How Do Accounting Firms Use AI for Client Communication Under Circular 230?
How-To Guide

How Do Accounting Firms Use AI for Client Communication Under Circular 230?

Jake McCluskeyAdvanced35 min
Back to guides

Most CPA firm partners I talk to are quietly burning two to four hours per day during tax season on client emails. The status update on the K-1 that is still missing. The follow-up on documents the client said they would send three weeks ago. The acknowledgment that yes, the partner saw the email at 11pm Sunday and will respond in the morning. By April 15, the firm has spent a meaningful percentage of busy-season capacity on communication that does not require partner-level tax thinking, just partner-level professional voice.

AI handles that communication layer well. A 90-minute morning email session becomes a 30-minute one. A status update that took 15 minutes takes 90 seconds. The partner reclaims the hours, and the actual tax work gets the focused attention it should.

The catch is that CPA communication sits inside Circular 230, AICPA Statements on Standards for Tax Services, state board licensure rules, and Section 7216 disclosure restrictions. AI in the wrong place can cross the line into AI-generated tax advice without authorization, trigger Section 7216 violations on tax return information disclosure, expose the partner to preparer penalty risk under Section 6694, and create state board complaints that take months to resolve.

This guide walks through the workflow that captures the speed without the regulatory exposure. It covers the categories where AI is genuinely helpful, the categories where AI must not touch the draft, the Section 7216 consent question, the engagement letter language disclosure now requires, and the audit trail the state board may want to see.

Why this matters for accounting firms specifically

Accounting firms are in a peculiar bind. The work clients pay for keeps shifting toward advisory (which AI does not do well and partners must do personally), while partner time keeps getting eaten by transactional communication (which AI does well). The math is upside-down. The firms that fix it move partner hours from communication to advisory work, raise effective billing rates, and grow capacity without hiring.

The firms that do not fix it watch tax season burn out the senior team, lose junior staff to industry where the hours are saner, and price out of the advisory work that is the only growth path left for mid-size practices.

The regulatory environment is also shifting. The IRS is increasing scrutiny on preparer practices. State boards are issuing new AI guidance every few months. The AICPA released ethics guidance in 2024 that explicitly addresses AI in tax practice. Firms that wait for the picture to settle will be late. Firms that build a defensible AI workflow now (with the right disclosures, the right subscription tier, the right audit trail) will be ahead of the curve and ahead of competitors.

What an AI-augmented client communication system actually does

An AI-augmented client communication system is a workflow that uses a Business or Enterprise tier AI assistant (Claude or ChatGPT) on top of the firm's practice management stack (Karbon, CCH ProSystem fx, Lacerte) to handle three tasks: drafting non-advisory client communications at scale during busy season, building reusable templates across the client book, and producing communication audit trails the firm can show to a state board or insurance carrier on request.

Three things make this different from generic AI use:

  • It runs inside a clear regulatory boundary. The workflow defines what AI can draft (factual summaries, scheduling, document requests, procedural updates) and what it cannot (tax advice, regulatory interpretation, written tax opinion). That boundary is enforced through prompt structure, not just policy memo.
  • It uses the firm's voice, not generic CPA-speak. Communications drafted by AI sound like the partner wrote them, because the prompts include the firm's voice document and the partner's specific context.
  • It produces a defensible audit trail. The firm can show, on demand, which communications AI drafted and which the partner edited or wrote from scratch.

Think of it as a senior administrator who writes 200 client emails per hour in the firm's voice, never crosses into tax advice, and leaves a clear record.

Before you start

You need:

  • A Business or Enterprise tier AI account with a Data Processing Addendum signed by the firm. The DPA is non-negotiable for any AI workflow that touches client data.
  • The firm's engagement letter, updated with Section 7216 consent language and AI use disclosure. If the engagement letter has not been updated for the 2025 tax season, do that first. Talk to the firm's lawyer or use the AICPA's updated template language.
  • The firm's practice management tool (Karbon is most common, also Canopy, TaxDome, or whatever the firm runs) so AI workflow output integrates with the existing client tracking.
  • A specific use case to test on. The most common starting point: tax-season status updates and document-request emails. Pick one client engagement to run the workflow on first.

