Accounting · South Orange County
Returns in review, books to close and client documents coming in, handled from the office and from home, right through April.
What the FTC and IRS expect
s90 manages IT for CPA firms with a tax practice in south Orange County. We run your systems end to end, keep big changes out of filing season, and send a Technology Posture Report every quarter, plus a Compliance Posture Report for each rule that applies to you: your written security plan, the FTC Safeguards Rule and GLBA.
Does this sound familiar?
Returns, bank statements and Social Security numbers on every laptop, software renewals that stack up every year, and staff trying AI tools nobody has vetted. Someone handles your IT, but when a client asks how their data is protected, or your partners ask whether you're paying for the right things, the honest answer is a guess.
I'm trusting it on faith.
I couldn't show it if someone asked.
Most CPA firms have someone handling their IT. Tickets come in, tickets get closed, and nobody asks whether the firm is safer, spending well or able to show its work. Having someone handle your IT isn't the same as having your IT managed.
Proof before a client asks
Your clients trust you with their finances, their taxes and the decisions that shape their business. Your reputation rests on accuracy, discretion and reliability, so your IT should be able to prove it. We hold ourselves to the standard you hold for your clients: ready for your busiest season, keeping you ahead of what's changing in your profession, and working alongside you toward the goals you're building.
Verified
2-step sign-in on every account
The framework references are for your regulators and auditors. You don't need to read them.
How switching works
If it's in the table below, we already support it, including tax software hosted with Rightworks. We coordinate the switch with your previous provider, your staff and your software vendors, and your handoff happens after hours, so Monday looks like Friday.
01 · Baseline
Before anything changes, we review your setup and give you your Baseline Posture Score, a score out of 100 taken before we take over. You see where you stand, and exactly what we're taking on.
02 · Handoff
We coordinate with your current provider and cut over when it's not disruptive. We schedule your handoff around the dates that you can't move.
03 · Ownership
Support, security, maintenance and planning are ours. Every quarter your Technology Posture Report arrives, and your Technology Adviser walks you through it: what changed, what it means for you, and what we recommend next.
Tax engines
Accounting and bookkeeping
Hosting
Practice management and client portals
Everyday
Before you switch
You get a dated plan before anything changes, built around your filing deadlines. Tools are swapped one at a time, hosted tax software is planned for from the start so returns keep moving, and your staff are trained on anything new before they need it.
What's at stake in tax season
Systems that slow down right when tax season peaks, paying for software nobody uses, and staff putting client financials into AI tools no one has approved.
Ransomware in the middle of tax season, a client's tax data exposed, or one bad email that redirects a client's payment.
When someone owns your IT
Every device, license and login accounted for. Systems that keep up when tax season peaks. Software spend you can see and control. Recovery plans that have actually been tested. Support around the clock, in your office and through self-service for everyday requests. And proof in hand that's never more than three months old, so when a client asks how their data is protected, or it's time to attest to your security plan, the answer is already on your desk. You know your IT is taken care of.
What the FTC and IRS expect
Because you prepare tax returns, the law treats your firm as a financial institution, and that comes with rules for protecting client information: a written security plan, safeguards that are actually in place, and reporting certain breaches to the FTC (the Gramm-Leach-Bliley Act, the FTC Safeguards Rule, and IRS Publications 4557 and 5708). Some firms also choose a broader framework, NIST CSF 2.0 or CIS Controls, and we'll help you decide whether that fits. From there, we provide current evidence that your controls are in place and working. The person in charge of compliance at your firm decides whether you're compliant.
Bundle discounts available.
Attesting to a security plan every year without being able to show it works, a client asking how their data is protected with no clear answer, or a breach that triggers FTC notification with no record of the controls you had in place.
One question to ask yourself
In 30 minutes, we talk through your setup and you leave knowing which plan fits.
Book a callSee exactly what you'd receive each quarter, by email.
Get the sample Posture Report by email
