AI Ethics in Accounting
How to use AI without outsourcing integrity, objectivity, confidentiality, competence, or accountability.
Educational content — not legal, regulatory, privacy, cybersecurity, tax, audit, or professional-standards advice. Soft-label claims from Soft-label· IESBA, Soft-label· NIST, Soft-label· AICPA, Soft-label· IRS/OPR Circular 230, Soft-label· SEC, and Soft-label· FTC as regulator or standards materials unless independent evidence is cited. Confirm obligations with qualified counsel and your firm’s policies.
Product freshness: Verified September 23, 2026. Ethical guidance, enforcement actions, Circular 230 interpretations, privacy rules, and vendor AI features change quickly. Recheck official sources before high-consequence decisions.
Why This Lesson Matters
AI ethics in accounting is not a futuristic debate about robots. It is a daily set of professional decisions:
- Should this client document be uploaded to this tool?
- Can an AI-generated answer be trusted enough to send to a client, manager, auditor, or tax authority?
- Is the output a fact, a calculation, a suggestion, or an unsupported guess?
- Is a recommendation being accepted because it is actually reliable—or because it is fast and sounds confident?
- Are we describing our use of AI accurately to clients, employers, regulators, and the public?
- Who will notice, correct, and own the consequences if the system is wrong?
The ethical issue is rarely “AI or no AI.” The real issue is whether the workflow preserves integrity, objectivity, professional competence and due care, confidentiality, professional behavior, independence where relevant, and accountable human judgment.
The core idea
AI can help produce work. It cannot inherit the accountant’s ethical duties. If an AI-assisted conclusion is wrong, misleading, biased, unsupported, or confidentially mishandled, the responsibility belongs to the person and organization that used it.
Soft-label· IESBA materials state that the five fundamental principles—integrity, objectivity, professional competence and due care, confidentiality, and professional behavior—apply regardless of the tools or technologies involved. Soft-label IESBA technology-related revisions became effective in December 2024 and address technology outputs, automation bias, competence, and the full data lifecycle under confidentiality.
The Ethical Rule
AI may assist with a task. It does not become the professional.
A tool does not have a professional license, an ethical duty, a client relationship, a legal obligation, professional skepticism, or a reputation to protect. It cannot accept responsibility for a misstatement, unsupported tax advice, leaked data, biased decision, misleading marketing claim, or deficient audit conclusion.
The responsible person must still:
- 1Understand the purpose and consequence of the work.
- 2Use an appropriate tool and approved environment.
- 3Evaluate the quality and limitations of the data.
- 4Assess whether the output is fit for purpose.
- 5Challenge errors, omissions, bias, or unsupported claims.
- 6Protect confidential information.
- 7Explain the work honestly.
- 8Retain appropriate evidence and review.
- 9Escalate when the risk exceeds their authority or competence.
Soft-label· IESBA technology guidance states that professional accountants remain responsible for judgments and decisions made in their work regardless of the level of automation or sophistication of the technology.
The Ethical Framework: Five Principles
The following table translates the profession’s ethical principles into everyday AI decisions.
| Principle | What it means with AI | Practical question |
|---|---|---|
| Integrity | Be honest and straightforward; do not present AI output as verified fact when it is not | Would this claim still be accurate if I explained exactly how the output was created? |
| Objectivity | Do not let bias, pressure, automation bias, or conflicts improperly influence judgment | Am I accepting this because evidence supports it, or because the tool, client, manager, or deadline is pushing me? |
| Professional competence and due care | Understand the tool well enough to use it appropriately; review outputs and maintain relevant skills | Do I know the assumptions, limitations, and review steps well enough to rely on this output? |
| Confidentiality | Protect client and organizational information throughout collection, use, transfer, storage, sharing, and destruction | Where will this data go, who can access it, how long will it remain, and do we have authority to send it there? |
| Professional behavior | Comply with laws and regulations; avoid conduct that discredits the profession | Would this workflow withstand client, peer-review, regulator, or public scrutiny? |
Soft-label IESBA guidance identifies technology as a source of ethical risk across competence and due care, objectivity, confidentiality, and independence. It requires accountants to assess whether technology outputs are fit for purpose, understand relevant assumptions and limitations, evaluate data quality and bias, and determine the appropriate extent of reliance.