One thing to settle before any client tax data touches AI: the Circular 230 and Section 7216 question. We have a dedicated section on this below. It is non-negotiable. The firms that skip these steps are one preparer penalty away from a multi-year complaint with the state board.

Task 1: Build the firm's voice document and communication taxonomy

The failure pattern: every CPA firm has a voice, but almost none have it documented. Partners write emails in their own style, junior staff try to match it, and communication feels uneven across clients. AI cannot draft in the firm's voice without a voice document, and the firm cannot enforce the AI-versus-partner boundary without a written taxonomy.

What to build first, before any client communication runs through AI:

Here are 20 client emails the firm sent over the last 90 days. Read them and extract the patterns. What is the firm's voice (warm or formal, technical or plain, short or long), what are the most common categories of email (status update, document request, scheduling, planning question, escalation), how does each partner sign off, what kinds of language do partners use that AI should mirror, what kinds of language never appear that AI should also avoid. Output a one-page firm voice document and a taxonomy of communication categories.

This is a one-time investment of two hours. The output anchors every future AI session. The voice document gets pasted at the top of every email prompt. The taxonomy becomes the firm's operating definition of which categories AI handles and which the partner handles by hand. For firms with multiple practice areas, the voice document should have a tax section, an audit section, and an advisory section, because the regulatory boundaries differ. Tax has Circular 230. Audit has AICPA SAS standards. Advisory has fewer constraints but its own engagement letter scope.

Task 2: Draft tax-season status update emails at scale

The single highest-volume CPA email category during busy season is the status update. "Your return is in process." "We are waiting on your K-1 from Partnership X." "We need the corrected 1099 we discussed last week." Most firms send hundreds of these in February and March, and most of them get written individually by partners or managers because the firm has not built a template that sounds personal.

What to ask AI for instead:

Draft a tax-season status update email for Client X (married filing jointly, two W-2s, one rental property, one S-corp K-1 still outstanding). Use the firm's voice document. The current status: we have all documents except the S-corp K-1 from Partnership Y. Expected K-1 receipt: late March. Expected return completion: 7 to 10 days after K-1 arrives. Tone: warm, direct, not apologetic. Length: 4 to 6 sentences. Sign off as the partner on the engagement. Do not include any tax advice, regulatory interpretation, or planning suggestion. This is a status update only.

The prompt is doing several things that matter. It anonymizes the client name, it tells AI exactly which information to include, it specifies the constraint that matters most (no tax advice), and it pins the tone and length. The output reads like the partner wrote it. The partner reviews, adjusts a sentence or two, sends. Total time per email: 90 seconds instead of 12 minutes.

For firms that batch status updates weekly during busy season, the workflow scales: feed AI a CSV of 30 client status records, generate 30 individual emails, review, send. Two hours of partner time becomes 30 minutes. Applied across busy season, it is one of the highest-ROI workflows in CPA practice.

Task 3: Generate document request and follow-up emails

The second-highest volume CPA email category during busy season is the document request. "We need your closing statement." "Please send the foreign account information." "The 1099 from your brokerage is missing wash sale detail." These emails are templated, but the templates need to feel personal or clients ignore them.

What to ask AI for instead:

Draft a document request email for Client X. Documents needed: the closing statement from the May 2025 home sale, the year-end statement from Brokerage Y showing wash sale detail, and the K-1 from Partnership Z. Tone: professional, matter-of-fact, with a specific action and deadline. Use the firm's voice document. Sign off as the manager. End with a one-line note that the partner can be reached if the client has questions. Length: under 150 words.

Generic document requests get ignored. Specific requests with named items, named deadlines, and a named contact get responses. AI is good at the specific version when given the data. For follow-up emails when the client did not respond, use: "Draft the second follow-up email for Client X. The original went out 10 days ago. Tone: professional, slightly firmer, one specific deadline (April 1). Acknowledge that the client is busy without lecturing. Length: under 100 words." The graduated firmness across follow-up emails is nuance AI handles well when told the position in the sequence.

Task 4: Draft non-advisory client briefings on regulatory or process changes

Clients ask their CPA to explain a regulatory change. The corporate transparency act guidance. The state-level pass-through entity tax updates. The beneficial ownership reporting requirements. The partner usually responds with a brief factual summary pointing the client to next steps without crossing into specific advice. The failure pattern: partners write these briefings individually for each client, even though 80% of the content is identical across the client book.

