Accounting & Tax AI
Fieldguide
Medium riskAI-native audit and advisory platform for CPA firms where AI Field Agents perform engagement work such as controls testing and evidence review under practitioner supervision.
Is Fieldguide safe for confidential data?
Fieldguide's certifications are ahead of the field — SOC 2 Type II, plus ISO 42001, the first international standard for AI management systems, and a published DPA with Standard Contractual Clauses for EU transfers — but its trust page does not state whether customer engagement data is used to train or improve its AI, which is a conspicuous gap for an AI-native platform and should be pinned down in contract. The deeper questions are professional rather than technical: when Field Agents perform controls testing, the firm still owns supervision, review, and documentation under auditing standards, and needs a defensible answer for how AI-performed procedures are evidenced, reviewed, and disclosed. The vendor posture supports careful adoption; it does not answer those standards questions for you.
Risk by plan
The same product often carries very different terms depending on the tier — consumer plans are where the exposure concentrates.
Enterprise sales model with no consumer tier; the training question is not answered on the public trust page, so resolve it in the negotiated agreement.
Data handling
Training on inputs
Fieldguide's trust page does not state whether customer data is used to train or improve its AI models — treat this as unresolved and confirm no-training terms in your agreement before uploading engagement files.
Retention
Not published on the trust page; retention and deletion commitments should be set in the firm's contract and DPA.
Residency
Hosted on AWS in the United States; Fieldguide offers a Data Processing Addendum and adheres to Standard Contractual Clauses for EU-to-US transfers. No Canadian residency option is published.
Compliance
- SOC 2Yes
- GDPR / DPAYes
- HIPAA BAANot verified
Certifications typically apply to specific tiers and contracts — confirm scope in writing before relying on them.
New to these frameworks? See our plain-language guides to SOC 2 and the other AI compliance standards.
Enterprise controls
- SOC 2 Type II attestation
- ISO 42001 AI management system certification
- AES-256 at rest, TLS in transit on AWS
- DPA with Standard Contractual Clauses
Frequently asked questions
Is Fieldguide secure enough for audit workpapers?
Its audited controls say yes: SOC 2 Type II for security and confidentiality, and ISO 42001 certification specifically covering how it manages AI — a standard almost no audit-tech vendor holds yet. The item to close before rollout is data-use language: the public trust page is silent on whether engagement data trains its models, so get an explicit no-training clause in writing.
Can AI perform audit testing under professional standards?
AI can execute procedures, but the standards do not delegate responsibility with them: the engagement team must supervise the work, review the results, and maintain documentation sufficient for an experienced auditor to understand what was done. Firms using Field Agents should decide in advance how AI-performed procedures appear in workpapers, how exceptions are rechecked by humans, and what they will tell peer reviewers and regulators about the methodology.
Does adopting an AI audit platform contain our firm's AI risk?
It contains the sanctioned part. The staff most enthusiastic about an AI-native platform are also the likeliest to use personal chatbots for everything the platform does not do — client emails, technical questions, memo drafting — and confidentiality rules under the AICPA code apply to those prompts with no AI carve-out. Pair the platform decision with a policy and monitoring for the tools you did not buy.
Policy changelog
- Initial entry published from Fieldguide's published trust documentation.
Sources
This profile summarizes the vendor's published policies as of the verification date. It is not legal advice.
Fieldguide is probably already in your organization.
Sanitized AI shows you who is using it and redacts sensitive data from prompts before it leaves your control.
More AI tool profiles
Generative AI tax research platform for tax practitioners, answering US and Canadian tax questions with citations to primary authorities.
AI-plus-human bookkeeping automation for accounting firms, connecting to client general ledgers and bank feeds to automate transaction categorization and close work.
Excel-embedded intelligent automation platform for audit and finance teams that extracts and cross-references evidence from client documents inside the workpaper.
Generative AI assistant embedded in QuickBooks Online that drafts invoice reminders, categorizes transactions, and surfaces financial insights for businesses and their accountants.