1. Integrity: Do Not Turn a Plausible Answer into a Fact
Generative AI can produce text that is fluent, specific, and confident even when it is inaccurate, incomplete, or fabricated. Soft-label· NIST materials call this risk confabulation: confidently stated but erroneous or false content that may mislead or deceive users.
The ethical risk appears when an accountant presents that output as though it were verified.
Examples of integrity failures
- Sending an AI-drafted tax explanation without verifying the authority, facts, and calculation.
- Saying a financial-reporting conclusion is “GAAP-compliant” because an AI tool said so.
- Repeating a vendor’s claimed AI accuracy percentage without knowing the test population, conditions, or limitations.
- Calling a workflow “fully automated” when staff still make material classification, review, or approval decisions.
- Inserting AI-generated citations into a memo without opening and checking the underlying source.
- Reporting an AI-generated business explanation as a known fact when the ledger only shows a numerical change.
The integrity test
Before using an AI-assisted conclusion, ask: Can I accurately describe what the tool did, what I verified, what I did not verify, and what uncertainty remains? If the answer is no, the conclusion is not ready to communicate.
Example: the unsupported variance narrative
AI writes (unsupported)
“Revenue increased 12% because customer demand strengthened.”
The ledger may support the 12% increase. It does not prove demand strengthened. The increase could arise from price, product mix, acquisitions, timing, corrections, currency, a one-time contract, or data error.
2. Objectivity: Resist Automation Bias and Human Pressure
Automation bias is the tendency to favor technology-generated output even when other information raises questions about its reliability. Soft-label IESBA materials now explicitly name automation bias as a bias that can impair objectivity and professional judgment.
Automation bias does not require a sophisticated AI system. It can happen when a person accepts an auto-categorized transaction, a matching recommendation, an audit anomaly score, an AI-generated legal explanation, or a draft disclosure because the output looks authoritative.
Two opposite mistakes
| Mistake | What it looks like | Better response |
|---|---|---|
| Automation bias | “The system gave it a 98% confidence score, so it must be correct.” | Ask what the score means, how it was calibrated, whether the evidence supports the output, and what could make it wrong |
| Algorithm aversion | “I will ignore the tool because humans are always better.” | Test the tool against known cases; use it where it improves work and retain human review where consequence is high |
Pressure can also impair objectivity
- A manager wants the close done before the review is complete.
- A client wants a favorable tax answer.
- A partner wants to advertise that the firm is “AI-powered.”
- A vendor promises a time-saving result that management wants to believe.
- A team wants to avoid admitting that an automated workflow failed.
The ethical response is not to be difficult for its own sake. It is to identify the threat, document the concern, seek appropriate review, and refuse to turn pressure into an unsupported conclusion.
3. Competence and Due Care
Competence does not mean becoming a machine-learning engineer. For most accountants, it means understanding the tool and workflow well enough to use them safely for the assigned task.
Soft-label IESBA technology revisions require professional accountants to understand, be able to explain, and evaluate technology used in their professional activities, and to keep pace with relevant technology developments.
Due care requires review
Using AI responsibly is not “prompt once, send immediately.” Due care includes:
- Defining the task and required output.
- Using approved data and tools.
- Checking source data and assumptions.
- Reviewing output against authoritative or controlled evidence.
- Testing calculations and edge cases.
- Documenting limitations and open questions.
- Obtaining review at the appropriate level.
Soft-label· IRS/OPR Circular 230 Soft-label materials from the IRS Office of Professional Responsibility state that Circular 230 duties apply to AI-assisted tax practice. Soft-label 2026 OPR guidance emphasizes that practitioners remain responsible for accuracy, confidentiality, due diligence, competence, and supervision, including verifying AI-generated facts, citations, and calculations before providing work to clients or the IRS.