What to ask AI for instead, when a regulatory change requires client communication:

Draft a client briefing email about the new beneficial ownership reporting requirements under the Corporate Transparency Act. The audience is small business owners and partnership clients. Cover: what the requirement is in plain English, who it applies to, the filing deadline, and the next step for the client. Do not provide specific advice on any client's situation. Do not interpret the regulation in ways that resemble a tax opinion. End with a clear next step (schedule a 15-minute call to discuss the client's specific situation). Length: under 300 words. Voice: factual, calm, no urgency-mongering.

The constraint that matters: "do not provide specific advice on any client's situation." That single sentence is the difference between a defensible briefing and a Circular 230 problem. AI handles the constraint when stated explicitly. For firms that send regular client newsletters, this workflow becomes the newsletter engine. The partner identifies which regulatory changes matter, AI drafts the briefing language, the partner edits, the firm sends. A newsletter that took five hours to assemble takes 90 minutes.

Task 5: Build engagement letter renewal and onboarding communications

Engagement letter season (late fall through early January for the upcoming tax year) is its own time sink. Every continuing client needs a renewal letter. Every new client needs an onboarding letter. The content is templated but needs per-client customization (entity type, scope of services, fee structure).

What to ask AI for instead:

Draft an engagement letter renewal cover email for Client X (continuing tax client, individual return with rental property and one K-1). Reference the prior year engagement, name the upcoming tax year, summarize any scope changes, and direct the client to sign and return the engagement letter (attached separately). Length: under 150 words. Tone: warm, partner-to-client, not transactional. Include the firm's standard Section 7216 consent language and the AI use disclosure paragraph from the firm's template (pasted below).

The Section 7216 consent and AI disclosure paragraphs are firm-standard language. AI does not write them. AI inserts them where they go. The partner's role is to verify they appear in every renewal email and that the client understands them. For onboarding new clients, the prompt adds a section on the firm's services and the partner introduction. "Draft a welcome email for new Client X, who just signed an engagement letter. Introduce the partner who will be the primary contact, summarize what to expect, name the document portal link, end with a specific next step."

Task 6: Generate the year-end planning communication that drives advisory revenue

The year-end tax planning email is the single highest-revenue communication a CPA firm sends. Done well, it surfaces planning opportunities that drive advisory engagements. Done badly, it gets archived as another newsletter. The failure pattern: most firms send a generic year-end summary listing 12 planning ideas. The clients who needed planning advice already had it covered. The clients who would have engaged never realized the firm was offering it.

What to ask AI for instead:

Draft a year-end planning email for Client X (high-income individual, recently sold a business, has unrealized gains in a brokerage account, has expressed interest in charitable giving). The email should reference 2 to 3 planning topics specifically relevant to this client's situation (not a generic checklist). For each, briefly describe the opportunity in plain English without giving specific advice that constitutes a tax opinion, and propose a 30-minute planning call. Tone: partner-to-client, confident, value-forward. Length: under 250 words. Sign off as the partner.

The constraint that matters: "specifically relevant to this client's situation, not a generic checklist." AI is good at picking the right 2 to 3 topics when given context. The partner reviews, edits, and sends. The clients who respond become the firm's advisory pipeline for Q1. A year-end planning push that used to take 30 partner hours takes 8.

The CPA-specific prompts that actually work

After watching CPA partners use AI on client communication, the difference between AI output that is genuinely partner-quality and AI output that crosses regulatory lines comes down to four prompt moves.

Specify the firm's voice. The voice document is non-negotiable. Without it, AI defaults to generic CPA-speak that does not match the firm. With it, AI sounds like the partner. Build the doc once. Reuse it on every prompt.

Specify the boundary. Every prompt that goes anywhere near client tax matters needs an explicit constraint: "Do not provide tax advice. Do not interpret regulations for this client's specific situation. This is a factual or procedural communication only." AI follows the constraint when stated explicitly. AI crosses the line when the constraint is implicit.

