Engagement letters for tax and bookkeeping work: what belongs in one

An engagement letter is the agreement a firm and a client sign before work begins. It states what services the firm will perform, what the client is responsible for supplying, what the fees are, and where the engagement ends.

Most firms have one. Fewer have one that matches what they actually do, and fewer still connect it to how the work is requested and tracked once the season starts. That gap is where scope creep lives.

This guide covers what belongs in the letter, how tax and bookkeeping engagements differ, what the revised AICPA standards added in 2024, and where the letter meets intake.

DefinitionsWhat an engagement letter actually does

Three jobs, in order of how often they matter:

1. It bounds the work. The clause that earns its keep is the one saying what is excluded. A letter listing only what you will do invites the assumption that everything adjacent is included.
2. It assigns responsibility for information. You prepare from what the client provides. The letter is where that is stated, along with the fact that you are not auditing or verifying it.
3. It sets the terms of ending. Fees, timing, what happens if records arrive late, and how either side withdraws.

The AICPA makes the liability case plainly. Engagement letters are contractual agreements that detail the scope of services, relationship duration, and sometimes prices or rates, and they are often helpful in resolving disputes. According to CNA Risk Control Consulting Director Deb Rood, tax services accounted for 77% of the claims asserted against CPA firms in the AICPA's Professional Liability Insurance Program in 2024.

That figure is worth sitting with. The service line carrying most of the claims is the one many firms document most casually, often with a letter rolled forward unchanged from a prior year.

ContentsWhat belongs in an engagement letter

An engagement letter is often paired with a standard terms and conditions addendum covering billing and payment terms, termination or withdrawal, proprietary information, conflicts of interest, records management, and dispute resolution. Splitting it this way keeps the letter readable while the addendum carries the detail.

Do not draft from scratch. The AICPA Tax Section's Annual Tax Compliance Kit contains templates for more than 15 engagement letter types, underwritten by CNA, the endorsed underwriter of the AICPA Professional Liability Insurance Program, covering individual, partnership, S corporation and estate returns among others. Practitioners are also advised to have engagement letter templates reviewed by the firm's legal counsel to ensure they comply with applicable federal and state laws.

ComparisonTax preparation versus bookkeeping engagements

The two letters differ more than firms often assume, and the difference is mostly about time and about what the client thinks they bought.

Two practical consequences.

A bookkeeping letter needs a review date. A continuing engagement with no renewal clause can run for years while the actual work changes completely. Put a date in it.

A tax letter needs to name the year. An engagement letter for the 2025 return does not cover the 2026 return, and a client who was never asked to sign a new one will assume otherwise.

There is also a crossover risk where the two meet. Where tax work requires adjusting entries to a client's ledger, and no separate engagement letter defines that work, it becomes harder to argue the firm was not performing a reporting engagement. Defining the boundary in writing is cheaper than arguing it later.

StandardsWhat the revised AICPA standards changed

The AICPA restructured its tax standards, and the change is recent enough that a lot of published guidance still cites the old numbering.

The Statements on Standards for Tax Services No. 1 to 7 were effective until 31 December 2023, at which point the revised Statements No. 1 to 4 took effect on 1 January 2024. The revised SSTSs introduce a new structure organising the standards by type of work performed, and add three new standards: data protection at Section 1.3 of SSTS No. 1, reliance on tools at Section 1.4 of SSTS No. 1, and representation of clients before tax authorities at SSTS No. 4.

Two of those three matter directly to how a firm runs intake.

Data protection. Under the revised standards members are now required to make a reasonable effort to safeguard taxpayer data. A workflow where clients email documents, or text photographs of a W-2, sits awkwardly against that. The engagement letter should state how documents are to be transmitted, and the firm should provide a route that makes the stated method the easy one.

Reliance on tools. There is a section on the use of electronic tools: as innovations such as artificial intelligence create efficiencies in tax preparation and research, members must exercise due professional care when using these tools.

That is the standard any firm evaluating AI-assisted intake should read first. Due professional care is not satisfied by a vendor's accuracy claim. It requires the preparer to remain responsible for the output, which is the reason software in this category should surface what it did and let a human correct it, rather than quietly deciding.

A note on citations. If you are reading older articles on engagement letters, many cite SSTS No. 7 on establishing an understanding with the client. That numbering is retired. The AICPA publishes a practice aid mapping the previous standards to the revised ones, which is the safest way to check whether a reference you are relying on is current.

PitfallsWhere firms get caught out

Rolling last year's letter forward unchanged

The client added a state, sold a rental, or started a second entity. The letter did not change, so the scope on paper no longer matches the work. Review the letter against the prior-year return before sending it, the same way the organizer should be built.

Starting work before the letter comes back signed

Every firm does this under deadline pressure. The mitigation is process, not willpower: no engagement opens in the workflow until the signature is recorded, so the block is structural.

Treating the cutoff as a suggestion

A letter stating a cutoff date that the firm has never once enforced trains clients to ignore it. One season of holding the line is worth three seasons of reminders.

Having no disengagement letter

Ending a client relationship informally leaves the question of whether the engagement is over open. A short disengagement letter stating the work is complete, what has been returned, and what the firm retains, closes it properly.

Saying nothing about data handling

Given the data protection standard, silence on how documents are transmitted is a gap that is easy to close and awkward to explain if it is ever tested.

ConnectionConnecting the letter to intake

The letter defines scope. Intake is where scope holds or quietly expands, and most firms run the two as separate systems that never reference each other.

Three connections worth building:

1. The signature gates the request. The document request goes out when the letter comes back, not before. That makes the letter part of the workflow instead of an administrative step someone chases separately.
2. The cutoff appears in both places. Stated in the letter, and visible in whatever the client uses to submit. A date nobody sees twice is a date nobody remembers.
3. Out-of-scope requests get recorded. When a client asks for something the letter does not cover, that becomes a decision with a name attached, not an email that turns into unbilled work.

The document request and the tax organizer both inherit their boundaries from the letter. If the letter says the engagement covers the 1040 and two states, the request should ask for those and not quietly collect a third.

ProductHow TaxFlo fits

TaxFlo does not draft engagement letters. It runs the stage after the letter: the request, the client's submission, the readiness check, and the preparer's review.

Two points connect to the standards above. Document exchange is encrypted, access is controlled, and every action produces an audit log, which is the infrastructure side of safeguarding taxpayer data. And the AI in the product does two jobs only, classifying documents and extracting fields. Readiness rules, what blocks a submission, and every judgement call run on deterministic logic under preparer review. That boundary is deliberate, and it is the arrangement due professional care requires.

Approved firms sign in through the provider workspace. If your firm is not set up yet, apply as a provider or talk to us about your intake process.

QuestionsFrequently asked questions

Published by AmitaSoft LLC. This post covers firm practice management and cites AICPA sources for professional standards. It is not legal advice, and engagement letter templates should be reviewed by your own counsel.