Compliance-first practice management for tax firms
Prove You Can Protect Them.
Practice management where FTC Safeguards compliance is the foundation, not a downloadable template. Where every tax form your clients send is read, checked, and turned into this year's picture of where they stand—before you open the tax software. Where your firm's security is something you can actually prove.
Your firm uses AI. CPA Hub keeps the proof.
In June 2026 the IRS office that disciplines tax professionals said the rules you already follow apply to AI: a person checks what AI produces, client data stays in approved tools, and the firm has procedures for it, documented. CPA Hub's security plan has a Responsible AI Use section that shows where your firm stands on each one, and what is still open.
- Each item shows OK, open or not recorded.A blank is never counted as done, so you see exactly what is left to close.
- CPA Hub records its own AI use as it happens.Every time CPA Hub uses AI for your firm, it logs what it was for, who ran it and when. Clients are never named.
- It prints in your security plan.The AI pages sit after the FTC sections, labelled as Circular 230, and never count toward your FTC progress. You can also download them on their own.
- Tools outside CPA Hub go on your vendor list.CPA Hub cannot see AI you use elsewhere. You list those tools with your other vendors and record whether client data may go into them.
Source: IRS Office of Professional Responsibility, Issue Number 2026-19, “Introductory Guidelines for Responsible AI Use in Federal Tax Practice,” June 24, 2026. Guidance on rules you already follow, not a new rule, and not an FTC Safeguards Rule requirement. General information, not legal advice.
The FTC Wants to See Your WISP.
Do You Have One?
The FTC Safeguards Rule requires every tax professional to have a Written Information Security Plan. Not a Word doc from 2019. A living, documented system that proves you're protecting client data.
Safeguards order
template, not a living WISP
required to have a WISP (IRS)
TaxDome, Karbon, Canopy — a free template at best, no managed compliance system. You're mostly on your own. Until now.
Three Superpowers to Run Your Firm.
One to Reach Beyond It.
Not three products duct-taped together. One platform, built from scratch, where everything works together — and one capability that extends past your walls, on the consent layer above.
Complete Practice Management
Everything you need to run your firm
- Full CRM with tax profiles
- Dependent & life event tracking
- Document requests & reminders
- Secure document upload
- Encrypted messaging
- E-signatures & engagement letters
- Project templates & automation
- Time tracking & invoicing
- QuickBooks integration
Compliance Command Center
FTC Safeguards compliance, built in
- WISP Builder — AI-powered policy generation
- Risk Assessment — 24 questions, scored recommendations
- Vendor Registry — Track & oversight all third parties
- Training Tracker — Staff completion & certificates
- Incident Logging — Response workflows & documentation
- Annual Review — Automated compliance calendar
- Audit Reports — One-click compliance export
Client Tax Picture
Know where every client stands before the return is started.
- 43 document types recognized
- Every printed figure added up
- What doesn't add up is flagged, with both numbers
- Builds as each form is checked
- Passive loss, QBI and SALT rules applied
- Planning items while they can still be acted on
- Ask any tax question
- Answers cite the IRS source
- 500+ knowledge chunks
Reading the forms is where it starts.
Knowing where your client stands is where it pays.
Every form your client sends is read, and every figure it prints is added up. The rules a return applies are applied, and this year's estimate builds as each form is checked. You know who will owe, who is complicated, and what can still be done—before you open the tax software.
Eleven documents in
Two W-2s, a broker’s consolidated 1099, two K-1s, a mortgage statement and more - sent through the client portal.
Every figure added up
This year’s picture
The conversation
“You’re on track to owe about $6,400. Here’s why - and here’s what you can still do.”
Sample household, synthetic documents. A planning estimate, not the return: credits that depend on the household, and documents not yet received, are not in it.
Your Compliance Command Center
See exactly where you stand. Know exactly what to do next.
Get audit-ready in days, not months.
Sample dashboard — illustrative data.
One click generates a complete compliance package: WISP, risk assessment, vendor registry, training records, incident history, and annual review documentation.
🧠 Try Ask CPA Hub Right Now
Ask any tax, compliance, or how-to question. Get an IRS-cited answer in seconds.
They Hand You a Template.
We Built You the System.