Specify the client's actual situation. Generic prompts produce generic emails that get archived. Specific prompts ("high-income individual, recently sold a business, charitable giving interest") produce emails that read as personal and drive responses.

Specify the next step. Every client email should end with one specific next step. Tell AI what the next step is. "End with a 30-minute planning call proposal" or "End with a deadline for the missing K-1" or "End with a confirmation that no action is needed from the client." The next step is what makes the email functional rather than informational.

The Circular 230 and Section 7216 non-negotiables

This section is short because the rule is simple, but it is the most important section in this guide.

Do not put any of the following into the consumer tier of any AI tool:

  • Tax return information, including 1040s, K-1s, 1099s, W-2s, 706s, 709s, or any client return data
  • Specific client tax positions, planning conversations, or strategy memos
  • Client financial statements, audit working papers, or trial balances tied to a named client
  • Client personal information protected by Section 7216 (which covers virtually all return-related information)
  • Drafts of tax opinions, planning memos, or written tax advice
  • Anything subject to the AICPA's confidentiality standards under Statement on Standards for Tax Services or the audit standards under SAS

The practical workflow that respects these rules: build the firm's voice document and reusable prompt scaffolding on the consumer tier with anonymized examples (Client X, Partnership Y, Brokerage Z), then move to the Business or Enterprise tier the moment any actual client information enters the workflow. The Business tier signed by the firm with a Data Processing Addendum is what makes the rest of the workflow defensible.

Section 7216 specifically requires written consent from clients before tax return information is disclosed to a third party. AI vendors are third parties, even at the Business tier. Update the firm's engagement letter to include the appropriate Section 7216 consent language for AI use. The AICPA has updated template language available. Use it. The Section 7216 question is the one most likely to come up in a state board complaint, because the language requirements are explicit and the IRS interprets them strictly.

Circular 230 governs federal tax practice. AI cannot draft anything that constitutes tax advice, written tax opinions covered by Sections 10.35 and 10.37, or representations about a client's tax position. Build the boundary into every prompt: AI does factual summaries, scheduling, and procedural updates. AI does not do advice. The partner does advice.

Preparer penalty exposure under Section 6694 falls on the preparer who signs off on the work. AI hallucinations on a tax position can trigger that penalty if the partner does not catch the hallucination. The defense is to keep AI out of advisory drafts entirely and to maintain an audit trail showing which categories of communication AI handled.

If your firm has signed an Anthropic Business agreement or OpenAI Enterprise agreement with a Data Processing Addendum, the rules on data flow are different. Ask your firm's general counsel or operations director what is covered. Do not assume.

When NOT to use AI for client communication

AI is a generalist tool. It is not the right answer for every CPA communication.

Skip it for:

  • Anything that constitutes tax advice or a written tax opinion. The Circular 230 line is bright. AI does not draft advice. Partners do, by hand, with verification of citations and positions.
  • Communications about ongoing audits or examinations. IRS audit communication, state revenue audit response, and tax court correspondence carry too much regulatory and litigation weight for AI involvement.
  • Sensitive client situations. A client going through a divorce that affects the return, a client with an unreported account that needs to be voluntarily disclosed, a client whose business partner just left under tense circumstances. Those communications need partner judgment on tone, scope, and word choice.
  • First-time clients during the engagement letter and onboarding phase. The first communications set the relationship tone. Have the partner write them by hand. Use AI on the second and subsequent communications, when the patterns are established.

A simple rule: AI is an unfair advantage on the 60% to 70% of CPA client communication that is procedural, factual, or templated. Trust the partner for the 30% to 40% that carries advisory, sensitive, or audit-process weight.

The quick-start template

Here is the prompt scaffold that works across most CPA firm client communication use cases. Copy it, fill in the brackets, paste into Claude or ChatGPT at the Business tier.

Draft a [communication type: status update, document request, year-end planning, engagement renewal] email for [client descriptor: entity type, situation summary].

Audience: [the client, the client and spouse, the client's controller or CFO].

Specific information to include: [the named items, deadlines, document requests].

Constraint that matters most: [no tax advice, no regulatory interpretation, no specific position recommendation].

Voice: [paste the firm voice document, or one-line voice description].

Length: [under 150 words, under 250 words, brief].

