Tool Safety Index
A great tool and a safe tool are two different questions. The market can tell you which accounting software is best. It cannot tell you what a vendor's binding terms let them do with your client data. So we read the actual terms of service, privacy policy, and DPA for every tool here, and summarize where each vendor's terms land for client data. Supported — the terms support it on the normal business tier. Conditional — supported once you get one specific setting or tier right. Not supported — a binding clause means the terms don't support client data. Undisclosed — the public terms don't say yet. It's our read of the published terms, not a recommendation about the product — every entry is dated and cited to primary source. Behind each one sits a scorecard of five independent checks — no-training, DPA, certifications, US residency, retention — with no composite score: each check stands alone so you can challenge any single cell. A separate connectivity note tracks which tools expose an API or MCP. Open any tool to see its alternatives in the same category, or add two to four tools to the compare tray for a side-by-side scorecard.
Help us keep this right. Every status here is a best-effort read of each vendor's terms as of the date on the card — with 228 tools, we don't guarantee we caught everything, and vendors change terms without notice. If you use a tool and something looks wrong or outdated, open it and hit Flag for review with what you saw. Every flag is tracked and re-verified against primary source, and the entry is corrected or the flag answered. That loop is the point.
228 tools tracked
228 posture verified
41 supported on the business tier
17 terms don't support client data
147 confirmed API or MCP
How to read the cards
The five checks
Status
meets the bar partial — read the note fails record too thin
Card icons are tinted by status — hover for the note, click the card for the detail and cited clause. BAA (HIPAA) sits in the detail view; it matters only for firms serving healthcare clients.
228 tools
Click any tool for its full posture, sources, and the exact clause.
QuickBooks Online Accounting Ledger · Intuit
Cloud general ledger for small businesses and firms, with a large third-party app ecosystem.
Why Downgraded from Standard 2026-07-18. Unlike Xero (which commits its AI won't train on your data), Intuit's own Global Privacy Statement AFFIRMATIVELY lists 'training our artificial intelligence models' as a use of customer content, with NO global opt-out — you can dismiss the AI panel, opt out of the AI banking page, and turn off the Payroll Agent, but Intuit support confirms 'the other AI Agents can not be turned off at this time.' There is also no signable DPA for the core ledger (Intuit is a controller) and QBO data is pooled across Intuit products (Mailchimp/TurboTax/Credit Karma). It stays usable ONLY as a books-only ledger because bookkeeping data in a client's own file is generally not §7216 TRI — but the mitigation is active work, not a toggle: keep ALL TRI/SSNs/returns out, disable what little you can, prefer client-owned subscriptions, and pursue a WRITTEN no-training commitment from Intuit before relying on the public policy. This is the one tool in the set where 'ignoring the AI panel' is NOT opting out of training.
The weakest-posture ledger in the directory: needs ACTIVE mitigation, not settings hygiene.
ChatGPT General-purpose AI · OpenAI
General-purpose AI assistant (consumer ChatGPT Free/Plus, ChatGPT Team/Enterprise/Edu, and the OpenAI API).
Why Business tiers exclude training by default + DPA/BAA/certs; consumer Free/Plus trains by default and has no DPA.
Consumer Free/Plus: Avoid · ChatGPT Team/Enterprise/Edu: Configure · OpenAI API: Configure
Drake Tax Tax Prep (US) · Drake
Value-priced form-based tax preparation software for small and growing firms.
Why Clean core path but AI-Powered Tools ToS §6(b) trains Drake's own AI instance on inputs; must keep TRI out of AI features/chatbot/forums.
Claude General-purpose AI · Anthropic
General-purpose AI assistant (chat + API) from Anthropic; posture splits sharply between consumer and commercial tiers.
Why Commercial tiers carry contractual no-training + DPA; consumer tiers train by default (opt-out).
Consumer Free/Pro/Max: Avoid (trains by default) · Team/Enterprise: Configure (no training, DPA, SOC 2) · API: Configure (no-training + DPA)
TaxDome Practice Management
All-in-one practice management and client portal platform for tax-focused firms.
Why Strong no-training/US-storage posture, but ToS says personal data is 'accessible by individuals worldwide' and AI features need tier confirmation — resolve offshore access and keep AI off client docs first.
Microsoft 365 Copilot General-purpose AI · Microsoft
General-purpose AI assistant embedded across Microsoft 365 (Word, Excel, Outlook, Teams) and as Copilot Chat, grounded in org data via Microsoft Graph.
Why Enterprise tiers (licensed M365 Copilot and free Copilot Chat on a work/Entra account) carry the DPA, no-training, and HIPAA BAA; the consumer tier on a personal account does not. Safe only when kept to the work/licensed tier.
Consumer Copilot (free, personal MS account): Avoid · Microsoft 365 Copilot Chat, work/Entra account (free EDP): Configure · Microsoft 365 Copilot (licensed enterprise): Configure
Cloud general ledger and bookkeeping platform for small businesses and firms.
Why Established ledger with auto-applying DPA (SCCs, audit rights), SOC 2 Type 2 + ISO 27001:2022 + PCI DSS v4.0, US AWS hosting, and a real (if FAQ-level) JAX no-training commitment — safe for books-only client work as-is. Routine to-dos: keep SSNs/return files out (offshore support access), restrict JAX per-user via roles (no global kill switch), file the SOC 2 report, and keep PHI out (no BAA).
Google Gemini General-purpose AI · Google
General-purpose AI assistant available in distinct product tiers with sharply different data terms: consumer Gemini Apps, Gemini for Google Workspace, Vertex AI, and the paid vs free Gemini API.
Why Enterprise tiers (Workspace add-on, Vertex AI, paid API) exclude training and human review under the Cloud DPA; consumer Apps and the free API tier both train on input and human-review a subset.
Consumer Gemini Apps (Free / Google One AI Premium): Avoid · Gemini for Workspace add-on: Configure · Vertex AI / paid Gemini API: Configure · Free Gemini API (AI Studio): Avoid
Karbon Practice Management
Practice management and workflow platform for accounting firms, with broad third-party integrations.
Why Binding AI Supplemental Terms bar training on customer data and the license is purpose-limited; remaining to-dos (SOC 2, DPA, US-region confirmation) are routine diligence.
UltraTax Tax Prep (US) · Thomson Reuters
Thomson Reuters tax prep software with broad federal, state, and local form support for firms.
Why Desktop core is Standard, but CoCounsel/AI features have no binding no-training terms and must not be enabled on client data until product-specific AI terms obtained.
Desktop core: Standard · CoCounsel/AI: Configure
Lacerte Tax Prep (US) · Intuit
Professional tax preparation software for firms handling individual and complex business returns.
Why Core desktop prep is Standard, but Intuit Tax Advisor's binding offshore-access acknowledgment and AI features need §7216 consent and WISP documentation before use.
Core prep/e-file: Standard · Tax Advisor/AI add-ons: Configure
Cloud payroll, benefits, and HR platform for small businesses, with an accountant partner program.
Why Payroll rails are contractually solid, but the Gus AI Assistant licenses Inputs/Outputs with no opt-out — keep client data out of the chatbot.
Payroll workflows: Standard · Gus AI Assistant: Avoid
ProSeries Tax Prep (US) · Intuit
Desktop and hosted professional US tax preparation software from Intuit for small and midsize firms.
Why Intuit acts as processor for pro tax products with binding US-residency for return information and no training license on raw TRI; deidentified-derivative use is a WISP-disclosure item and remaining steps (7216 consent, SOC filing) are routine.
Canopy Practice Management
All-in-one practice management platform for tax and accounting firms, including larger multi-employee firms.
Why AI training opt-in must be kept OFF and no-training promise lives only in a KB article, not the binding ToS — confirm in writing.
QuickBooks Desktop Accounting Ledger · Intuit
Locally installed general ledger software for small businesses and the accountants who support them.
Why Local company file stays on firm hardware and is not exfiltrated, but connected/AI (Intuit Assist) features trigger the Global Privacy Statement's AI-training and worldwide-processing terms.
Local install: safe · Intuit Assist/connected features: keep OFF.
ProConnect Tax Prep (US) · Intuit
Cloud-native professional tax preparation software for firms wanting SaaS return prep.
Why Conditional with no adverse posture data provided; Intuit cloud tax-prep tool defensible under §7216 processing exception with routine DPA/SOC to-dos.
Perplexity General-purpose AI · Perplexity AI
General-purpose AI answer engine that searches the live web; consumer tiers (Free/Pro), Enterprise Pro, and the Sonar developer API carry very different data-handling terms.
Why Sonar API is zero-retention/no-training (confirmed verbatim); Enterprise offers DPA + no-training; consumer Free/Pro may use inputs to improve models by default and has no DPA — usable only after opt-out plus §7216 consent.
Enterprise Pro / Sonar API are defensible; consumer Free/Pro is not without opt-out and consent
Otter.ai Builder / AI-adjacent
AI meeting notetaker that records, transcribes, and summarizes voice conversations and calls.
Why Trains on de-identified transcripts (may contain PII) by default; no training opt-out on any tier; enterprise DPA carves out and retains de-identified/aggregated ML use. Open-ended retention; active 2025 class action.
Cloud general ledger and financial management platform for mid-market companies and their finance teams.
Why Base ledger is a clean processor/DPA SaaS, but electing Sage Network Services/Copilot triggers an Addendum license over ALL customer data for R&D — keep AI features OFF.
Base ledger: Standard · Sage AI/Network features enabled: Avoid — keep them disabled.
ADP RUN For Partners Payroll (US) · ADP
Small-business payroll platform with an accountant partner program, for firms in the ADP ecosystem.
