Accounting & Advisory · AI Governance
AI policy for
accounting firms.
Your team is already using AI to draft advice, process data, and manage engagements. Without a documented AI governance policy, you're exposed under APES 320, the Tax Agent Services Act, and APP from December 2026.
The risk
Where accounting firms
are most exposed
Client financial data in AI tools
Staff use AI tools — often free-tier, US-hosted — to draft tax advice, analyse financials, and summarise engagements. Client financial data enters these platforms without consent or governance, breaching APP 11 and confidentiality obligations.
No APES-aligned AI policy
APES 320 requires documented quality management systems. AI tools used in client engagements must be governed, monitored, and assessed for risk. Most firms have no policy at all — a gap that TPB and ASIC audits will increasingly probe.
APP disclosure gaps
From December 2026, firms must disclose how AI handles personal information in their privacy policy. Client-facing privacy statements written before generative AI are almost certainly non-compliant under APP 1.7.
The platform
Three modules built for
accounting firm AI compliance
1
AI Tool Inventory
Connects to Microsoft 365 and Google Workspace to surface every AI tool used across your firm — from tax AI platforms to Copilot in Excel to ChatGPT for drafting. Builds a live AI inventory register with risk scores per tool and department, forming the basis of your AI risk assessment in Australia.
2
Policy & Disclosure Pack
Generate an AI governance policy template aligned to APES 320 and the Tax Agent Services Act 2009. Includes an AI acceptable use policy for Australia, APP 1.7–1.9 compliant client disclosure updates, and AI vendor risk assessment templates for each tool your firm uses.
3
Audit Evidence & Trust Centre
Immutable audit log of every AI governance action — policy reviews, staff training completions, vendor risk assessments. Export a board-ready PDF for TPB registration reviews, ASIC audits, and PI insurer requests. Demonstrate AI governance compliance to clients and regulators.
Compliance obligations
The regulations your
accounting firm must meet
APES 320 — quality management obligations covering AI tools used in client engagements
Tax Agent Services Act 2009 — obligations when AI assists in the preparation or review of tax advice
Privacy Act 1988 / APP 11 — secure handling of client financial and personal information
APP 1.7 — disclosure of AI data handling practices in client-facing privacy policies
OAIC AI compliance 2026 — new enforcement powers under the Privacy Act amendments
ASIC regulatory expectations for financial services licensees using AI in advisory outputs
Two-week assessment.
Board-ready report.
Board-ready report.
We map every AI tool in your firm, identify APES and APP gaps, and deliver a governance report you can show the TPB, ASIC, or your PI insurer. Fixed fee — $5,000.
Book AssessmentOr email us at hello@govara.com.au