What Belongs in an Outsourced Accounting Engagement Agreement

Why the Agreement Decides the Relationship

An outsourced accounting engagement agreement is the only version of scope that survives a disagreement. The sales call is not.

A complete one does four things a conversation cannot. It names every deliverable with a business-day deadline attached. It sets a response window and an escalation path tied to named roles. It defines exactly what triggers a re-scope and a new fee. And it states who owns the accounting file and how your data comes back when you leave. Most drafts a buyer receives cover the first item loosely and skip the fourth entirely.

Here is how it goes wrong. On the call you describe three entities, a Stripe feed, deferred revenue, and a lender who wants a package by the 15th. The provider says yes to all of it. The document you sign says “monthly bookkeeping and financial statement preparation.” No entity count, no deadline, no named artifacts.

Then month four arrives and the deferred revenue schedule does not. The provider says revenue recognition was never in base scope. You say it was discussed. Neither position is written down.

There is no neutral referee for that argument. There is only the document.

The profession’s own numbers show how often the document is thin. CNA risk-control directors reported that roughly 75% of 2023 claims against CPA firms in the AICPA Professional Liability Insurance Program came from tax services, and that over half of those claims had no engagement letter for the underlying service, as reported in The Tax Adviser. The Journal of Accountancy found the pattern repeated in 2024. Read that from the buyer’s side. If licensed firms fail to paper half the engagements that reach a claim, the draft you were handed is a starting position, not a fixed form.

Type “accounting engagement letter what to include” into a search bar and nearly every result is written for the firm drafting it, not for the company signing it. This page is the other side. Use the table below as your accounting services agreement checklist. It’s a review habit, not legal advice, and it doesn’t replace having counsel read the final document. For the four layers a single agreement has to cover, start with the pillar on finance as a service.

Clause	What good looks like	The red flag
Scope of services	All four layers listed separately, with included and excluded work named under each.	One sentence covering “monthly bookkeeping and financial statement preparation.” No exclusions anywhere.
Deliverables	Named artifacts. Closed trial balance, statement package, AR and AP aging, reconciliations by account, payroll entries, deferred revenue schedule, board or lender package.	“Monthly financial statements.” The category is named and the artifacts are not.
Delivery deadlines	A business-day number on every artifact, with your input deadline stated alongside it.	“Promptly,” or a placeholder like “within X days” still unfilled at signature.
Client responsibilities	Named input deadlines and a designated reviewer with suitable skills and experience to approve deliverables.	Provider obligations only, or a generic line about the client cooperating.
Response times	Tiered in business hours, time zone defined, with a separate tier for time-sensitive items.	A sentence about how responsive the firm is. No number in the document.
Contacts and coverage	Three provider roles named, a backup named by role, and a notice period before your accountant is reassigned.	One shared inbox, or one individual with no successor and nothing about coverage.
Volume thresholds	Transactions, accounts, entities, states, payroll headcount, AP and AR volume, and ad hoc requests counted, with the next band priced.	“Based on current volumes.” No baseline recorded, so any month can be called over scope.
Re-scope trigger	Mutual written approval before out-of-scope work starts, with a change log you actually receive.	The provider may adjust scope or fees “upon written notice.” A unilateral amendment right.
Data ownership and admin	The company owns all books and data. Client-owned subscriptions where possible, primary admin retained throughout.	The provider is primary admin on your file and the agreement is silent on transferring it.
Exit and handback	Notice period, a named artifact list, native formats, a delivery window, and who completes the close in progress.	“Records will be returned upon request.” No format, no list, no timeframe.

The Deliverables Clause: What Arrives and When

A deliverables clause binds a provider only when it names the artifact and attaches a business-day number to it. “Monthly financial statements” is a category, not a commitment. Ask for the list itemized, with accounts and entities counted.