Why Binding BCR/MSA confine secondary use to de-identified/aggregated data and client contracts directly with ADP; SOC 2 pull is routine.
1040SCAN Tax Workflow (US) · Thomson Reuters
OCR scan-and-organize software from Thomson Reuters for 1040 source documents in tax firms.
Why US-hosted SOC 2 vendor that is defensible, but the offshore verification tier is a specific trap that routes documents overseas and triggers mandatory §7216 offshore-disclosure consent — keep to onshore/in-house tiers.
Onshore/Organize/PRO/ONSHORE verify: Standard · OFFSHORE verify: requires §7216 offshore consent
AI meeting assistant that records and transcribes client meetings, built for accounting firms.
Why No-training clause only covers 'generalized models available to other customers' so internal fine-tuning must be closed in writing, plus US-residency confirmation needed.
Accelo Practice Management
Cloud client-work management and automation platform for professional services firms, including accounting.
Why No training on identifiable data (only de-identified aggregated), but hosting spans US/Ireland/Australia with no US-only option, requiring residency confirmation.
Confirm US residency in writing (or obtain offshore §7216 consent) before entering TRI.
Accordance Tax Research (US)
US tax research platform for accountants and tax professionals.
Why Binding MSA caps use of Customer Information at 'solely to provide the Services' with no training grant, but residency, the SOC 2, and the OpenAI/Anthropic sub-processor data terms are unpublished — needs signed Order Form/DPA plus written US-residency and model-provider zero-retention confirmation before TRI is entered.
De-identified/hypothetical use: Standard · Real TRI: Configure (DPA + residency + model no-train in writing)
Proposal, invoicing, and practice-management platform for accounting and bookkeeping firms (a TaxGroove Inc. subsidiary).
Why No identifiable-data training (improvement use is de-identified) and you own your Data — but a consumer-grade privacy posture: no DPA or SOC 2, it 'sells/shares' user identifiers with ad partners, and reserves offshore processing.
Weak-posture Configure: defensible for engagement/proposal & client-contact data only with a signed DPA (likely negotiated), a sale/share opt-out, and §7216 consent — keep sensitive client PII minimal.
Accounting CS Accounting Ledger · Thomson Reuters
Desktop write-up and general ledger software for professional accounting firms, from Thomson Reuters.
Why Firm-friendly TR terms with no adverse training clause; only routine to-dos (DPA/DSA, SOC 2, US-residency confirmation, 7216) remain.
Desktop/local install is the most defensible mode; TR-hosted Virtual Office CS needs the written US-residency confirmation.
Accounting CS Payroll Payroll (US) · Thomson Reuters
Desktop payroll processing software for US accounting firms serving small business clients.
Why Thomson Reuters suite with genuinely protective Master Terms (firm owns Customer Materials, no identifiable-data training, processor DPA); only routine US-residency confirmation, SOC read, and subprocessor check remain.
Hosted option: confirm US data-center residency in writing
Accounting Power Accounting Ledger · Iris
General ledger and write-up platform for accountants, part of the Iris/AccountantsWorld suite.
Why Corrected citation: Accounting Power is US, governed by IRIS AMERICAS terms (Accounting Power CAS is a listed Covered Product), clause 2.6 (not Global 4.6). Substance identical: irrevocable worldwide license to improve/create/distribute uploaded content; no opt-out, no tier escape. Avoid stands.
Tax preparation workflow platform for automating 1040 document intake and prep for US firms.
Why Early-stage AI tax prep/review; public terms are thin, confirm DPA + no-training + current SOC 2 in writing.
Accruer Miscellaneous · FinOptimal
QuickBooks Online tool that automatically spreads transaction amounts across periods via description tags.
Why The controlling Accounting Firm Program Agreement isn't public and must be obtained, and the email non-confidential clause plus unconfirmed offshore staff need managing.
Acounta Practice Management
Done-for-you online bookkeeping and tax-prep service with a membership community (Acounta, Inc., a Delaware corporation), delivered via a third-party client portal — not a self-serve software platform.
Why Binding T&C exclude your confidential financial info from the content license and impose a mutual NDA, and the Privacy Policy uses no AI/training and doesn't sell data — but it's a done-for-you bookkeeping service on an unnamed third-party portal, with no customer DPA or SOC 2 and a website-only privacy policy that never covers the service's financial data.
Really a bookkeeping/tax-prep SERVICE, not a SaaS tool — using it means outsourcing client work to a third party. Defensible only with §7216 consent, a DPA, the unnamed third-party portal vetted, and the separate privacy policy read.
ADP Refer & Earn Payroll (US) · ADP
Referral program where firms send payroll to ADP for a commission and access via Accountant Connect.
Why Enterprise-grade referral portal carrying only client contact info; the §7216 consent and commission disclosure are routine firm-side to-dos.
Aero Workflow Practice Management · Aero
Cloud workflow and task-management tool for accounting and bookkeeping firms.
Why No train/improve clause, genuinely US Azure hosting; remaining to-dos (DPA, US-hosting confirmation, pen-test in lieu of SOC 2) are routine.
No Aero-level SOC 2 — rely on its pen-test attestation.
AI-assisted audit workflow tool for accounting firms performing audit and assurance engagements.
Why US hosting is contractually confirmed and no training-license exists, but the 'excluded from AI model training' promise is marketing-only — it must be captured in a signed DPA (none published) with flow-down to the undisclosed LLM before use.
Month-end close and financial reporting automation tool that integrates with Karbon for accounting firms.
Why Ambiguous 'training' license clause plus NZ entity/offshore access and no published DPA require written clarification before any client data.
Practice management and billing platform for mid-market and larger accounting firms.
Why De-identified "any purpose" clause, no residency commitment, no verifiable SOC/DPA, and AI-Claude connector limited to test data — paper the gaps first.
Data connector syncing many web apps and accounting ledgers into Excel or Google Sheets.
Why Binding no-training clause is clean, but opt-in AI features must stay OFF for TRI and offshore/residency is unconfirmed.
Billing and engagement platform with per-payment pricing for firms managing proposals and collections.
Why Configure: narrow exposure (billing/engagement data, not full financials) and decent technical hygiene (AES-256, Argon2, US servers, read-only bank, tokenized cards) + a genuinely well-designed read-only Claude connector — but NO standalone DPA, no verifiable SOC 2/ISO (PCI inherited from Stripe), stale Privacy Shield language, and disclosed Israel-based access. Keep returns/SSNs out, request a DPA + subprocessor list in writing, and ask about SOC 2.
Lighter billing/collections tool; narrow §7216 exposure but the thinnest cert/DPA trail of the set (≈ Puzzle).
AI-based US tax research tool for tax professionals, with a focus on data privacy.
Why Cleanest of batch; anonymized research tool that contractually forbids identifiable PII/TRI, so no client-data risk.
ATX Tax Prep (US) · Wolters Kluwer
Form-based professional tax preparation software for small firms and solo preparers.
Why Desktop; improvement license limited to ANONYMIZED data, customer owns data, 7216 addressed; only routine to-dos (US e-file confirm, read SOC 2).
Workflow automation platform for employee benefit plan (401k) audits, built for audit firms.
Why Binding terms are clean (customer owns data, sole-purpose no-secondary-use, deletion on termination, no training grant); remaining items are routine — sign MSA/DPA, read SOC 2, confirm US Azure region.
AutoAccru Close Automation
Q&A and client-request automation tool for accounting firms handling month-end close workflows.
Why Public record was insufficient to support any verdict.
Automated Tax Office Manager Practice Management
Practice-management and client-tracking software for tax preparation offices.
Why Binding license is favorable (user owns data, no third-party disclosure, no training, US hosting); remaining conditions are routine DPA/SOC 2/encryption items.
Keep independent copies — its past-due auto-deletion clause makes it unfit as system of record for retention.
Axcess Practice Practice Management · CCH
Cloud practice and firm management module within CCH Axcess, for tax and accounting firms.
Why Binding Master Agreement Sec. 11.9 grants an uncapped no-opt-out license to use raw Customer Data (incl. records not sent to IRS) to build engines/algorithms CCH then owns; only a custom-negotiated order form fixes it, not any standard tier.
Axcess Tax Tax Prep (US) · CCH
Cloud professional tax compliance software for mid-market and larger firms with complex returns.
Why Purpose-limited license but Expert AI (Intelligence/Advisor) features must be separately confirmed and gated behind own 7216 consent before enabling.
Basil Practice Management · CoralTree
Cloud practice-management and client-workflow platform for accounting and tax firms.
Why No AI/ML training license and AWS-US default, but ToS reserves worldwide cross-border processing with no US-only guarantee — confirm US residency before entering TRI.
Confirm US-only storage/processing in writing and execute a DPA before uploading client docs.
AI agent platform that runs accounting and bookkeeping tasks across a firm's existing apps.
Why US-only residency, SOC 2 Type II + ISO 27001/42001, and a DPA with a no-training clause; remaining steps (sign DPA, 7216 consent, confirm training carve-out scope) are routine.
AI-powered US tax research platform for tax preparers and accounting firms.
Why Ambiguous binding "improve the Services" license + silence on training + non-US processing make it anonymized-research-only until a no-training/US-residency DPA is signed; not a confirmed no-opt-out training license, so not Avoid.
Anonymized/hypothetical research: OK · Identified TRI: do not enter until DPA + no-training + US-residency obtained
Black Ore Tax Workflow (US)
AI-driven 1040 tax preparation and automation platform for US accounting firms.
