Free template

Engagement letter AI clauses

Pick the clauses that fit your firm and get a section on AI use to paste into your engagement letter: how you use AI, who reviews the work, how providers keep data confidential, and what clients can choose.

Template language to adapt with your counsel, not legal advice. Reviewed . Runs in your browser; nothing you enter is sent anywhere.

Clauses

Adds the Section 7216 consent clause.

Include

What you use AI for

Your providers

Tick only if your provider agreements say so. The AI vendor questionnaire has the questions to ask.

The “Why” notes are for you and aren’t copied. Have your own counsel review the final letter.

The rules behind the clauses

  • AICPA Interpretation 1.700.040, on disclosing information to a third-party service provider. The Journal of Accountancy summarizes it this way: the member should “enter into a contractual agreement with the TPSP to maintain the confidentiality of the information” or obtain the client’s specific consent before disclosing confidential client information.
  • The FTC Safeguards Rule, which lists tax preparation firms among the financial institutions it covers. On service providers, the FTC says firms must select providers that can maintain appropriate safeguards, and that “Your contracts must spell out your security expectations.”
  • Section 7216 and its regulations, which require the taxpayer’s written consent before some uses and disclosures of tax return information.

Before you send it

  1. Confirm what your providers’ contracts say about confidentiality, data location and model training.
  2. Make the letter match your internal rules. The AI acceptable use policy template lists approved tools and review requirements.
  3. For tax clients, prepare any Section 7216 consents as separate documents.
  4. Have your counsel or professional liability insurer review the final language.

Engagement letter AI clauses: questions

Do I have to tell clients that my firm uses AI?
It depends on what the tools do with client information. Under AICPA Interpretation 1.700.040, a member disclosing confidential client information to a third-party service provider either has a contract with the provider to keep it confidential or obtains the client's specific consent first. Section 7216 adds consent requirements for some uses and disclosures of tax return information. Telling clients in the engagement letter also sets expectations, whatever the rules require.
Where does the AI clause go in an engagement letter?
A natural place is next to the letter's confidentiality or service-provider terms, or in the standard terms and conditions attached to the letter.
Should the letter say our providers don't train on client data?
Only if your contracts say so. Check each provider's terms or ask with the AI vendor questionnaire; the generator leaves the sentence out unless you tick the box.
Does this replace a Section 7216 consent?
No. A consent has to be a separate, signed document. The tax clause tells clients you'll ask for one when it's needed; build the form itself with the Section 7216 consent generator.

More free tools

Sources

Official documents read on October 29, 2026. Vendor facts are sourced on each listing.

  1. AICPA confidentiality rule and third-party service providers (Journal of Accountancy, 2015)
  2. FTC Safeguards Rule: What Your Business Needs to Know (Federal Trade Commission)
  3. 26 CFR 301.7216-3, Disclosure or use permitted only with the taxpayer's consent (eCFR)