around it. Our Free 40-Hour Proof Pilot is a fixed 40-hour block of your own representative work, prepared by the offshore team on your standard operating procedures and software, put through the full multi-layer review, and handed to your reviewer to grade, before any live, signature-bearing work. The trial is free; the point is the proof, not a discount.

Frequently asked questions about accounting outsourcing myths

Why are four of the nine outsourcing myths actually true?

Four of the nine recurring claims are true in the ordinary case: outsourced work often comes back needing rework, managing an offshore team can become a second job, offshore accountants do churn, and most engagements really are sold as a cost play. Each is true because of how the engagement was bought, not because offshore accountants cannot do the work. A missing review layer, a missing management layer, a missing continuity clause and a rate-first purchase produce those four outcomes reliably.

Who is liable if an outsourced preparer makes a mistake?

Presumptively, the person who signed the return. Under 26 CFR 1.6694-1(b)(2), where a firm has a signing tax return preparer, that person is generally considered primarily responsible for all of the positions on the return giving rise to an understatement, unless credible information from any source shows otherwise. In some circumstances the same regulation allows more than one primarily responsible preparer, where the preparers are employed by or associated with different firms. Sharing responsibility is not transferring it, and the penalty under 26 U.S.C. §6694 still starts at the signature.

What does "SOC 2 aligned" mean, and is it the same as a SOC 2 report?

"SOC 2 aligned" means an organization has mapped its own controls to the AICPA's trust services criteria. It is not the same as holding a SOC 2 report. A SOC 2 report is the output of an independent examination that carries a CPA's opinion, while alignment is a self-description with no independent examination behind it. Accountably describes its own controls as SOC 2-aligned for that reason, and invites you to ask for evidence of the controls themselves.

Do you need a client's consent before their tax return information goes to a preparer outside the United States?

Yes. Under 26 CFR 301.7216-3, where the tax return preparer to whom the information is to be disclosed is located outside the United States, the taxpayer's consent prior to any disclosure is required.

For a taxpayer filing a return in the Form 1040 series, the same regulation also bars a US preparer from obtaining consent to disclose that taxpayer's Social Security number to a preparer outside the United States, unless the number is disclosed through an adequate data protection safeguard defined by the Secretary and the preparer verifies in the consent request that those safeguards are maintained. Confirm the current requirements with your own counsel.

What the nine verdicts add up to

Five false, four true, and the one you were most likely to trust is the one the AICPA's assurance leadership, on the Journal of Accountancy podcast, declines to call a certification. Notice which four are true: every one of them describes an engagement that was bought wrong. None of them describes a category that doesn't work. Nobody buys a preparer and gets a review chain by accident.

The partner's problem was never whether offshore accounting can work. It's that the proof always arrives after the signature, and the signature is the part you can't take back. Circular 230 §10.22(b) conditions your due-diligence presumption on how you engaged and supervised the person whose work you leaned on, and §6694 starts the preparer penalty at the position you were primarily responsible for. So the sequence that protects you is to see the work before your name is on it.

Run the five checks on any provider you're considering, including us. Ask for the report. Name the reviewer. Send real work.

If you're a firm carrying this volume, here's the ask. Don't trust us. Test us. Run a Free 40-Hour Proof Pilot on your own representative work, through full multi-layer review, before your name is on a return.

Since 2022 we've placed offshore accountants and tax preparers with 20+ US firms, across 30+ placements.