For a company between $1M and $20M in revenue, the named list usually runs:

• Closed trial balance for the period, adjusting entries booked.
• Financial statement package. P&L with prior-period and budget comparatives, balance sheet, cash flow statement.
• Reconciliations by account count, not as a category, plus AR aging and AP aging.
• Payroll journal entries and the payroll accrual.
• Judgment-heavy schedules. Deferred revenue and the revenue recognition workpaper, prepaids, accruals, fixed assets.
• Consolidation and intercompany eliminations, if you run more than one entity.
• Board or lender package, including the covenant schedules your lender actually asks for.

A clause that names ten artifacts and misses the eleventh still beats one that says “monthly financials.” The named list is where the negotiation happens, because anything left off it becomes a change order later. Our month-end close checklist for SaaS companies walks the same sequence in the order the work gets done, which is a fast way to find the gaps in a draft.

Put a business day on every line

Template agreements say “within X days of month-end” and leave the X. Two benchmarks let you fill it with something defensible.

APQC’s Open Standards Benchmarking on general accounting, drawn from roughly 2,300 organizations and published by CFO.com in its Metric of the Month series, measured the calendar days between running the trial balance and completing consolidated statements. The median was 6.4 days. The top quartile finished in 4.8 or fewer. The bottom quartile took 10 or more. Measured in business days instead, ISG and Ventana Research reported in 2019 that 61% of finance teams close monthly within six business days and 46% within four, rising to 88% among the substantially automated.

Those are internal teams closing their own books, so treat them as a reference band, not a legal standard. A close committed at business day 10 to 12 sits where the bottom quartile lives. Business day 5 to 8 is defensible for a multi-entity company with real revenue recognition. A commitment with no day number is not a commitment.

Close complete and package delivered are two dates

A provider can finish the close on business day 8 and email the package on business day 14. Both dates belong in the clause, or one delivery date gets named as the only one that counts.

The other half of a good deadline is your side of it. Deliverable dates should be conditional on your inputs, and the clause should say which inputs and by when. Bank feeds connected and receipts submitted by business day 2, package delivered by business day 8, reads as a paired obligation. A deadline on the provider with no matching client input date is unenforceable in practice, because the provider will always point at what was missing. If the draft omits your dates, write them in yourself.

Response Times, Escalation, and Who You Call

A clause promising a reply “in a timely manner” is unenforceable, because neither side can measure it. This is the half most buyers never get. A traditional engagement letter defines what the firm is responsible for. An outsourced accounting service level agreement defines how fast, how well, and what happens when that slips. Ask for both halves.

A response clause worth signing carries three tiers, each with a number:

1. Routine inquiry. One business day to acknowledge, with a stated window to resolve. Define business hours and the time zone, because a provider in one zone and a controller in another read “one business day” differently.
2. Time-sensitive item. Same business day, with examples that qualify. Payroll funding, a wire awaiting approval, a lender request with a deadline.
3. Escalation. A named role with its own response window, plus what triggers it and what remedy follows. A service credit, rework at no charge, or a termination right for repeated breach.

Name contacts by role, not by person, on both sides. The provider side needs three: the day-to-day accountant, the engagement manager or controller, and the partner or practice lead. Named by role, the clause survives a resignation. Named by individual, a resignation voids it. Your side needs a named reviewer too, because the AICPA’s nonattest services rules require the client to designate someone with suitable skills, knowledge, and experience to oversee the work and evaluate the results.

Then ask the question that separates delivery models. What happens in close week when the assigned accountant is out?

• A named backup by role, with the same response tiers during the absence.
• Whether the close deadline holds or moves during a staffing change.
• A notice period before your day-to-day accountant gets reassigned.
• Client-specific procedures documented where you can see them, not in one person’s head.

One accountant per client is key-person risk with a friendly face. A team-based model spreads it across documented procedures and cross-training, which is how outsourced accounting services should be staffed. Put the monthly review call in the clause too. Frequency, attendees by role, and whether it happens before or after the package is issued.

Fees, Scope Creep, and Out-of-Scope Work

The fee clause matters less than the re-scope clause. What sets your real annual cost is the list of thresholds that convert included work into billable work, and whether crossing one needs your written approval first.