Why Security-page promises (US-only, no-training) are not in the binding Privacy Notice, which reserves worldwide transfer and defers Customer Data to a non-public MSA; must pin US-storage/no-training into the signed MSA/DPA and confirm non-US (Israeli) staff access before client data goes in.
Bloomberg Tax Research (BNA) Tax Research (US) · Bloomberg Tax
Subscription US tax research library and analysis platform for tax practitioners.
Why Clean binding terms but ToS disclaims PII repository and no binding no-training clause for AI Assistant; keep client TRI out of queries/prompts.
AI-powered US tax research platform that answers technical tax questions with cited authority.
Why Fine for anonymized fact patterns, but Canadian entity is an offshore-residency wrinkle requiring §7216 consent for any identifiable TRI.
BNA Income Tax Planner Tax Planning (US) · Bloomberg Tax
Tax planning calculation software for modeling complex individual tax scenarios.
Why Clean binding DPA bars own-purpose use, no AI/training; only routine to-dos (read gated SOC 2, confirm US residency, 7216 consent for planning).
Booker Miscellaneous · FinOptimal
Google Sheets tool for building journal entries that sync into QuickBooks Online.
Why Terms are clean, but must avoid the onboarding path that stores your QBO credentials and acts as your agent inside client books.
Bookwits Practice Management
Practice management software built specifically for Canadian accounting and bookkeeping firms.
Why Offshore Azure Canada hosting with no confidentiality/security clauses — needs security addendum plus §7216 offshore consent; keep SSNs out entirely.
Firm-internal non-client use: Standard · Client TRI: Configure
BQE Core Practice Management · BQE
Practice-management, time-tracking, and billing platform for professional-services and accounting firms.
Why Default binding terms permit worldwide processing with no DPA referenced, so US-residency and no-training must be confirmed in writing before client data goes in.
Get written US-only residency + no-training confirmation and a signed DPA
Breeze Tax Tax Workflow (US)
AI tax preparation and workflow software for US tax firms and preparers.
Why Very early-stage tool with no published Privacy Policy, ToS, DPA, sub-processor list, or SOC 2 — only marketing claims; insufficient public evidence to clear client-data use.
AI meeting assistant that records, transcribes, and summarizes calls for accounting professionals.
Why Binding cl. 8.2 grants a worldwide license to analyse/otherwise use Customer Data to improve the Services with no US-residency option and no DPA, on a tool built to ingest identified client meetings — no tier fixes it.
Campfire Accounting Ledger
Cloud ERP and general ledger for mid-market and upmarket companies.
Why Binding data terms are non-public and LAM 'learns directly from your ledger' with no tenant-scoping clause — usable only after MSA/DPA and written no-training confirmation.
Canopy Tax Resolution Tax Resolution (US) · Canopy
IRS tax resolution software for handling collections cases and representation, part of Canopy's practice suite.
Why Binding ToS §11(c) grants unconditional de-identified improvement/research license incl. licensing data to third parties — needs DPA to narrow plus AI-training opt-out confirmation before TRI.
Audit and assurance engagement management and working-papers platform for accounting firms.
Why Binding terms are clean and AiDA is engineered no-retention, but the default AWS placement is worldwide — the US (North Virginia) region must be affirmatively selected or data may sit offshore, which is the specific thing to get right.
CCH AnswerConnect Tax Research (US) · Wolters Kluwer
Wolters Kluwer online US tax research library with editorial guidance for CCH-based firms.
Why Terms themselves forbid client PII and take a use-to-improve license over identifiable queries with no no-training commitment; safe only if PII/TRI is banned from searches/prompts.
CCH Axcess Knowledge Coach Audit · Wolters Kluwer
Audit methodology and guidance tool within Wolters Kluwer CCH Axcess for firm audit engagements.
Why Established enterprise audit suite; Master Agreement treats client data as Confidential and Expert AI is stated not to train on client data — remaining steps (sign agreement, pull SOC 2, confirm US residency and no-training in writing) are routine.
Enterprise/paid subscription tier only (no free tier)
Checkpoint (RIA) Tax Research (US) · Thomson Reuters
US tax and accounting research library from Thomson Reuters for tax and audit professionals.
Why Established vendor with real DPA, ISO certs, published no-training, and default-US AI hosting; remaining items (sign DPA, lock US residency, obtain SOC, 7216 consent) are the routine set.
Claude Code Builder / AI-adjacent
Anthropic's command-line coding agent for building and automating software with AI.
Why Safe only on commercial tier; personal Free/Pro/Max is unsafe for client data — classic tier trap.
Consumer Free/Pro/Max: Avoid · API/Team/Enterprise: Standard
ClickUp Practice Management
General-purpose project and task management platform used by teams, including some accounting firms for workflow.
Why Firm-friendly terms, but contractual US residency is Enterprise-only and two Gen-AI subprocessors run in China, so tier and feature control are required.
Lower tiers: Avoid · Enterprise w/ US pinning + China Gen-AI features off: Standard
Client Hub Practice Management
Client and task management platform for bookkeeping firms, with two-sided workflow and AI features.
Why AI no-training is only a weak 'reasonable efforts' promise plus Canada processing — keep TRI out of AI features until binding confirmations obtained.
CoCounsel Tax Research (US) · Thomson Reuters
Thomson Reuters AI assistant for tax and legal research that integrates with its product suite.
Why Safe only on Enterprise Tax/Audit/Accounting tier; consumer tiers unsafe, and identifiable TRI needs §7216 consent.
Consumer: Avoid · Enterprise Tax/Audit: Standard
AI-driven audit and compliance workflow tool for auditors and accounting firms.
Why This is an AI GRC/compliance-automation platform (a Vanta/Drata-style SOC 2/ISO prep tool), not a CPA financial-statement audit tool and not a tax tool; in intended use it ingests the firm's OWN security evidence, not taxpayer or client financial data, and the binding Terms are unusually clean (no training license, IP retained) but a UK contracting entity, unpublished DPA, unconfirmed US residency, and unverified SOC 2 report keep it Conditional.
Proposal, billing, and practice-management platform for accounting and bookkeeping firms.
Why Binding Terms promise EU storage for EU users but are silent on where US-customer data lives (may host offshore by default), plus a broad 'improve our services' license and only SOC 2 Type 1 — written US-residency confirmation and a no-secondary-use DPA are the load-bearing fixes.
Contented Meeting Assistants
AI meeting assistant that captures and summarizes client meetings for accounting professionals.
Why No training right and marketing no-train, but default processing is offshore NZ/AU — must elect and confirm US-only residency (likely enterprise) before capturing client meetings.
Default offshore; elect US residency
Tax planning software that identifies strategies and generates client-facing plans for firms.
Why Binding ToS §7(b)(ii) licenses IDENTIFIABLE data to 'develop and improve' with no de-identification limit; needs signed DPA override before TRI.
Cotypist Builder / AI-adjacent
macOS predictive text tool that autocompletes writing across applications as you type.
Why On-device processing keeps typed content local; disabling telemetry is routine hardening.
General ledger accounting platform for businesses and their accountants, from Count.
Why Binding Terms and Privacy Policy are JS-gated and unverifiable; the only indexed glimpse points toward a services-improvement use.
CrossLink Professional Tax Prep (US) · CrossLink
Professional US tax-preparation software for tax firms and high-volume preparers.
Why Mainstream US tax-prep with 7216-restricted TRI use and Anthropic-processor AI that doesn't train, but residency is not US-guaranteed (policy permits other countries) and CrossLink runs analytics on customer content — confirm US hosting and opt out of AI/analytics.
CTRL+Filing Tax Workflow (US)
AI-assisted tax return preparation and workflow tool for US tax firms.
Why Binding Terms clear the fatal hurdle (contractual no-training, client retains ownership), but US residency is unverified (offshore cannot be ruled out) and the AI sub-processor's training/retention is undisclosed — pilot on anonymized data until US-residency + sub-processor no-training + DPA are confirmed.
Anonymized/synthetic pilot: OK · Real TRI: hold for US-residency + sub-processor no-training + DPA
Cursor Builder / AI-adjacent
AI-powered code editor with in-line generation and chat, for software developers.
Why Privacy Mode OFF by default on Free/Pro; safe only on Business/Enterprise with Privacy Mode ON.
Free/Pro: Configure (Privacy Mode ON) · Business/Enterprise: Standard
Excel-based audit automation add-in that extracts and cross-references data for audit testing.
Why Binding AI Terms bar training and give the firm data ownership, but the DPA defaults to EEA processing (US region not guaranteed) and AI features route input to EU LLM providers (OpenAI/Microsoft/Google EMEA) — an offshore data path requiring US confirmation and offshore §7216 consent for TRI.
DeepSeek General-purpose AI
General-purpose AI assistant (consumer app/web and developer API), plus open-weight models that can be self-hosted.
Why Hosted tiers train on inputs by default, store data in the PRC, and offer no DPA/BAA; only firm-controlled self-hosting of the open weights is defensible.
Consumer App/Web (Free): Avoid · DeepSeek API (platform.deepseek.com): Avoid · Self-hosted open-weight (MIT, run locally/in your own VPC): defensible, separate path
AI-driven cloud general ledger and month-end close platform for small businesses.
Why Click-through ToS grants a perpetual no-opt-out improve/train license, but a Separate Signed Agreement can supersede it — narrow the license in writing before client data goes in.
Bookkeeping automation platform with an end-to-end workflow for running a bookkeeping practice, for firms.
Why Binding privacy policy says AWS Textract uses extracted client data to improve its services — must opt out or keep TRI out of OCR.
Drake Tax Online Tax Prep (US) · Drake
Web-based (SaaS) professional tax preparation software for US firms; new 2026 cloud version from Drake.
