If you are working out how to start outsourcing accounting, the sequence decides more than the shortlist does. One step cannot be repaired afterwards, because a taxpayer's consent has no retroactive version. Another one lives in the IRS e-file rules rather than in an onboarding checklist, so it tends to surface late.
Everything else on the list can be reordered, redone, or renegotiated. So the useful question is not who to hire first. It is what has to be true before the first client file leaves your office.
How to Start Outsourcing Accounting in Six Steps
Here is the whole sequence, with what each step is meant to produce.
- Work out whether you are short of preparation or short of review.
- Define one block of work, in files and hours rather than in job titles.
- Give the client the third-party notice, then get the taxpayer's written consent, in that order.
- Decide where the e-file line sits, and write down who sits on each side of it.
- Provision access as named users, under a contract that requires safeguards.
- Grade the first block against work your own team already finished.
Step 3 is the one that cannot be fixed later. Step 4 is the one that surprises people. The other four are ordinary operations work, and they are cheap in November and expensive in March.
Which Version of This You Are Starting
Two different readers arrive at this question, and the sequence is shorter for one of them.
A business owner handing out bookkeeping, payroll, or a monthly close is buying back time. Steps 3 and 4 largely fall away, because the rules behind them bind tax return preparers and authorized e-file providers rather than a company outsourcing its own books. Step 5's federal duty may not reach you either, since section 314.1(b) scopes the Safeguards Rule to the handling of customer information by financial institutions over which the Federal Trade Commission has jurisdiction, a list that includes, but is not limited to, tax preparation firms. The access discipline in it is still worth copying, and step 6 applies most of all.
An accounting or tax practice handing out client work is doing something else entirely. The information is protected by statute, the professional duties stay with the firm, and federal rules decide what the handoff is allowed to look like. That version is the one with rules attached, so the six steps are written for it.
Step 1: Decide Whether You Are Short of Preparation or Short of Review
Answer this before you look at a single provider, because it changes what you are buying.
A firm short of review gets nothing from preparation capacity. The finished files arrive faster, the reviewer does not, and the arrangement takes the blame for a queue it inherited. A firm short of preparation, or waiting on nothing but the calendar, gets what it hoped for.
Two weeks of wait-time logging across intake, preparation, open client questions, review and signature settles which one you are, and it is the only step in the sequence that costs nothing.
Step 2: Define One Block of Work, in Files and Hours
Scope the first engagement as a countable thing. Not "bookkeeping", but a named list of entities, monthly, with bank and credit card reconciliations and a draft trial balance, against an agreed hours ceiling.
Countable scope gives you three things a vague scope cannot. It gives the provider something to staff against. It gives you a unit to measure cost and quality per file. And it gives both sides a definition of finished, which is what first-season arguments are usually about.
Write down what a defect is while you are still calm. A missing supporting document, a coding decision that contradicts your own treatment, an unexplained variance left without a note. Agreeing that list before the work starts turns the first debrief into a measurement rather than a negotiation.
Then decide which work goes and which stays. Record work travels well and determinations do not, and that same test governs the rest of the arrangement.
Step 3: Get the Permissions That Cannot Be Granted Later
Two documents have to exist before any client information moves, and both are dated.
The professional one comes first, and it belongs in the engagement letter you are already sending, because before confidential client information is disclosed to a third-party service provider the member should inform the client, preferably in writing, that a third-party service provider may be used (AICPA Code of Professional Conduct, interpretation 1.150.040).
The statutory one is stricter and has no late option. Treasury Regulation section 301.7216-3(b)(1) states that a taxpayer must provide written consent before a tax return preparer discloses or uses the taxpayer's tax return information. There is no cure for a file that moved first, which is the whole reason this step sits third rather than last.
Remote access counts as movement, which catches firms who assumed that nothing leaving the server means nothing leaving the country. In section 301.7216-2(d)(3), Example 3, a firm's tax return information sits on a computer server in State A, an employee of a contractor in Country F inputs a password to view it, and a program lets that person view the information but not download or print it. Because the firm is disclosing the information outside of the United States, the regulation still requires the taxpayer's consent before the disclosure. Granting a login is a disclosure decision, not an IT decision.