AICPA guidance on engagement letters treats work beyond the signed agreement as an expansion of service requiring a contract modification, handled through an addendum or a revised letter rather than absorbed quietly. Risk-management guidance in the Journal of Accountancy also tells firms to limit the scope of services so they have greater opportunity to identify and bill for additional work. That is published advice to practitioners, not an accusation. It also explains why the included-services list in a draft reads narrower than the sales call sounded.

So read the thresholds as the real price list. Each should carry a number, a next band, and an approval rule:

• Monthly transaction volume, with the counting method defined. Does a Stripe payout batch count as one transaction or as its underlying charges?
• Bank, credit card, and merchant accounts reconciled.
• Legal entities, and whether consolidation is included.
• States with registration, filing, or nexus obligations.
• Payroll headcount and runs per month, AP bill volume, AR invoice volume.
• Report recipients and distinct packages, since a board pack, a lender pack, and an investor update are three artifacts.
• Ad hoc requests per month, and what happens to the eleventh one.

Price levels and tier anatomy sit outside this page. Our guide to finance as a service pricing covers what the market charges.

Cleanup is a project, not a line in the monthly fee

Catch-up means transactions were never recorded. Cleanup means the books exist and contain errors. Most real engagements involve both, and neither belongs inside a recurring monthly fee.

What to look for in the draft:

• Cleanup scoped, quoted, and invoiced as its own project, with the monthly retainer starting from clean books.
• An opening balance date naming the point from which the provider takes responsibility, with earlier periods excluded unless separately engaged.
• An hourly rate with an estimated range and a reassessment checkpoint, or a short paid diagnostic followed by a fixed price.

A fixed cleanup quote issued before anyone has opened the file is a red flag. It gets revised, or the work stays shallow. Our page on catch-up bookkeeping services walks through how that diagnostic normally runs.

Term, renewal, and the annual price conversation

The Journal of Accountancy’s engagement letter guidance warns that evergreen letters can remove a statute-of-limitation defense and permit a claim years after the services were rendered, and it recommends annual letters signed by both parties. Firms are also advised to cap the term at one year and identify the fee calculation method.

For you that cuts both ways. Annual re-papering means an annual price conversation, which is normal and worth planning for. What the clause should contain is the notice period before a change takes effect, whether the increase is capped or indexed, and whether you can exit without penalty if you decline it. A draft that allows a fee change “upon notice” with no lead time and no exit right is the version to negotiate. Most providers will.

Data Access, Ownership, and What Happens If You Leave

Data ownership and exit is the most-skipped clause in outsourced accounting agreements, and it carries the most expensive failure mode. If the provider holds the subscription to your accounting file and the document says nothing about handback, your books sit behind a door you don’t control.

A clean clause says the company owns all books and data, and the provider holds a limited license to use them for the engagement only. Two operational commitments make that real. Subscriptions stay in the company’s name where possible, and you keep primary admin access for the life of the engagement.

That second one is not a formality. Firm-billed accounting-software subscriptions are common and often cheaper, and the billing relationship then sits with the provider rather than with you. Transferring it back is neither automatic nor instant, and it requires primary admin access to begin. If your provider is primary admin on your accounting file, you cannot transfer billing to yourself without their action. Ask for admin rights on day one and keep them, across payroll, bill pay, expense management, and the reporting layer as well as the general ledger. The arrangement is never the problem. The arrangement plus a silent contract is. Our guide to building an outsourced accounting system covers the access layer this clause governs.

Security belongs in the same clause. The FTC Safeguards Rule requires a covered business to select service providers capable of maintaining appropriate safeguards, to require those safeguards by contract, and to periodically assess them, under 16 CFR 314.4. If you’re covered, that’s your obligation and not your provider’s courtesy. Ask for a breach notification clock that runs to you faster than the regulatory clock runs to the FTC.

What a CPA must hand back, and what you negotiate

Under the AICPA’s Records Requests interpretation at ET sec. 1.400.200, the categories are not interchangeable. Client-provided records go back on request, including when fees are unpaid. Member-prepared records, the ones the firm was engaged to prepare, have to be made available. Working papers stay with the firm. The guidance’s own example is the sharp one. A CPA who entered data from your trial balance into their own software is not required to provide a copy of the data file unless they were engaged to do so.