Why Core prep path is clean (US storage, no training license on return data), but TOS 6(b) lets Drake train its own AI instance on content routed through the AI-Powered Tools/chatbot — the one thing to get right is fencing TRI out of those AI features.
Core prep: Standard · AI-Powered Tools/chatbot: keep TRI out (Drake trains its own instance)
Elephant CPA Practice Management · Elephant
Practice-management and workflow platform built for accounting and CPA firms.
Why No disqualifying training license, but zero published security controls (no SOC 2, no DPA, no US-residency) plus a CCPA sale ambiguity require signed conditions before use.
Small vendor; unchecked FTC vendor box until SOC 2/DPA/no-sale obtained
Custom AI agents for client accounting services (CAS) practices.
Why Agent automation for CAS shops; sign the DPA and confirm the no-training term (early-stage).
Extend Builder / AI-adjacent
AI document-processing platform that extracts structured data from PDFs and files, for operations teams.
Why AI OCR with strong controls (no-training, zero-retention, SOC 2 Type II, self-host option); provision the US region (never eu1) and keep use to that client's return.
Fathom Builder / AI-adjacent
AI meeting notetaker that records, transcribes, and summarizes video calls, for client-facing teams.
Why Trains on meeting content by default but org-wide opt-out exists; requires opt-out + 7216 consent.
Default: Avoid · Opt-out enabled: Configure
AI-native audit and advisory engagement platform for public accounting and assurance firms.
Why Default MSA §4.3.3(iii) lets Fieldguide use identifiable Customer Data to 'improve the Services' and grants a worldwide right — must be overridden by a signed DPA (no-training + US residency) before client data goes in.
Default MSA: Configure · With DPA overriding §4.3.3(iii) + US-residency lock: Standard
Tax workflow tool that imports client source documents into tax preparation software for US firms.
Why Privacy policy permits offshore staff processing and gives no binding no-training commitment — needs signed DPA closing both gaps before TRI.
Financial Cents Practice Management
Practice management and workflow software for small bookkeeping and accounting firms.
Why Binding no-training terms strong and hosting US-only, but the AI File Renaming Agent ships client docs to OpenAI with unstated retention — disable AI on TRI accounts until confirmed.
Fireflies.ai Builder / AI-adjacent
AI meeting assistant that records, transcribes, and searches calls across conferencing platforms.
Why No US-only residency commitment and consent disclaimer off by default; needs residency confirmation and consent toggle.
Firm360 Practice Management
All-in-one practice management platform for accounting firms covering workflow, documents, and billing.
Why No training license and US AWS, but the Claude connector's no-training claim is only blog-promised — keep it disabled for client-identifiable use until contractually confirmed.
AI tax filing and deduction-tracking service for US freelancers and self-employed filers.
Why Consumer B2C service with a binding worldwide content license, PII sharing with advertising partners, processing in any country, and offshore preparer access — disqualifying with no firm/enterprise tier escape.
FreeAgent Accounting Ledger · FreshBooks
Cloud accounting ledger aimed at small businesses, freelancers, and their accountants.
Why No adverse identifiable-data training license and a real Processor DPA, but all primary hosting is offshore in Ireland/EU with no US-residency option, requiring offshore 7216 consent.
US residency: not available · Offshore EU hosting: Configure with 301.7216-3 offshore-disclosure consent.
FreshBooks Accounting Ledger
Cloud accounting and invoicing software for small businesses, freelancers, and self-employed users.
Why ToS Section 11 modeling/analytics/marketing license plus offshore (Canada/Europe) processing; safe only with the DPA executed and written confirmation carving out Analytical Outputs and residency. AI-training posture is genuinely unclear (PP addresses only fraud/chatbot/credit, no general no-training disclaimer) — treat like Intuit: get written confirmation before relying on public policy.
Requires DPA + written exclusion of the Analytical-Outputs/modeling use before client data.
Connector syncing accounting ledger data to Google Sheets, with two-way sync in some cases.
Why No training license, but data lands in firm Google Sheets requiring business-tier Workspace and locked-down scopes; residency unstated.
Consumer Gmail: Avoid · Business Workspace: usable
Ghostty Builder / AI-adjacent
GPU-accelerated open-source terminal emulator, for developers working at the command line.
Why Local-only terminal; nothing leaves the machine, no data path to manage.
GoHighLevel Builder / AI-adjacent
All-in-one CRM and marketing-automation platform for agencies and service businesses.
Why Offshore transfer incl. India with no US-only commitment; AI add-ons must be avoided until no-train confirmed; §7216(n) consent before marketing to tax clients; offshore-specific §7216 consent + no-SSN before any TRI.
GoProposal Engagement · Sage
Sage proposal and client engagement pricing tool with menu-based service selection for accounting firms.
Why Base proposal product is safe under the Sage DPA, but electing any Sage AI Service grants a worldwide training license with no opt-out — keep Sage AI Services OFF.
GoSystem Tax RS Tax Prep (US) · Thomson Reuters
Enterprise US tax compliance software for large corporations and F500 internal tax departments.
Why Binding TR Master Terms + Global DPA give a clean processor posture with no training-on-identifiable-content grant; remaining items (confirm US hosting on order form, read SOC) are routine DPA/residency diligence.
Granola Builder / AI-adjacent
AI notetaker that enhances your own meeting notes with call transcripts, for knowledge workers.
Why De-identified opt-out model training (Enterprise off by default), no third-party (OpenAI/Anthropic) training, US-only AWS, SOC 2 Type II, self-serve DPA — re-confirmed vs the 2026-07-24 policy. Verify the toggle on your tier; §7216 consent to record.
Re-confirmed against the 2026-07-24 policy update — posture unchanged. Verify the model-training toggle is OFF on your tier (default ON for Free/Business), sign the DPA, and get §7216 consent before recording client conversations.
Grok General-purpose AI · xAI
General-purpose AI assistant (grok.com, apps, Grok on X) plus a developer API and enterprise tier. Consumer trains on input by default; API/Enterprise offer no-training, a DPA, and ZDR on request.
Why Consumer trains on input by default (opt-out only); only the paid API/Enterprise tier with signed DPA + no-training + ZDR is defensible for client data.
Consumer Grok: Avoid · xAI API + Enterprise: Configure
Early-stage tax preparation workflow platform for US accounting firms.
Why Early-stage tax workflow automation; public terms are thin, confirm DPA + no-training in writing.
GruntWorx Tax Workflow (US)
Tax document automation service that scans, organizes, and extracts source data into a bookmarked PDF for US tax preparers.
Why US-only §7216-aligned bureau, but the binding data-rights EULA is signup-gated/unreadable and no-training is unconfirmed — pin down a written no-training clause before upload.
Confirm no-training in the actual EULA/master agreement before loading client data.
Tax planning software for accounting firms to identify and model client tax-saving strategies.
Why Substantive tax analysis and its Terms contradict its zero-retention marketing; needs a signed DPA plus §7216 written consent per taxpayer.
Holistiplan Tax Planning (US)
Tax planning software that reads 1040 returns to surface strategies, built for advisors and firms.
Why Binding no-training clause, US-only storage/access, PII-redaction supported; only routine to-dos (7216 consent, read gated SOC 2).
Client and workflow management platform automating tax return delivery, organizers, and engagement tracking for US accounting firms.
Why US-hosted CPA-firm platform, but public Terms grant a broad worldwide scan/store license and are silent on Halo AI training — get written no-training assurance.
Silent-on-AI-training + broad content license; close in writing via DPA.
iFirm Practice Manager Practice Management · CCH
CCH practice-management and workflow tool for accounting firms, integrating with the CCH software suite.
Why US instance terms are protective, but the vetted URL points to the offshore APAC/Azure-Australia instance — a US firm must contract the US CCH SFS instance instead.
APAC/Azure-AU instance: Avoid · US CCH SFS (AWS) instance: Standard
Proposal, engagement letter, and billing automation platform for accounting and professional-services firms.
Why Binding clause 10(b) licenses client-info inputs for model improvement with no opt-out, so limit inputs to engagement data and get a written carve-out.
Data-driven audit platform with analytics and workflow tools for external audit teams.
Why Protective purpose-limitation and a US Azure region exist, but benchmarking is ON by default (turn it off) and the instance region is not self-selectable, so US placement must be pinned in the order form/DPA.
Cloud US tax preparation and planning software for firms, from the team behind Corvee.
Why Binding ToS grants an 'improve the Services' license over Customer Data with no no-AI-training carve-out AND a named India affiliate that 'may provide the Services' — needs a written enterprise addendum limiting the license to de-identified data plus US-residency/offshore confirmation.
Consumer ToS as-is: Avoid · Enterprise addendum (no-train + US-only confirmed): Configure
Intuit Accountant Suite Close Automation · Intuit
Intuit's platform of accounting and close tools for firms working within the QuickBooks ecosystem.
Why Inherits QBO's controller/training exposure (no full AI opt-out, no signable DPA for core data); needs active mitigation, not just settings hygiene.
Access layer over the same QBO data downgraded 2026-07-18; the exposure propagates.
Intuit Tax Advisor Tax Planning (US) · Intuit
Tax planning tool that pulls from ProConnect/Lacerte returns to build client tax strategies and reports.
Why Binding ToS acknowledges potential OFFSHORE access to TRI contradicting US-storage promise; offshore-consent trap plus avoid Digital Assistants inputs.
IRIS Practice Engine Practice Management · IRIS
Practice-management and workflow platform for accounting and professional-services firms.
Why Binding US terms limit dev use to anonymized data, but US hosting must be pinned on the Order and offshore UK/India support access must be ruled out or 7216-consented.