So sequence the paperwork against your client list rather than against the provider's availability. A book of individual filers takes longer to re-paper than a book of business entities, and that lead time is a scheduling constraint rather than an administrative one.
Step 4: Draw the E-File Line Before You Hand Out Logins
Preparing a return and filing it are two different regulated activities, and the second one has a much shorter list of people allowed to perform it.
The Split the IRS Draws
The IRS makes the split explicit. Providers may also be tax return preparers, but the activities and responsibilities for IRS e-file and return preparation are distinct and different from each other (IRS Publication 3112, IRS e-file Application and Participation). In the publication's vocabulary a Provider is an Authorized IRS e-file Provider, which is your own firm once it holds an EFIN, not the outside team you are hiring. So preparation can be bought, while origination and transmission are your firm's own authorization to hold.
The Number Itself
Start with the number. Authorized IRS e-file Providers must protect their Electronic Filing Identification Numbers and their Electronic Transmission Identification Numbers from unauthorized use and never share them. The same publication is blunt about the consequence. When the IRS determines that a Provider is renting, leasing, or purchasing another Provider's EFIN, or is allowing others who have not passed suitability to use the Provider's EFIN, the Provider will be sanctioned (IRS Publication 3112). "Others who have not passed suitability" is a live phrase for anyone planning to give an outside team a filing button.
Suitability is a real check rather than a formality. During processing of the e-file application, the IRS conducts a suitability check on the firm and on all Principals and Responsible Officials listed on the application, and those checks may include a tax compliance check, a check for prior non-compliance with IRS e-file requirements, and a criminal background check (IRS Publication 3112).
Who May Hold It and Who May Use It
Two rules narrow the field. Everyone named as a Principal or Responsible Official has to be a United States citizen or an alien lawfully admitted for permanent residence, be at least 18 years of age as of the date of application, and meet applicable state and local licensing and/or bonding requirements for the preparation and collection of tax returns. And Providers may use only other Authorized IRS e-file Providers to perform IRS e-file activities, including origination and transmission of electronic submission (IRS Publication 3112).
The workaround firms reach for next is a second office, and the publication closes it. A separate EFIN is required for each fixed location that originates electronic submission of returns, and a fixed location is an office owned or leased by the electronic return originator, while the relief that lets one number cover preparation elsewhere is written for additional locations owned by the Provider (IRS Publication 3112). An independent vendor's office in another country is neither owned nor leased by you.
Delegated Access
Access to the application itself is the last piece. A firm can delegate responsibilities regarding its e-file application, and access to e-Services, to other individuals, and those individuals should be an employee, partner or other member of the firm or have a business relationship with the firm. Principals and authorized Responsible Officials are responsible for the actions of all delegates on the firm's application. Adding or removing a Delegated User requires the application to be resubmitted, and Providers must submit updates within 30 days of a change of any information (IRS Publication 3112).
What This Does Not Forbid
None of that forbids an offshore team from preparing returns, and it is worth saying plainly. Those rules govern the filing side, not the preparation side, and what they do is put a named, vetted person inside your firm on the filing side of the line. So write the line down: who prepares, who reviews, who originates, who transmits, and which of those names appear on your e-file application. Then check that your software's permission levels match it, because a role that lets a preparer submit is a policy you have written by accident.
Step 5: Give Access Like an Employee, Not Like a Guest
Provision named accounts, one per person, and keep an access matrix that says who can see what.
The federal duty behind that is short. The FTC Safeguards Rule requires you to oversee service providers by requiring them by contract to implement and maintain appropriate safeguards under section 314.4(f)(2), and by periodically assessing them based on the risk they present and the continued adequacy of their safeguards under section 314.4(f)(3) (eCFR, section 314.4). Periodically is the operative word, so the contract needs an assessment date and an owner rather than a diligence file from signing week.
The access matrix is what makes the rest auditable. One row per person, one column per system, with the date access was granted and the date it should be reviewed. Shared logins destroy the record, and the record is what turns "we supervise them" into something you can show.
Step 6: Grade the First Block Against Work You Already Finished
Run the first block as a graded test rather than a trial period. The difference is that a grade needs a comparison.
Use work your own people finished last season as the answer key, and have the same reviewer grade what comes back. That is the comparison a trial period never produces.