Sign off as: [the partner, the manager, the senior].

Next step: [what the client should do after reading].

That is the whole pattern. For most client emails during busy season, this scaffold is enough.

For recurring use, store the scaffold inside Karbon (or whichever practice management tool the firm uses) as a communication template. Each new client situation gets a new instance, with the firm's standard Section 7216 consent and AI disclosure language built in by default.

Bigger wins beyond client emails

Once the firm has the basic communication workflow running, the next layer of value shows up in places that are not single emails.

A firm-wide audit trail that defends the practice. Every AI-drafted communication should be logged: which client, which category, which partner reviewed, when. Most firms do not do this and will regret it the first time a state board asks. The audit trail can be a Karbon tag or a Notion database. The point is to show the work on demand.

A reusable communication template library that compounds. Every new email category AI handles becomes a template the firm reuses. After one busy season, the firm has 30 to 50 reusable communication patterns covering most of what gets sent during the year. New staff onboard onto templates instead of learning to write in the partner's voice from scratch.

A planning-revenue engine that runs on the same workflow. The year-end planning email pattern from Task 6 also drives quarterly planning communications, mid-year check-ins, and entity-specific planning outreach. Firms that turn the workflow into a year-round planning engine grow advisory revenue at 2 to 3 times the rate of firms that do not.

A first-meeting standard that sets expectations. Walk new clients through the firm's AI use during the engagement letter conversation. Most clients are fine with it once they understand the partner's review and sign-off process. The upfront conversation is much easier than the conversation after a problem.

The professional services AI consulting connection

This is one tool in one category. The bigger AI question for CPA firms is structural: the work that used to occupy partners through tax season can now be split into the part AI handles (procedural, templated, high-volume) and the part partners handle (advisory, regulatory, judgment-driven), and the firms that make that split deliberately will see their effective billing rates rise and their advisory revenue grow. The firms that do not will keep losing partner hours to communication and pricing power to firms that figured it out.

If your firm is wrestling with the bigger question (which workflows AI reshapes, what the new pricing model looks like, how partners and managers should spend their time), the AI Consulting in Professional Services page covers the full scope: where AI fits in agency, consulting, accounting, and architecture work, the common adoption failure modes, and what an engagement looks like when it works.

For the individual firm reading this: start with tax-season status updates. Run the workflow on next week's batch. The hours saved on that one category are the case for everything else.

Closing

The goal is not to send more emails. It is for partners to spend time on the advisory and audit-judgment work that justifies CPA fees, and stop spending it on communication any structured workflow can produce. Client communication is the cleanest entry point: the regulatory boundary is clear, the value shows up in busy season, and the compliance frame is manageable if you address Section 7216 and Circular 230 upfront.

Pick one communication category. Run the workflow on it next week. Compare the partner time spent before and after. The case for rolling AI into the rest of the firm's communication writes itself.

If you want to talk about how AI fits into your firm at the program level, the AI Consulting in Professional Services page lays out the full picture and how an engagement works.

Want this built for you instead?

Let's talk about your AI + SEO stack

If you'd rather skip the how-to and have it shipped for you, that's what I do. Start a conversation and we'll figure out the fastest path to results.

Let's Talk
Questions from readers

Frequently asked

Do I need a paid AI account, and which tier is the right call for a 25-person CPA firm?

Yes, and the tier matters more here than in most professions. A CPA firm should be on the Business or Enterprise tier of whichever AI tool the firm uses, not the consumer Pro tier. Anthropic Business and OpenAI Enterprise both offer Data Processing Addendums and zero data retention, which is what makes the workflow defensible to your state board and your professional liability carrier. Budget $30 to $60 per user per month at the Business tier. The math works on the first tax season: if AI cuts an hour per day off each preparer's email and status-update load during the 75-day busy season, the seat pays for itself in the first week of February.

Is it safe to put client tax data, including 1040s, K-1s, or financial statements, into an AI tool?