Confirm US-state Locality hosting and no offshore support access in writing
IRIS Practice Management Practice Management · IRIS
Practice-management and workflow software for accounting firms, with adoption mainly in the UK.
Why General Terms cl.4.6 grants IRIS an irrevocable worldwide license to use/store/copy customer content to improve/develop the Services and create new services, with no opt-out and no tier carve-out (third-party distribution is qualified by DP/confidentiality clauses). No US residency; UK/India processing.
Legacy on-prem or IRIS Firm Management (US Azure) are separate products, not this offering
IRS Solutions Tax Resolution (US)
Tax resolution software for representing clients in IRS collections and generating resolution forms and letters.
Why No training/license clause anywhere, US-only AWS GovCloud, SOC 2 Type II — only routine to-dos (read SOC 2, get member agreement, 7216 consent for solicitation).
IRSLogics Tax Resolution (US) · IRS Logics
Case-management and workflow software for US tax resolution practices.
Why No adverse license (vendor disclaims data ownership, no training/improvement grant); the missing DPA/SOC 2/US-residency/encryption confirmations are the routine to-obtain set, not binding disqualifiers.
Jetpack Workflow Practice Management · Jetpack
Cloud workflow and task-tracking platform for accounting, bookkeeping, and tax firms.
Why US-only hosting is solid, but terms grant a perpetual worldwide license to use customer data to improve the platform and are silent on AI training, so a written no-training confirmation is the one thing to get right.
Get written no-training confirmation plus signed DPA
Tax workflow platform covering document intake and prep steps for US tax firms.
Why Binding Terms §3.3 grants perpetual license to analyze derived Customer Data and build new products with no opt-out — must paper no-training/de-identified-only into a DPA.
Justworks Payroll Payroll (US) · Justworks
Cloud payroll for US small businesses, handling tax filings, deposits, and employee pay runs.
Why Clean published terms but no US-residency commitment ("operates globally") — need written US-only/no-offshore confirmation before payroll SSNs go in.
Justworks PEO Payroll (US) · Justworks
Professional employer organization giving small businesses payroll, benefits, and HR compliance under a co-employment model.
Why Binding terms clean and CPEO verified, but both documents reserve worldwide processing — requires written US-residency/offshore confirmation.
Tax document extraction software specializing in K-1s across high-volume returns for firms.
Why High-volume K-1 extraction; sign the DPA and confirm the no-training term before client data goes in.
Cloud accounting ledger built for firms, with read/write MCP access for AI agents.
Why Binding ToS grants a perpetual irrevocable license plus explicit training on Input/Output by Kick and third-party AI providers with no opt-out and no enterprise escape.
Document automation for engagement letters and proposals, built around templated Word-style documents for firms.
Why Privacy policy expressly permits transfer outside your country, so US-residency confirmation is required and inputs must stay non-sensitive.
Cloud practice-management and workflow platform for accounting and bookkeeping firms.
Why Real Art-28 DPA exists but there is no affirmative no-training clause, US-only residency isn't guaranteed, and the binding platform contract isn't public — clears only on written residency/no-training confirmations.
Obtain the non-public Services Agreement + written US-residency and no-training terms
Secure client portal and communication platform, now with tax workflow tools, for US accounting and tax firms.
Why Core portal is US-hosted and defensible, but AI Features carry a default train/fine-tune-on-de-identified-inputs license unless disabled — turn AI Features off (or add §7216 consent).
AI Features OFF for taxpayer data; core portal unaffected.
LiveFlow Miscellaneous · Liveflow
Tool syncing QuickBooks or Xero data to Excel or Google Sheets, with dashboards and consolidations.
Why No explicit no-training commitment plus agentic AI features with no named LLM provider and UK-entity offshore transfers — must confirm in writing.
Trust and estate planning software for advisors and firms.
Why Trust & estate planning software; sign the DPA and confirm the no-training term.
Magnetic Tax Workflow (US)
AI tax-prep service for US CPA/EA firms: AI data extraction and structured workpapers with US-based EA/CPA review of every return, priced per return-credit.
Why PSA + public WISP, Privacy Policy, AI Policy, and DPA together bind no-training (zero data retention across Microsoft/Google/self-hosted), US-only processing with no cross-border transfers (DPA §12), data isolation, and a 48-hour breach SLA; Conditional rather than Standard only because Magnetic holds no independent SOC 2 (audit-on-request under DPA §7).
Binding no-training + US-only processing + a CCPA-grade DPA, corroborated across five primary-source documents; the one gap is no independent SOC 2 (DPA grants audit-on-request).
Cloud practice-management, time, and billing platform for accounting and CPA firms.
Why Data stays customer property under a service-scoped license (better than training-license peers), but US residency isn't guaranteed and the no-opt-out de-identified improvement/benchmark license needs clarification.
Confirm US-only hosting; de-identified-use license cannot be turned off
AI tax research tool for US tax preparers, CPAs, and accounting firms.
Why Avoid holds: current ToS grants a perpetual/sublicensable license to sell/derive/improve on User Content; no-training carve-out covers only third-party models, not Marble's own. No opt-out, DPA, or tier removes it. Trust Commitment expressly subordinate to ToS.
Mastra Builder / AI-adjacent
Open-source TypeScript framework for building AI agents and workflows, for developers.
Why Open-source agent framework; self-host in firm-controlled US infrastructure and disable telemetry; the LLM you point it at is the real data path.
Monday Practice Management
General-purpose work-management and workflow-automation platform used by teams, including some accounting firms.
Why Binding no-training terms and zero-retention model agreements are strong, but only Enterprise gets region-bound residency — lower tiers may route to subprocessors outside the US region.
Provision US region; strict residency is Enterprise-only, other tiers may route offshore
myPay Solutions Payroll (US) · IRIS
Outsourced full-service US payroll bureau that firms refer client payroll to, run by IRIS.
Why IRIS UK group with unverified US-only residency and possible IRIS India (KPO) offshore access to payroll SSNs; needs written US-only/no-offshore (or 7216 offshore consent) plus no-training scope confirmation.
Confirm US-only, no India KPO access
Workflow-automation platform for connecting apps and building integrations, self-hostable, for technical teams.
Why n8n Cloud is EU-hosted; US self-host is the safe path requiring residency configuration.
Cloud (EU): Configure · US self-host: Standard
NetSuite Accounting Ledger
Cloud ERP and general ledger for mid-market companies, with a broad app ecosystem.
Why Customer-owned data, no training license, published DPA, and orderable US region — routine enterprise diligence (order US region, keep SSNs out for offshore support).
Notion Practice Management
General-purpose notes, docs, and task management workspace used by some firms for project workflow.
Why Configure: explicit contractual no-training on all plans, self-serve DPA, named AI subprocessors (OpenAI/Anthropic) and strong certs make it defensible — but keep client work on a paid MSA workspace (not free/personal), turn off 'share data to improve Notion AI', and note non-Enterprise AI prompts sit with LLM subprocessors up to 30 days (Enterprise = zero retention + kill switch → Standard).
Free/personal: Avoid for client data · Business (MSA+DPA auto-apply): Configure · Enterprise: Standard
Month-end close and reconciliation automation platform for in-house, mid-market finance teams.
Why Binding terms are protective (customer owns data; only no-PII Usage Data used to improve), but the 'Numeric Intelligence' AI-to-LLM path and data residency are undisclosed, so written AI-subprocessor no-training + US-residency confirmation are required.
Oasis Payroll (US) · Paychex
Paychex midmarket payroll and HR service with multi-entity support for larger US employers.
Why Established Paychex processor (SOC 2/ISO, US data centers) but binding Terms grant an AI-Powered-Features improvement license over 'information you provide' with no opt-out and unconfirmed US path — disable/constrain AI features and confirm scope.
Constrain or disable AI Powered Features
Odoo Accounting Accounting Ledger · Odoo
General ledger module within the Odoo business suite, for companies running Odoo's broader ERP tools.
Why Processor-only DPA with no training license, but requires selecting the US hosting region and keeping the native OpenAI/Gemini AI features disabled.
Select Americas/USA region and keep Odoo 19 native AI disabled; enabling AI routes ledger data to third-party LLMs.
OfficeTools Cloud Practice Management · OfficeTools
Cloud-based practice management, time, billing, and workflow platform for accounting and tax firms.
Why Training use is only anonymized-aggregate (not a disqualifier), but the default hosting permits Canada — you must affirmatively elect a US region in the Service Order Form and get a service-scoped SOC 2.
Default region: Configure (elect US) · US region elected + DPA: Standard
OfficeTools Workspace Practice Management · OfficeTools
On-premise all-in-one practice management, scheduling, time, and billing suite for accounting firms.
Why No training/content-license disqualifier, but hosting is US-or-Canada with a stale Privacy-Shield-era policy and no readable DPA/SOC 2 — the specific thing to nail is written US-only residency confirmation before loading data.
Desktop (firm SQL server): Standard · Cloud/portal: Configure (confirm US-only)
OLT Pro Tax Prep (US) · On-Line Taxes
Budget professional US tax preparation software for small tax preparers and firms.
Why GLBA financial-institution self-identification with a no-use-except-to-provide-prep pledge and no training right asserted; thin security posture (no SOC 2/DPA/explicit residency) is routine diligence, not a binding disqualifier.
Full-service US payroll for small businesses, covering specialized filings like Form 943 and agricultural workers.
Why US-only AWS hosting, strict-confidence clause, no training license; remaining to-dos (SOC 2, DPA, sub-processor list) are routine.