Completed files are still tax return information, so the consent from step 3 has to cover them before anything moves. For a taxpayer filing a return in the Form 1040 series, section 301.7216-3(b)(4)(i) says that, except as provided in paragraph (b)(4)(ii), a tax return preparer located within the United States may not obtain consent to disclose that taxpayer's social security number to a tax return preparer located outside the United States, and must redact or otherwise mask the number before the tax return information is disclosed outside the United States. Paragraph (b)(4)(ii) carries the only exception, for disclosure through an adequate data protection safeguard as defined by the Secretary in guidance published in the Internal Revenue Bulletin, with maintenance of that safeguard verified in the consent request itself. Confirm your software can mask the number on the file you intend to send, before you promise a start date.
Keep the exception log running from the start, and hold the scope where it is until a week of it tells you nothing new.
Measure three things per preparer across the block: review minutes per file, rework rate, and delivery against the agreed window. Those three decide whether step 1's answer was right.
What the Sequence Should Leave Behind
If the sequence worked, it produces artifacts rather than impressions. Each of these should exist as a document with a named owner.
| Step | What it produces | Who owns it |
|---|---|---|
| Constraint diagnosis | A queue log naming the longest wait | The partner who would sign |
| Scope definition | A written block of work, with a defect list | The engagement lead |
| Client notice and consent | Signed documents, filed per client | Whoever runs the consent register |
| E-file line | A named list of who may originate and transmit | The Responsible Official |
| Access provisioning | An access matrix with review dates | Whoever owns your systems |
| Graded block | An exception log and three measurements | The reviewer who graded it |
A firm holding all six of those can answer a regulator, a client, or a nervous partner without preparing anything new. A firm holding none of them has bought hours and hoped.
When to Wait
Some starts should be postponed, and a provider worth hiring will say so before you do.
The reason specific to this sequence is the paperwork calendar. If your consent book cannot be re-papered before the deadline the capacity is meant to relieve, the consents set your start date rather than the provider's ramp, and starting anyway means starting without them.
The e-file line has its own version. If nobody already on your e-file application has time to originate and transmit at the volume you are planning, that is a hiring decision inside your own firm, and it has to be made before an outside team is producing returns rather than after.
And stop entirely if an engagement letter promises a client that no third party touches their file. That promise gets renegotiated with the client or it holds.
Questions Firms Ask About Getting Started
How Much Does It Cost to Outsource Accounting?
The figure moves with scope, seniority and country until a written quote pins it down, so the number worth building first is your own. Load the seat you are comparing against with your real payroll, benefit, software and recruiting lines, then add the review and management hours the arrangement hands back to you. Compare that total against a quote for the same defined block, in the same units.
What Does an Outsourced Accountant Do?
In practice, the work that produces a record rather than a judgment. Transaction coding, accounts payable and receivable cycles, reconciliations, payroll preparation, close schedules, return preparation and workpapers. The determinations, the review and the signature stay inside the firm, and so does the decision about what is allowed to leave.
How Long Does It Take to Get Started?
Longer than the provider's ramp, because the paperwork runs on your calendar rather than theirs. Our own placements ramp in about 3 to 4 weeks of training on a firm's software and procedures. For a firm with a large individual-filer book, the consent collection sets the real start date rather than the training. Work backwards from the first deadline the capacity is meant to relieve, and if the calendar no longer allows a full ramp, take a smaller scope this season rather than a compressed onboarding.
Start With the Step That Costs Nothing
The order is the whole method. Find the constraint, define one block, sign the permissions, draw the e-file line, provision access properly, then grade real work and let the numbers set the size. Firms that run it that way spend their first season checking output. Firms that start at the shortlist spend it discovering which duty they assumed somebody else had.
So start with the diagnosis this month. Two weeks of logging tells you whether you are buying preparation or buying yourself a longer review queue, and everything downstream of that answer changes with it.
If you are a firm carrying volume you cannot staff, don't trust us, test us. Our Free 40-Hour Proof Pilot puts a fixed block of your own representative work through the full review chain, on your software and your procedures, so your reviewer grades real output before a client file depends on it. The pilot sits inside the same sequence, which means the block is chosen from files your firm can already release, and if a placement is not the right fit in the first 30 days, we replace them free.