AI Data Licensing for CPA & Accounting Firms: Eligibility from 10 Employees

Accounting firms with 10 or more employees meet the current minimum on Mode's BizBuyData program page, and buyers want accounting workflow data. But client tax files, workpapers and anything tied to return preparation are covered by IRC §7216, the AICPA confidentiality rule and the FTC Safeguards Rule. What a firm can realistically license is its own internal operations record.

Why are AI buyers targeting accounting firms?

AI developers are building agents to handle routine professional work, and accounting is near the top of the list. Business Insider reported on October 13, 2026 that law and accounting "see especially high demand." Mode's launch release set a lower bar for accounting firms "because AI labs are prioritizing legal and accounting data." Mode's program page lists QuickBooks, NetSuite and Paychex among the sources it buys from.

The catch is the same one law firms face. The most valuable records, how your staff prepare returns, close books and answer client questions, are full of client information you are legally barred from disclosing.

Does your firm meet the minimum?

Seasonal staff complicate the count. Mode's application asks separately for full-time desk employees and an optional peak desk headcount. Count your year-round full-time staff and give Mode the peak number separately. Confirm during intake which figure governs.

What does IRC §7216 prohibit?

26 U.S.C. §7216 makes it a misdemeanor for anyone in the business of preparing tax returns to knowingly or recklessly disclose, or use for any other purpose, information furnished for or in connection with preparing a return. Penalties run to a fine of up to $1,000 ($100,000 in identity-theft cases), up to one year in prison, or both. 26 U.S.C. §6713 adds a civil penalty of $250 per disclosure or use, up to $10,000 a year, before the higher identity-theft tier.

The definition is what catches firms off guard. Under 26 CFR 301.7216-1, "tax return information" includes any information furnished in any form or manner for, or in connection with, the preparation of a return, including information the preparer derives or generates from it. In practice that reaches:

• Client emails and portal messages about a return
• Uploaded source documents and organizers
• Workpapers, review notes and tax software files
• Engagement and billing records tied to tax work
• Internal chat threads where staff discuss a client's return

Disclosures with the taxpayer's consent are possible, but 26 CFR 301.7216-3 sets specific requirements for the form and content of that consent, and the IRS's §7216 information center collects the guidance. Collecting compliant consents from every client whose records appear in a mailbox is not realistic for most firms. De-identification after export does not answer whether you were allowed to export the information in the first place. Ask tax counsel.

What do AICPA rules and the FTC Safeguards Rule add?

AICPA Confidential Client Information Rule (ET sec. 1.700.001). The AICPA Code of Professional Conduct bars a member in public practice from disclosing confidential client information without the client's specific consent. It applies regardless of whether the work involved tax returns, so it reaches audit, bookkeeping, advisory and payroll clients that §7216 might not. Your state board of accountancy may have its own confidentiality rule.

FTC Safeguards Rule (16 CFR Part 314). The FTC lists tax preparation firms among the financial institutions covered by the Safeguards Rule. Covered firms must keep a written information security program, run a risk assessment, control who has access to customer information, and oversee service providers by contract. Firms with customer information on fewer than 5,000 consumers are exempt from some provisions, not all. Since May 2024, covered firms must notify the FTC within 30 days of discovering a breach involving unencrypted information of at least 500 consumers. Giving an outside buyer sign-in access to a system holding client information sits awkwardly inside that program, which is the practical reason to keep those systems out of scope entirely.

Could client consent make client records licensable?

On paper, both §7216 and the AICPA rule allow disclosure with client consent. In practice, consent does not scale to a data-licensing deal:

• Section 7216 consents are formal documents. 26 CFR 301.7216-3 requires a separate, written consent from the taxpayer that meets specific content requirements, and the IRS's §7216 guidance adds format rules. A clause in an engagement letter is unlikely to qualify.
• AICPA consent must be specific. The Confidential Client Information Rule requires the client's specific consent. A general data-use provision is a weak basis for disclosing years of client correspondence to a buyer that resells it.
• Coverage is never complete. Mailboxes and shared drives hold records of former clients, client family members, client employees and counterparties. You cannot collect consent from most of them.
• The ask itself. Asking clients to let the firm be paid for their tax and financial records invites the question of why the firm, rather than the client, should be paid. Most clients will decline, and some will reconsider the relationship.

So the realistic path is a firm-only scope. That is also the easier deal to defend if a client, a state board or the IRS ever asks what left the building.

What is licensable at an accounting firm?

Mode's program page lists email and calendar, documents and files, chat and collaboration, calls and transcripts, CRM and sales, and billing and operations. Sort your systems by whether they can hold client information.

Note that QuickBooks and NetSuite on Mode's source list mean very different things for your own ledger and for client files you hold access to. Only the first is yours.

What about your staff's data?

Even a clean operations scope contains your employees' messages. Since January 1, 2023, California employees' personal information has been fully covered by the CCPA, according to the California Privacy Protection Agency. Emory law professor Ifeoma Ajunwa told Business Insider that whether employees' consent extends to the sale of their data is "an ethically gray area." Plan how you will tell staff before you sign, not after.

What could an accounting firm be paid?

No public figure is specific to accounting firms. The attributed ranges:

Mode says its calculator "is illustrative, not a guaranteed offer." It reviews the systems and dates in scope, years of history, record volume and quality, and ownership terms before making a fixed offer. A firm that excludes mailboxes, tax software and practice management has removed most of its record volume, so expect a narrower scope to price below what headcount alone implies. Our estimate below uses Mode's accounting minimum and published range; the methodology explains the math and its limits.

How long does it take, and when should counsel get involved?

Avoid scoping work during busy season. The LOI window is short, and Business Insider reported that some brokers push 48-hour "exploding offers." Our process guide walks through each stage.

What should a managing partner check before signing?

• Scope in writing, system by system, with every client-facing system excluded.
• Tax counsel's view on §7216 and §6713 exposure for the proposed scope.
• Your written information security program under the Safeguards Rule, and whether the export fits it.
• Engagement letters for confidentiality and data-use terms that go beyond professional rules.
• Filtering evidence. Mode's release says it built its own PII-removal tools after other vendors would not let it audit theirs. Ask for documentation and sample output. No vendor can honestly promise data is fully anonymous.
• Insurance. Novaes said Mode was "working on" a third-party insurance policy for potential data leaks. Ask whether one exists.
• Exclusivity and payment terms as written in the agreement.

Our risk checklist covers each point in depth.

Who are we?

DataLicensingAudit is an independent referral partner of Mode. If your firm signs after we introduce it, Mode may pay us a referral fee; your payment is unaffected. See our disclosure. We are not a CPA firm, perform no audit or attest services, and do not give tax or legal advice. Talk to your counsel. Law firms face a parallel analysis on our law firms page.