Onvio Practice Management · Thomson Reuters
Cloud practice management, document, and client-collaboration platform for accounting firms, by Thomson Reuters.
Why Improvement use is capped at de-identified metadata (clean), but the binding terms permit worldwide processing with no US restriction — the one thing to get right is written US-hosting/US-support confirmation.
Parker Tax Pro Library Tax Research (US) · Parker Tax
Lower-cost online US tax research library covering federal tax topics for practitioners.
Why Worldwide irrevocable license over submissions with no DPA/privacy policy, but read-only library with no client-data path; reference-only use with zero identifiers is intended and fine.
Client data: never · Anonymized reference-only: Standard
Pascal Workflow Practice Management · Pascal
Cloud workflow, CRM, and client-portal platform for accounting and tax firms.
Why No training license or worldwide-processing disqualifier, but no residency disclosure at all — US hosting must be confirmed in writing (plus DPA/SOC 2/at-rest encryption) before client data goes in.
Patriot Accounting Accounting Ledger · Patriot
Patriot Software's cloud small-business accounting/bookkeeping ledger (income/expenses, invoicing, bank feeds), with an accountant Partner Program for multi-client management.
Why Terms §7 (upd 2025-07-22) grants a broad no-opt-out improvement/AI/research license, but scoped to telemetry/communications — not your client's ledger content, which stays client-owned under §6 + the Partner Addendum. No published DPA or SOC report.
Any paid business tier + accountant Partner Program (Umbrella Login). Before entering identifiable client PII, get written confirmation or a DPA that client data is excluded from §7's improvement/AI/research use, and request the SOC report.
Patriot Payroll Payroll (US) · Paychex
US payroll for small businesses, offered in self-service and full-service tiers with tax filing options.
Why Subscription Agreement §7 grants broad no-opt-out data use "including AI" for research/improvement — must confine to exclude client payroll data in writing.
Paychex Flex Payroll (US) · Paychex
Cloud full-service US payroll platform handling deposits, payments, and tax filings for employers.
Why SOC 1/2 + ISO and an 8.6 notwithstanding clause limiting model training to de-identified data, but 8.4 grants a perpetual train/model license over identifiable data under a unilaterally-amendable Privacy Policy — get written no-identifiable-training confirmation and watch AI features.
Confirm no identifiable-data training; AI features not deidentified-scoped
Paychex Flex Pro Payroll (US) · Paychex
Done-for-you Paychex payroll service that accounting firms refer client payroll to.
Why SOC 2/ISO US-data-center payroll but a binding services/AI improvement license on identifiable input with no public opt-out; clears only under a signed MSA/DPA with US-residency/no-offshore confirmed and the improvement license raised in writing.
Signed MSA/DPA; confirm US-only and limit AI-improvement use
Payroll Relief Payroll (US) · AccountantsWorld/IRIS
Cloud payroll processing platform built for accounting firms running payroll for multiple clients.
Why No training clause and SOC 2, but UK parent (IRIS) with potential UK/India access means US-residency/no-offshore must be confirmed in writing.
Confirm US-only hosting and no offshore staff access before entering payroll PII.
Audit request and engagement-management tool by FloQast for external auditors and their clients.
Why A YouTube comedy series with no data-ingestion surface — no client or taxpayer data ever flows to it, so zero data risk; do not list as a vendor in the WISP.
Pinecone Builder / AI-adjacent
Managed vector database for storing and searching embeddings in AI and retrieval applications, for developers.
Why Conditions are the routine set — sign DPA + AI Services Addendum + select US region.
AI meeting assistant for accounting firms with added knowledge-capture and workflow automation.
Why ToS bars storing financial data 'beyond necessary' (needs clarification) and Revenue Finder is a §7216 substantive-use AI feature requiring consent.
PitBullTax Tax Resolution (US)
Cloud tax resolution software for preparing IRS collection cases, offers in compromise, and client proposals.
Why Confirmed 2026-07-16: T&C §2.4 non-confidential + any-purpose license over derived taxpayer data still live, binds Software (§1.1), no opt-out/DPA/tier escape. Privacy Policy's "client identifying data never used in AI content" is narrow and doesn't override §2.4.
Planner CS Tax Planning (US) · Thomson Reuters
Multi-year tax projection and planning calculation software for professional tax preparers.
Why Local install keeps TRI on firm machines; no training license, AI-input hook doesn't attach (no AI features); hosted tier just needs US confirmation.
Desktop: Standard · Hosted VO CS: confirm US residency
Practice CS Practice Management · Thomson Reuters
Desktop practice management, time, billing, and reporting software for accounting firms, by Thomson Reuters.
Why Clean license posture, but cloud-tier US residency is unverified and terms don't restrict it — the specific choice is deployment: on-prem desktop is safe, TR-hosted needs written US-residency confirmation.
Desktop/on-premise: Standard · Virtual Office CS / TR-hosted: Configure (confirm US residency)
Practice ERP Practice Management
Cloud practice management and firm-operations platform for accounting and tax firms.
Why NetSuite floor and processor posture, but no binding MSA/DPA is readable, 'worldwide subsidiaries' language leaves residency open, and the Claude-based AI feature needs a written no-training/no-retention data path before use.
Practice Protect Miscellaneous
Credential and access management platform letting staff use client logins without seeing passwords.
Why Credential vault with clean terms but undocumented offshore Australian support access to stored credentials must be pinned down.
PracticePro 365 Practice Management · PracticePro
Cloud practice management, workflow, and client-portal platform for accounting and tax firms.
Why Microsoft Dataverse infra is sound, but PracticePro's own docs are thin — the thing to get right is provisioning the tenant in a US Dataverse region and getting written no-training confirmation.
ProSystem FX Tax Prep (US) · CCH
Professional tax compliance software from CCH for preparing US individual and business returns at firms.
Why On-prem US vendor, no training license, §7216-subject; only routine to-dos (read gated SOC 2, confirm US hosting, WISP the telemetry path).
Cloud general ledger originally built for startups, expanding to broader small-business use.
Why Configure: encryption + SOC 2 + read-only integrations + no-training-by-default API vendors work in your favor, but Subscription Agreement §5.3 grants a no-opt-out post-term 'improve services' license, there is NO published DPA, no formal sub-processor list, no explicit no-training commitment, and an MCP connector can pipe books into a personal Claude.ai account — narrow §5.3 in writing, get a DPA, keep AI Suite off client TRI, and control the MCP connector.
Broad practice management platform for accounting firms, aimed at larger multi-service firms.
Why ToS §10.3.3 grants a no-opt-out license to use all Data including PII to train AI/ML models on the standard tier; only a negotiated custom MSA could override it.
QuickBooks Enterprise Accounting Ledger · Intuit
Desktop general ledger software for larger small and mid-sized businesses with higher-volume accounting needs.
Why Defensible as a local desktop ledger, but the EULA licenses Intuit to train AI/ML on any Content sent through connected/online/AI features with no opt-out and no US-residency guarantee — keep it local.
Local install with cloud/AI features minimized: safe · connected/AI features: training license applies.
QuickBooks Payroll Core Payroll (US) · Intuit
Intuit's entry-tier payroll for small businesses, integrated with QuickBooks Online.
Why Binding DPA reserves controller use of payroll PII to train Intuit AI with no opt-out, plus offshore QB Live add-on must be avoided.
QuickBooks Payroll Elite Payroll (US) · Intuit
Top-tier full-service payroll add-on for QuickBooks Online, for small businesses wanting tax filing and HR support.
Why Processor DPA protects core payroll data, but controller-role data is trained on and Intuit Assist/AI features are not no-training — keep client data out of the assistant.
Core payroll: safe under Processor DPA · Intuit Assist/AI features: avoid absent written no-training confirmation.
QuickBooks Payroll Premium Payroll (US) · Intuit
Mid-tier payroll add-on for QuickBooks Online, for small businesses needing full-service payroll and tax filing.
Why Same controller/processor split — payroll data is processor-scoped and safe, but Account/aggregated data is trained on and Digital Assistant inputs feed model improvement.
Confine client data to the processor-scoped payroll service; do not feed Intuit Assist.
Software producing reasonable compensation reports to justify owner pay for firms and clients.
Why No training license, no AI, US AWS vendor; remaining to-dos (DPA, US confirmation, 7216 consent) are the routine set.
Ready To Advise Tax Planning (US) · Thomson Reuters
Tax-planning and advisory tool for US firms, part of the Thomson Reuters suite.
Why Thomson Reuters no-training/zero-retention with US-default AI processing, SOC 2 and ISO 27001/42001; remaining steps (execute Master+DPA, §7216 consent for advisory use, confirm US region) are routine.
Platform for automating tax payments for firms and their clients.
Why Purpose-built tax-payment automation; sign the DPA and confirm the no-training term in writing (terms still thin).
Chrome extension adding keyboard shortcuts, UI tweaks, and quick-access menus to QuickBooks Online, for accountants.
Why Core extension holds no accounting data, but AI PRO (Beta) pipes ledger/bank data to ChatGPT/Perplexity undocumented — disable those features firm-wide.
AI PRO features off: Standard · AI PRO on: Avoid until transmission/terms confirmed
Cloud ERP and general ledger for mid-market companies, with roots in SaaS accounting.
Why Unusually clean MSA (no training license) but the OpenAI/Anthropic AI path has no published zero-retention/no-training terms — confirm that specifically before AI features touch client data.
Payroll, HR, and IT platform for growing companies, supporting multi-entity groups and larger headcounts.
Why Privacy notice permits processing "in any other country" and unpublished AI terms must be obtained before enabling AI features — confirm US-only.