Competence warning signs
Stop and ask for help if you cannot answer these. Checked 0/7.
4. Confidentiality: Data Has a Lifecycle
The issue is bigger than “don’t share passwords.” AI can create new paths for information to move: prompts, uploads, chat history, browser extensions, connectors, APIs, model providers, logs, support tickets, backups, and generated outputs.
Soft-label IESBA technology guidance says confidentiality obligations extend across the full data lifecycle: collection, use, transfer, storage, dissemination, and lawful destruction. It also states that using client data for purposes such as training AI models requires proper authorization and clear boundaries around consent.
| Lifecycle stage | Practical risk question |
|---|---|
| Collection | What is gathered, from whom, and under what authority? |
| Use | Is the purpose limited to the authorized professional task? |
| Transfer | Where does data move—prompts, APIs, connectors, subprocessors? |
| Storage | What is retained in history, logs, backups, or embeddings? |
| Dissemination | Who can access outputs, support tickets, or shared workspaces? |
| Destruction | Can data be deleted lawfully and verifiably when required? |
Before uploading any client or firm data
Third-party service providers
Soft-label Soft-label· AICPA Code of Professional Conduct materials address use of third-party service providers. Before disclosing confidential client information to a third-party provider, a member should have a contractual arrangement requiring confidentiality and reasonable protective procedures or obtain specific client consent. The client should be informed, preferably in writing, that a third-party provider may be used; if the client objects, the member should not use the provider or should decline the engagement.
An AI application may be a third-party service provider when it receives or can access confidential client data. The fact that it is called an “assistant,” “copilot,” “chatbot,” or “productivity tool” does not change the confidentiality analysis.
Soft-label· IRS §7216 Tax-return information may have additional restrictions. Soft-label IRS materials explain that Internal Revenue Code section 7216 generally restricts tax return preparers from disclosing or using tax-return information for purposes other than tax-return preparation without taxpayer consent, subject to specific exceptions.
Do not assume that a tool’s general privacy statement resolves Section 7216 questions. The permitted use depends on the facts, legal authority, data flow, tool configuration, contracts, and consent. Escalate to qualified legal, tax, privacy, or compliance professionals when needed.
5. Professional Behavior: Do Not Mislead About AI
AI-washing means exaggerating, misrepresenting, or making unsupported claims about AI use or AI performance. It can appear in client pitches, websites, engagement proposals, investor communications, performance claims, internal dashboards, or job descriptions.
Soft-label SEC enforcement warning
Soft-label SEC 2024 enforcement actions against investment advisers Delphia and Global Predictions are a concrete warning. Soft-label SEC materials charged both firms with making false and misleading statements about their purported AI use; Delphia agreed to a $225,000 civil penalty and Global Predictions agreed to a $175,000 civil penalty (SEC Press Release 2024-36).
The point for accountants is broader than investment advice: say what the tool actually does, not what sounds impressive.
Ethical ways to describe AI use
| Weak or risky claim | Better, supportable description |
|---|---|
| “Our AI guarantees accurate books.” | “Our workflow uses automated suggestions and controls; qualified staff review exceptions and approve accounting decisions.” |
| “Fully automated tax preparation.” | “The tool assists with document organization and draft preparation; practitioners review facts, calculations, authority, and final filings.” |
| “AI detects fraud.” | “The system identifies transactions meeting specified risk criteria for human investigation; it does not determine that fraud occurred.” |
| “Our AI analysis is unbiased.” | “We test outputs for relevant error patterns and limitations, document the workflow, and require review before consequential decisions.” |
| “The tool is 99% accurate.” | “The vendor reports a metric under specified test conditions; the firm independently tests the workflow on representative approved cases before use.” |
Soft-label Soft-label· FTC Workado enforcement shows why accuracy claims need evidence. Soft-label FTC materials alleged that the company advertised its AI-content detector as 98% accurate while the tool’s general-purpose performance was far lower; the final order prohibits efficacy claims unless supported by competent and reliable evidence.