Not on the consumer tier. Section 7216 of the Internal Revenue Code restricts disclosure of tax return information by preparers, and the IRS treats AI tools as third-party disclosures unless the appropriate consent is in place. The clean path: sign a Business or Enterprise tier AI agreement with a Data Processing Addendum, get the appropriate Section 7216 consent language built into the firm's engagement letter, and limit what flows into AI to the minimum necessary. Use AI for the structural and narrative layer of communications. Keep raw tax data inside CCH ProSystem fx, Lacerte, or whatever tax engine the firm runs. The Section 7216 question is non-negotiable. Do not skip the consent.

Will an AI-drafted client email read like a generic CPA template?

Only if you let it. AI-drafted CPA communication that reads as generic comes from prompts that ask for "a status update email to a tax client." AI-drafted communication that sounds like the partner wrote it comes from prompts that include the partner's voice (direct or warm, technical or simplified, named approach to client relationships), the specific client context (the entity type, the planning horizon, the actual issue this client is dealing with), and the constraint that matters (no advisory language, plain English, specific next step). Build a one-page firm voice document. Reuse it on every email. The difference between generic AI output and partner-quality output is whether you gave AI the context to work with.

How do I share AI-drafted email templates with junior staff and tax season contractors who do not have an AI seat?

You do not share the AI tool. You share the templates. Most firms run the AI session at the partner or manager level, generate the email templates and frameworks, store them in Karbon practice management or whatever workflow tool the firm uses, and let staff fill in the client-specific details from the standardized template. The AI is doing the structural work once. The staff is doing the per-client work without needing AI access. For 1099 tax-season contractors specifically, this matters: the firm's AI subscription should not be opened up to short-term contractors who have not signed the firm's confidentiality agreement and who are not covered by the firm's data processing addendum.

What if an AI-drafted email accidentally crosses into giving tax advice and we miss it in review?

That is the Circular 230 problem in one sentence. Tax advice is regulated. AI does not know the line between informational summary and tax advice, and partners reading AI output during busy season are tired and may miss it. The defense is a structural workflow: AI drafts factual summaries, scheduling messages, document-request emails, and procedural updates only. AI does not draft anything that reaches a tax conclusion, recommends a tax position, or interprets a regulatory change for the client's specific situation. That second category goes through the partner, by hand. The rule should be written into the firm's AI policy and reinforced quarterly. The firms that get burned are the ones with no policy and a junior preparer who let AI write something it should not have.

Who owns the IP of an email if AI drafted it? Does that change anything for the firm?

The work product is firm-owned, the same as any other email. AI assistance does not change that. The wrinkle is preparer penalty exposure under IRC Section 6694: if AI hallucinates a tax position or cites a non-existent code section in something that ends up being treated as advice, the preparer who signed off on the communication carries the penalty risk personally. That is a structural reason to keep advisory language out of AI drafts entirely. Document the workflow in the firm's AI policy, log which categories of communication AI handles versus partner-only, and keep an audit trail of edits. State boards reviewing CPA practice complaints in 2025 are starting to ask for these audit trails.

Will our professional liability and E&O insurance still cover us if AI is involved in the work?

Most CPA professional liability policies written before 2024 are silent on AI. Most carriers issuing new policies in 2025 are adding AI riders, AI exclusions, or both. Call the firm's broker before tax season starts. Two questions: does the policy cover work product where AI was involved in drafting, and does the policy cover errors where AI hallucinated a fact or position the partner did not catch. If the answer to either is uncertain, get the rider added explicitly. The cost is typically a few hundred to a few thousand dollars per year. The exposure on a missed Circular 230 violation or a preparer penalty can run six figures or more. Get the rider.

Are state boards of accountancy requiring AI disclosure to clients yet?

A few state boards have issued guidance, and more are following. The AICPA released ethics guidance in 2024 emphasizing that AI use should be disclosed when material to the engagement and that the CPA remains responsible for the work product regardless of AI involvement. The practical default: include a one-paragraph AI disclosure in the firm's engagement letter for tax season. State the AI tools the firm uses, the categories of work AI assists with, and the firm's review and sign-off process. Most clients are fine with the disclosure. The handful who push back usually ask one question, the partner answers it, and the engagement moves forward. Skipping disclosure to avoid the conversation is the worst option, because state boards reviewing complaints in 2025 are explicitly looking for whether AI use was disclosed.

How Do Accounting Firms Use AI for Client Communication Under Circular 230? | Elite AI Advantage