Rippling PEO Payroll (US) · Rippling
Co-employment PEO from Rippling bundling payroll, benefits, and HR for scaling companies.
Why DPA permits ML "develop and improve" processing, residency not US-bound, and not an IRS-certified CPEO — needs named confirmations.
SafeSend Tax Workflow (US) · Thomson Reuters
Automated tax return assembly, e-signature, and delivery platform for US tax preparers and their clients.
Why Processor DPA + US Azure hosting are defensible, but TR's General Terms §2.e licenses Your Data as AI Input to 'improve our Services' — get written no-training confirmation or keep AI features off.
Confirm no foundation/shared-model training on taxpayer data, or disable AI functionality.
Sage Business Cloud Accounting / Sage 50cloud Accounting Ledger · Sage
Small-business accounting ledger software from Sage, spanning cloud and desktop-connected bookkeeping.
Why Not a training reject (only pseudonymised/aggregated R&D use with an opt-out), but the R&D/benchmarking opt-out must be exercised in writing and India-based sub-processors may have offshore access — specific things to get right beyond routine DPA/SOC2.
Desktop Sage 50 local files: lowest-exfil · Cloud Sage Accounting: Configure (exercise opt-out + confirm US/no-offshore)
Tool that detects scope creep by monitoring a firm's client communications for accounting teams.
Why Binding docs store data in Australia and overseas with no US option, no DPA/SOC 2, and Terms 4.2 disclaims confidentiality of supplied info — disqualifying on every tier.
Senta Practice Management · IRIS
Cloud practice management, workflow automation, and client-portal platform for accounting firms, now owned by IRIS.
Why Only a de-identified analytics license (not training), but it's a stale UK/EEA-oriented product with no confirmed US-residency option — confirm a US AWS region/current SCCs and limit to administrative CRM data, not tax-return detail.
SmartVault Document Management · SmartVault (an Abacus company)
Secure document management and client portal purpose-built for accounting and tax firms.
Why Purpose-built for tax/accounting firms with the strongest posture in this set: AI is opt-in by packaging (paid add-on), explicit §5.5.4 opt-in-before-training clause, permission-aware AI, an available BAA (only tool here that offers one), SOC 2 Type 2 + ISO 27001:2022 + ISO 22301:2019, and FTC Safeguards / IRS Pub. 4557 alignment. Routine to-dos: turn on MFA + IP restriction, file the BAA/SOC 2, keep SSNs out of file names.
Client engagement, proposal, and workflow tool built for Xero-based accounting practices.
Why Clean no-training posture and routine DPA, but all data hosted exclusively in EU regions = offshore for a US firm; safe for engagement/billing data only, keep TRI out.
EU-hosted; document as offshore in WISP, no TRI
SoftLedger Accounting Ledger
Cloud general ledger and accounting platform with API-first, multi-entity support for finance teams.
Why Binding DPA is clean (processor-only, no training grant), but the DPA defaults to processing in 'any country' and the AI 'ask-me-anything'/LLM data path is undisclosed — must pin US region and the LLM sub-processor before client data goes in.
Tax workflow platform for client document collection, intake, and delivery for US firms.
Why T&C §4.5 permits internal AI training on anonymized/redacted data and §7.2 keeps data 2 years absent a written deletion request — confirm de-identification standard and deletion.
Stack Close Automation · Ramp
AI-agent platform from Ramp for automating month-end close and other firm tasks, for accounting teams.
Why Reputable close-automation tool with no trap in the posture data — routine DPA/§7216 only.
StanfordTax Tax Workflow (US)
Tax workflow tool that generates client document request lists and centralizes document collection for 1040s.
Why Protective no-training ToS, but the undisclosed third-party LLM reading W-2s/1099s/K-1s must be confirmed to run zero-retention/no-training before TRI goes in.
Superwhisper Builder / AI-adjacent
Mac voice-to-text dictation app that transcribes speech into any application using local AI models.
Why Fully-local mode is safe; cloud mode routes audio off-device and needs §7216 handling — pick the mode deliberately.
Local mode: Standard · Cloud mode: Configure
PBC/document request-list and workflow platform for audit and accounting firm engagements.
Why US-hosted on AWS with SOC 2, published no-training commitment, and AI already opt-out by default; only routine to-dos (DPA, SOC 2 under NDA, confidentiality) remain.
SurePayroll Payroll (US) · Paychex
Online small-business payroll service by Paychex, with a white-label option for accountants and providers.
Why Core payroll defensible, but binding Terms reserve a no-opt-out license to use AI-feature inputs to improve services/AI — avoid the AI features.
Core payroll: safe with DPA · AI-powered features: avoid (no-opt-out improvement license).
SurePrep SPBinder Tax Workflow (US) · Thomson Reuters
Digital tax workpaper binder that organizes and cross-references scanned source documents for US tax preparation teams.
Why Defensible on onshore US tiers under the TR DPA, but optional Offshore tiers route data to Mumbai and no-training on the OCR/AI pipeline is unconfirmed — provision onshore-only and get written no-training.
Do NOT enable Offshore tiers (or get §7216 offshore consent); confirm no OCR/AI model training.
Early-stage tax workflow product for US accounting and tax firms.
Why Pre-launch JS landing page with no readable Terms, Privacy Policy, DPA, or trust page; only marketing assurances exist, so nothing can be verified.
Emerging month-end close automation platform for accounting and finance teams.
Why Pipes client GL/document data to OpenAI/AWS AI but publishes no DPA, SOC 2, ToS, training opt-out, or stated residency (residency sentence is truncated) — cannot be cleared on public evidence.
Cloud trial balance and workpaper automation for entity tax preparation, for accounting and tax firms.
Why ToS §4.9 improvement-use limb covers identifiable derived data with no opt-out and three AI subprocessors lack no-training terms — narrow in writing before client TRI.
Tax Help Software Miscellaneous · THS
IRS transcript retrieval and tax resolution software for accountants and tax pros handling IRS accounts.
Why Old Conditional with no disqualifying evidence surfaced; reputable IRS-transcript tool with only routine DPA/7216 to-dos.
Tax Maverick Tax Planning (US)
US tax-planning software for accounting firms and tax professionals.
Why Binding terms authorize only aggregated/anonymized improvement use (not a broad training grant), but no DPA exists, no sub-processor/LLM is disclosed, and hosting isn't US-pinned — gaps must be closed in writing or use limited to anonymized scenarios.
TaxAct Professional Tax Prep (US) · TaxAct
Budget professional US tax preparation software for individual preparers and small firms.
Why Core prep path pins US storage and grants no self-training on return data, but the privacy notice reserves training of TaxAct's own AI instance on personal info — must fence TRI out of the AI-Powered Tools/chat features.
Core prep: Standard · AI-Powered Tools/chat: keep TRI out (trains own instance)
Cloud tax practice management platform with client portal, e-signature, and workflow tools for US tax firms.
Why Binding Terms disclaim confidentiality and grant a worldwide sub-licensable license to modify/distribute user content with no training carve-out or opt-out on any tier — contract overrides the no-training marketing.
TaxCaddy Tax Workflow (US) · Thomson Reuters
Client-facing tax document collection and organizer portal linking taxpayers with their US tax preparers.
Why Usable as a document-gathering portal, but the governing TR corporate privacy statement disclaims US residency and permits international transfer — pin US-only residency in writing.
Offshore/residency: get written US-only hosting+access confirmation in the DPA.
TaxFigure Tax Research (US)
Newer US tax research tool for tax professionals.
Why ToU grants a general "improve the Platform" license, but binding terms explicitly bar using client PII/taxpayer/confidential info to train/fine-tune generally-available AI models except in aggregated, de-identified form. Purpose-built for tax pros; PrivacyVault tokenizes PII; DPA available.
TaxFlow Practice Management · Taxflow
Cloud workflow and job-tracking platform for tax and accounting firms.
Why No training grant, but the vendor publishes zero security posture (no DPA/SOC 2/encryption/residency) behind an AS-IS data-loss disclaimer — safe only after obtaining DPA, at-rest encryption, and US-residency confirmations in writing.
TaxFyle Intelligence Tax Workflow (US) · TaxFyle
Software product applying automation to tax preparation data, built by staffing provider TaxFyle for US accounting firms.
Why Terms §10.1 default-on train TXF's AI models on de-identified Input/Output (opt-out only) and hosting is worldwide — exercise the written opt-out and pin US residency before use.
Exercise §10.2 written training opt-out and enable a US-only data-location selection.
AI tax research and workflow tool answering tax questions for US accounting firms.
Why Configure: sign up as Professional User under the DPA (it controls over the Terms) for US-only storage, SOC 2, no training on firm data. Avoid the free/consumer flow, whose Privacy Notice permits model training + worldwide processing.
Free/consumer: Avoid · Professional + signed DPA: Configure
TaxPlanIQ Tax Planning (US)
Tax planning platform for firms to identify strategies and price and sell advisory work.
Why Binding ToS grants perpetual license to 'exploit'/create derivatives of User Content and declares it non-confidential, with no tier escape.
TaxPlannerPro Tax Planning (US)
US 1040 tax-planning tool for financial advisors and tax professionals.
Why Ingests full 1040s under only a generic e-commerce privacy policy (which permits partner 'statistical analysis') and a mismatched desktop EULA; no DPA, SOC 2, residency, no-training, or retention commitment exists — all must be obtained in writing plus §7216 consent before use.
TaxSlayer Pro Tax Prep (US) · TaxSlayer
Budget professional US tax preparation software for small firms and high-volume preparers.
Why Return-prep path is clean (TRI used only per 7216, no train-on-your-data license), but the opt-in PrepCheck AI chatbot records and reuses interactions to improve services — the one thing to get right is keeping client data out of that chatbot.