We match them on everything you already use — then do three things their software doesn't. Some now offer a free WISP template or a 2FA toggle; that's a start, but a template is a document you still have to maintain and re-prove every year. CPA Hub is the living system that does it for you.
Competitor rows checked against each vendor's own published documentation, 27 August 2026. TaxDome's users row reflects its per-client plan announced 4 November 2026.
| Feature | CPA Hub | TaxDome | Canopy | Karbon |
|---|---|---|---|---|
| PRACTICE MANAGEMENT | ||||
| Client management, docs, portal & workflow | ✓ | ✓ | ✓ | ✓ |
| E-signatures & engagement letters | ✓ | ✓ | ✓ | ✓ |
| Unlimited users — no per-seat feesBUILT IN | ✓ | ◐ | ✗ | ✗ |
| FTC SAFEGUARDS COMPLIANCE | ||||
| Managed FTC compliance system (not just a template)BUILT IN | ✓ | ◐ | ✗ | ✗ |
| Living WISP builder & maintenanceBUILT IN | ✓ | ◐ | ✗ | ✗ |
| Scored risk assessment engineBUILT IN | ✓ | ✗ | ✗ | ✗ |
| Vendor registry, training & incident loggingBUILT IN | ✓ | ✗ | ✗ | ✗ |
| One-click audit-ready exportBUILT IN | ✓ | ✗ | ✗ | ✗ |
| AI & INTELLIGENCE | ||||
| AI document extraction (26+ forms) | ✓ | ◐ | ◐ | ✗ |
| Ask CPA Hub — cited tax, compliance & product answersBUILT IN | ✓ | ✗ | ✗ | ✗ |
| ADVISOR BRIDGE | ||||
| Coordinate with clients' wealth advisorsBUILT IN | ✓ | ✗ | ✗ | ✗ |
We help you protect it — and make you smarter doing it."
Security You Can Verify.
Anyone can put "bank-level security" on a landing page. We'd rather show you the receipts—including one you can check yourself, right now.
Mozilla Observatory is a free, public web-security benchmark that grades a site's HTTP security headers. CPA Hub currently scores A+ (100+) on this public benchmark. Run the scan yourself; it's public.
Client SSNs and other sensitive fields are encrypted at the field level, not just "in transit." The data is unreadable even to someone looking directly at the database.
Our recovery process isn't a hope—it's rehearsed. Backups are restored and cryptographically verified on a schedule, so "we can get your data back" is a proven fact, not a promise.
Every firm's data is walled off from every other firm's—and that boundary is enforced in code and checked automatically on every release, not left to human discipline.
We're building toward SOC 2 with SOC 2-aligned controls in place today. "Observatory" refers to the public Mozilla web-security-header benchmark and reflects that specific scope.
Hire someone.
Your bill doesn't change.
Per-seat software bills you for every login — every partner, every preparer, every seasonal temp. CPA Hub charges by client count and nothing else. Add your whole team for $0.
Here's the difference that's left.
Unlimited users. Because your seasonal intern shouldn't cost another $59 a month.
TaxDome: its new plan as reported by Accounting Today, “TaxDome switches from per-seat to per-client pricing,” 4 November 2026 — $1,500 a year covers 150 active accounts and up to 20 team members; the AI add-on is $200 a month. TaxDome counts accounts active during the year; CPA Hub counts clients it worked with in the last 12 months, up to 250 on this plan. Karbon: Team plan, $59 per user per month billed annually, checked against karbonhq.com/pricing, 9 November 2026. Vendors change prices — check their sites before you decide.
Pay for the clients you serve.
Not the people you hire.
Three sizes. Every one includes everything — AI, compliance, practice management and unlimited staff.
14-day free trial, no card. Pay yearly and get 2 months free.
Only active clients count. A client counts when, in the previous 12 months, your firm sent them an invoice, engagement letter, signature or document request, worked on their organizer, project or time, exchanged a message, or received a document — other than through the archive import. Bring your whole archive in; old clients and old files never count. Your price is locked: what you pay for your size is not raised while you stay subscribed.
Built for Tax Pros Who Take Security Seriously.
Your clients trust you with their most sensitive information.
You deserve software that helps you protect it.
No credit card required • No client limit • Cancel anytime