Professional behavior also includes honesty about limits
Do not hide:
- That a result was AI-assisted where the fact matters to the client or engagement.
- That the output is a first draft or candidate list rather than a conclusion.
- That the tool could not access all relevant documents.
- That a number is estimated, provisional, or subject to review.
- That an exception remains unresolved.
6. Fairness and Bias: Accounting Systems Can Affect People
Bias is not only a concern for consumer lending or hiring algorithms. Accounting and finance workflows can influence which vendors are flagged, which customers receive credit attention, which employees’ expenses are scrutinized, which transactions appear suspicious, or whose data is treated as an exception.
Soft-label Soft-label· NIST Generative AI Profile materials identify harmful bias and homogenization as risks, including performance disparities across subgroups or languages caused by nonrepresentative training data and incorrect assumptions about performance.
Questions to ask
- Does the tool work equally well across names, languages, locations, document formats, currencies, and business types represented in the data?
- Are certain customers, vendors, employees, or transactions more likely to be flagged because of incomplete or biased data?
- Is a classification rule using a proxy for a protected or sensitive characteristic?
- Are error rates being measured separately for meaningful groups?
- Does a reviewer have enough context to challenge a flagged item?
- Could a false positive cause reputational, financial, employment, credit, or compliance harm?
Example: vendor matching
An AI tool proposes that Müller GmbH, Muller GMBH, and Muller Consulting LLC are the same vendor.
7. Transparency and Explainability
Explainability does not require revealing every model weight. For accounting work, a practical standard is simpler:
Can a qualified reviewer understand the purpose of the tool, the data it used, the rules or prompt applied, the output produced, the limitations, and the human review performed? If not, the output may be unsuitable for high-consequence uses.
Minimum documentation for an AI-assisted workflow
Minimum documentation items checked: 0/10
Soft-label NIST AI RMF materials call for documentation of test sets, metrics, tools used for evaluation, human-oversight processes, and evidence that systems are valid and reliable for the conditions in which they are deployed.
8. Accountability and Supervision
A common ethical failure is diffused responsibility:
- The preparer says, “The tool generated it.”
- The reviewer says, “The preparer used the approved tool.”
- The manager says, “The system had a high confidence score.”
- The vendor says, “The output is only a suggestion.”
None of those statements identifies who actually decided that the output was appropriate to use.
Assign roles explicitly
| Role | Accountability |
|---|---|
| Business owner | Defines purpose, risk tolerance, and acceptable use |
| Data owner | Approves data access, quality expectations, and retention |
| Tool owner / IT | Configures access, security, integrations, updates, and monitoring |
| Preparer | Uses the tool according to procedure and performs required checks |
| Reviewer | Challenges logic, evidence, exceptions, and final use of the output |
| Approver | Authorizes high-consequence action, report, advice, filing, or payment |
| Compliance / privacy / legal | Advises on rules, contracts, consent, and escalation where required |
The accountability test
Before a high-consequence output is used, answer each question.
Incomplete answers (0/7). If the answer to any of these is “the AI,” there is no adequate accountability structure.
The AI Ethics Decision Tree
Interactive stepper through eight questions before deploying or relying on an AI-assisted output.
Question 1 of 8
Is the task low or high consequence?
High-consequence work (filings, advice, journal entries, payments, audit conclusions, board reports) requires stronger review, documentation, and human ownership.
Pause if: You cannot articulate the consequence of a wrong or misleading output.
ABC Coffee Shop: Ethics at Month-End
Compare a safe variance-narrative workflow with an unethical shortcut that overclaims “AI-verified” analysis.
ABC Coffee Shop uses an approved enterprise AI assistant during the March 2026 close. The controller asks it to summarize material variances from a controlled table.
Step 1 of 8
The preparer provides only an approved variance table, not unrestricted access to all client files.
Ethical Prompts Versus Risky Prompts
Expand each risky prompt to reveal a better, copyable alternative.