Core prep: Standard · PrepCheck AI chatbot: keep TRI out
TaxTools Tax Resolution (US) · CFS Tax Software Inc
Desktop tax utilities and forms software from CFS for US tax preparers and resolution firms.
Why Legacy local desktop suite — client tax data stays on firm-controlled disk/LAN and never reaches CFS servers, so remaining items are the firm's own WISP/encryption config, not adverse vendor terms.
TaxTree Practice Management
Cloud workflow and practice management platform for tax and accounting firms.
Why Public Terms/Privacy read like an engagement letter, not a SaaS data-processing agreement — no verifiable DPA, SOC 2, subprocessor list, residency, or AI clause on which to base a verdict.
TaxWise Tax Prep (US) · CCH
Professional US tax preparation software from CCH for firms, supporting form-based and interview workflows.
Why Binding CCH SFS license is favorable (customer owns data, improvement use scoped to anonymized telemetry), but the §2.5.5 'worldwide' processing grant needs US-residency confirmation and the Nov-2025 Expert AI features carry no published no-training commitment — get that in writing.
Core prep: Standard · Expert AI features: get written no-training + US-residency confirmation
taxWorkFlow Practice Management
Practice-management and workflow software for tax and accounting firms.
Why Self-hosted mode keeps data firm-side and is defensible; cloud mode has no SOC 2/DPA, an AS-IS liability disclaimer, and a 'provide and improve' license over uploaded files that must be closed in writing before use.
Self-hosted SQL: Standard · Cloud: Configure (needs written addendum)
TheTaxBook Tax Research (US)
Quick-reference US tax guides with an online platform and AI assistant, including multi-state coverage.
Why Binding docs are silent on TaxBert chat input (no confidentiality, no DPA) so only anonymized research questions are safe — no client-identifiable data until written commitments exist.
Client-identifiable data: Avoid · Anonymized research only: Standard
TPS Software Cloud Axis Practice Management · TPS Software
Cloud practice-management platform for accounting/tax firms from T.P.S. Software, Inc., a British Columbia (Canada) corporation.
Why You own your content (ToS §5.1), Service Data is Confidential Information, and a DPA is incorporated — but it's a BC-Canadian vendor storing data in Canada + the US (offshore for US firms), the DPA is GDPR/EEA-scoped, and there's no SOC 2.
Canadian (BC) vendor — client tax data is stored in Canada + the US (offshore for a US firm). Usable with §7216 offshore-disclosure consent, after confirming the incorporated (GDPR-scoped) DPA covers your Service Data and requesting a SOC 2.
Multi-entity consolidation and accounting platform for company groups outgrowing SMB ledger apps.
Why Terms §6.2 grant a perpetual license to train AI/ML on customer data with no opt-out on any tier.
Trello Practice Management
General-purpose Kanban board and task-management tool used across teams, not accounting-specific.
Why Clean posture (no-training carve-out, US-only AWS, auto DPA+SCCs, SOC 2/ISO) but Free tier lacks the admin/security controls a WISP requires, so a paid tier plus data-minimization is the specific thing to get right.
Free: Avoid · Paid (Standard/Premium/Enterprise): Standard
AI-assisted bookkeeping and month-end close automation platform for accounting teams.
Why Binding terms back the no-training posture (customer owns data; only aggregated/anonymized non-PII Usage Data), all seven subprocessors are US-based with US-only processing; only routine confirmations (SOC 2, OpenAI-leg no-training, DPA) remain.
US tax workflow platform for firms, focused on client intake and return delivery/e-signing.
Why No training license and strong confidentiality, but binding Privacy Policy permits international transfer, so US-only residency must be contracted or 7216 offshore consent is triggered.
Typst Builder / AI-adjacent
Markup-based typesetting system for programmatically generating formatted documents and PDFs, for technical writers.
Why Local CLI is safe; the cloud editor is EU-hosted with no DPA — must stay on the CLI for client data.
Local CLI: Standard · Cloud editor: Avoid
Modular practice management software for accounting firms covering workflow, time, and client tasks.
Why No training license, but EU-only Frankfurt hosting with no US option means keep unmasked SSNs/TRI out or obtain §7216 offshore-disclosure consent.
UltimateTax Tax Prep (US) · Great Question
Budget professional US tax preparation software for individual preparers and high-volume tax offices.
Why US-hosted prep software fitting 7216 exceptions, but the Customer Agreement grants a broad de-identified license to 'enhance its database' with no shown opt-out — confirm the enhancement clause and keep client data to return prep only.
Return prep only: Configure (confirm database-enhancement opt-out) · Advisory data: keep out
Uncategorized-transaction tool that monitors QBO and Xero accounts and requests missing details from clients.
Why Binding DPA is purpose-limited with no training carve-out and all sub-processors US; remaining items (execute DPA, confirm residency) are routine.
AI meeting notetaker that records and transcribes client calls, built for accounting firms.
Why Australian AWS storage with US AI sub-processors and no US-residency option requires offshore §7216 consent and a hard no-SSN rule.
Free cloud accounting and invoicing ledger for freelancers, sole proprietors, and very small businesses.
Why Not a training reject (anonymized-only improvement, never-sell), but it is a Canadian H&R Block self-serve product with no US residency option and no DPA — cross-border processing requires offshore §7216 consent and client-owned-ledger architecture.
Document-automation platform (Well App, Inc., a Delaware company) that programmatically fetches, AI-parses, manages, and routes financial documents — invoices and receipts — from cloud storage, portals, and inboxes, via API and a browser extension.
Why US (Delaware) vendor: you keep all rights to your data, service-only license, no AI-training, DPA applies, SOC 2 Type I + GDPR — but SOC 2 is only Type I, the hosting region isn't named, and the native MCP is write-capable into aggregated financial data.
Sign the DPA, confirm US hosting, scope the write-capable MCP tightly (no read-only mode documented), and get §7216 consent before connecting client financial/banking data.
Wispr Flow Builder / AI-adjacent
Voice dictation tool that converts speech to text across desktop and mobile applications.
Why Consumer/Pro tiers unsafe; only Enterprise with BAA and Privacy Mode locked is usable — a tier trap.
Consumer/Pro: Avoid · Enterprise+BAA+Privacy Mode: Standard
Wrangler Miscellaneous · FinOptimal
Sync tool that exports QuickBooks Online data into Google Sheets, for accountants building spreadsheet reports.
Why Contract-verified purpose-limited license with no training rights and US servers; security-rep and 7216 items are routine vendor diligence.
Bookkeeping close automation that flags data errors and anomalies in client ledgers for accounting firms.
Why Binding Privacy Policy trains on input plus de-identified benchmarking license, and Australia-only hosting with no US-residency option on any tier.
XCM Practice Management · Wolters Kluwer
Workflow and task-management platform for accounting firms, part of Wolters Kluwer's suite.
Why Binding CCH Axcess Master Agreement grants CCH a no-opt-out license to use Customer Data (incl. TRI) to 'provide and improve' products and build new features/engines/algorithms — a training-grade grant with no tier escape; only a negotiated written carve-out could fix it.
Xennett Close Automation · Xenett
Month-end close review and workpaper automation that catches errors in client books for accounting firms.
Why No explicit training license but a broad 'business development' use grant over Business data, India-based staff, and open residency with no signable DPA — demo/internal only until signed writings close the gaps.
Xero Practice Manager Practice Management · Xero
Practice-management, job-tracking, and billing tool for firms running on Xero.
Why Real processor DPA, ISO 27001 + SOC 2, and no-training over client data, but processing is NOT US-only (AU/NZ/US + offshore affiliate access), so TRI requires §7216 offshore-disclosure consent.
ZentroBiz Practice Management
Practice management system for tax firms, built specifically around Drake Tax.
Why No posture data on training, residency, or terms — public record cannot support a verdict.
Zoho Books Accounting Ledger · Zoho
Cloud accounting ledger for small businesses, part of the broader Zoho business software suite.
Why Safe binding terms + SOC 2/US datacenters, but US datacenter must be confirmed at signup (cannot change later), India-HQ staff access is a possible offshore point, and the anonymized-crops AI clause has no opt-out — confirm US region and scope Zia.
Zoho Practice Practice Management · Zoho
Practice-management platform for accounting firms within the Zoho ecosystem.
Why Firm-friendly binding terms (no broad training, anonymized/org-specific AI only) but the data center is auto-selected by IP at signup and Zoho is India-HQ, so the account must be pinned to a US data center and India offshore access handled under §7216.
Each status comes from reading the vendor's own binding documents, terms of service, privacy policy, data processing addendum, trust center, and sub-processor list, not the marketing. When a security page and a contract clause disagree, the contract wins. These are use-based summaries of what each vendor's published terms support for putting client data in — our read of those terms, not a recommendation about the product.
The scorecard breaks each status into five independent checks (no-training, DPA, certifications, US residency, retention), with a BAA (HIPAA) note in the detail view for firms whose clients include healthcare providers. Nothing is averaged into a number — ✓ meets the bar, ◐ is partial and a flag to read the note, ✗ fails, and ? means the public record is too thin to say. Connectivity (API / MCP) is listed separately because it is a capability, not a safety rating: a connector is only as safe as how you configure it, and a powerful connector on a weak-posture tool is still a weak-posture tool.
Educational, not legal advice. Each status reflects the vendor's published terms as of the date shown and can change. An enterprise agreement or signed DPA may override a vendor's public terms. Confirm the current terms before you rely on any status, and make your own call. If you are a vendor and your terms have changed, tell us and we will re-vet.