Better, copyable prompt
Using only `tbl_Approved_PnL`, identify the account-level changes that mathematically explain the decline in operating income. Label unsupported causes `Needs Evidence` and do not infer business reasons.
Rely, Verify, or Reject
Choose Rely, Verify, or Reject for each scenario, then reveal the model answer.
Scenario 1: An AI tool summarizes 500 approved customer comments into recurring themes. The accounting team uses the summary only to decide which themes to investigate further.
Scenario 2: An AI tool recommends recording a customer refund as a reduction of revenue. The entry would materially affect quarterly financial statements.
Scenario 3: A firm’s website says, “Our AI guarantees tax accuracy,” because the firm uses tax software with automated error checks.
Scenario 4: A junior accountant uploads a client bank statement to a personal free AI account to ask for help summarizing unusual transactions.
Scenario 5: A bank-reconciliation tool proposes a match with a 97% confidence score. The amounts agree, but the counterparty names and dates conflict.
Knowledge Check
Five questions on responsibility, automation bias, evidence vs summaries, confidentiality beyond training, and incomplete evidence.
Question 1: Does using an AI tool transfer professional responsibility to the vendor or model?
Question 2: What is automation bias?
Question 3: What is the difference between an AI-generated summary and evidence?
Question 4: Why is “we do not train on your data” not enough for confidentiality review?
Question 5: What should you do when an AI output is plausible but source evidence is incomplete?
Final Ethics Checklist
Key Takeaways
- AI may assist with a task; it does not become the professional or inherit ethical duties.
- Integrity means refusing to present fluent, unsupported output as verified fact.
- Objectivity requires resisting automation bias, algorithm aversion, and human pressure.
- Competence and due care mean knowing the tool well enough to review outputs and escalate limits.
- Confidentiality covers the full data lifecycle—not only passwords or training opt-outs.
- Professional behavior forbids AI-washing and other misleading claims about AI’s role or accuracy.
- Fairness, explainability, and explicit accountability keep consequential decisions reviewable and owned by humans.
Bottom line
Ethical AI use in accounting is not about refusing technology. It is about refusing to let technology lower the profession’s standards.
“I understand the work. I know what evidence supports it. I know its limits. I protected the information. I reviewed the important risks. And I am willing to take responsibility for the conclusion.”
That is what ethical professional use looks like.
Sources & Further Reading
Selected soft-label IESBA, NIST, AICPA, IRS, SEC, and FTC materials. Guidance and enforcement pages change; recheck official sources for current requirements. This page is educational and does not replace legal, regulatory, privacy, cybersecurity, tax, audit, or professional-standards advice.
- IESBA — Final Pronouncement: Technology-related Revisions to the Code
- IESBA — 2024 Handbook of the International Code of Ethics for Professional Accountants
- NIST — Artificial Intelligence Risk Management Framework (AI RMF 1.0)
- NIST — Artificial Intelligence Risk Management Framework: Generative AI Profile (NIST AI 600-1)
- AICPA Code of Professional Conduct — confidentiality & third-party service providers
- IRS — Disclosure or use of tax return information by preparers (IRC §7216 overview)
- IRS — Section 7216 information for tax professionals
- IRS OPR — Introductory Guidelines for Responsible AI Use in Federal Tax Practice (Alert 2026-19 PDF)
- SEC — Press Release 2024-36: Charges against Delphia and Global Predictions (AI-washing)
- FTC — Safeguards Rule: What your business needs to know
- FTC — Final order against Workado, LLC (unsupported AI detection accuracy claims)
What's Next?
Continue with related career and ethics lessons, deepen tool evaluation, or return to the AI pillar hub.
Will AI Replace Accountants?
Task change, labor-market evidence, and career strategy
Skills That Stay Human
Judgment, skepticism, evidence, and accountability
Evaluating AI Tools as a CPA
Vendor due diligence, data privacy, and client risk
Regulating AI in Finance
How rules are catching up with AI in accounting
Coming soonAI in Accounting Hub
Browse all AI pillar topics