Read that twice before assuming the ethics floor delivers your workpapers. On its own, it doesn’t. The contract closes the gap. Negotiate the handback list into the agreement:

• The accounting file in native format, not a PDF export.
• Trial balance and general ledger detail for every period serviced.
• Supporting schedules. Deferred revenue, prepaids, accruals, fixed assets, intercompany.
• Reconciliation workpapers with the underlying statements.
• Payroll registers, journal entry backup, and the chart of accounts mapping.
• Close procedures documented for your company specifically.
• A business-day delivery window, and who bears the cost.

Who finishes the close in progress

Serving notice on the 5th, mid-close, is a different event from serving notice on the 25th. Almost no draft addresses it. The clause should say whether the period in progress gets completed, at what fee, and by what date.

Silence produces the worst state available. A partially closed month with no owner, handed to a successor provider or a new controller who wasn’t there for any of it.

Three more items live in the same part of a good draft. A notice period on both sides, commonly 30 days for an ongoing monthly engagement. A transition cooperation obligation, including handover calls with whoever comes next. And a clear limit on what unpaid fees allow a provider to withhold, since the ethics interpretation already sets a floor there.

How Indinero Writes Scope Into the Engagement

A buyer with a bookkeeping vendor, a tax CPA, and a fractional CFO holds three agreements. Three scopes, three response clauses, three renewal dates, and three definitions of what a closed month means. When the lender package is late, each document points at the other two. When revenue recognition needs a judgment call, no scope clearly owns it.

The seams are where the disputes live.

Indinero gives you the full finance function, bookkeeping through CFO advisory, without managing three separate vendor contracts and timelines. That’s a scope-architecture claim before it’s a service claim. Scope gets written down once and covers all four layers, so there’s no seam for an argument to form in. Bookkeeping, GAAP accounting and the monthly close, FP&A reporting, and CFO advisory are described in the pillar on finance as a service, and they arrive from one CPA-led team on a monthly close cadence rather than a seasonal filing relationship.

The principle is the one this page has been arguing. The close calendar, the named deliverables, and the escalation path belong in the engagement document, not in a follow-up email nobody can find in month four. Same for the review cadence and for the onboarding sequence that settles your historicals, your system access, and your chart of accounts before the first close runs.

Two facts worth checking on any provider, including us. Indinero has maintained continuous operations since 2009, which matters when a question about a prior-year balance surfaces during diligence. And indinero is SOC 2 compliant (2026), which is the kind of artifact a buyer bound by 16 CFR 314.4(f) needs to put in a file.

If the only version of scope you can point to today lives in an email thread, that’s worth fixing before the next close. Start with our accounting services overview, then reach out for a free consultation. We’d love to learn about your business and where the seams currently sit.

Frequently asked questions

A few questions come up in almost every contract review, usually late and usually after the draft has been signed once already. Here are the ones worth settling first.

What is the difference between an engagement letter and a service level agreement?

An engagement letter defines scope and responsibilities, while a service level agreement adds measurable performance commitments, deadlines, and remedies when they slip. Most buyers sign only the letter, which tells you what the firm is responsible for but not how fast it has to move. Ask for both halves before signing. Indinero writes one scope covering bookkeeping, accounting, tax, and CFO advisory, so there’s no seam between agreements for an argument to form in.

How many business days should the monthly close take under the agreement?

Market close benchmarks cluster around a median near 6 days, with the top quartile finishing under 5 and the bottom quartile past 10. Those come from APQC data on internal finance teams closing their own books, so read them as a reference band, not a legal standard. Business day 5 to 8 is defensible for a multi-entity company with real revenue recognition. Indinero works to a monthly close cadence, and whatever number you agree on should appear in the document in business days.

Who owns the QuickBooks or NetSuite file if the relationship ends?

You own your books and data, but practical control depends on who holds the subscription and who is primary admin on the file. If your provider is primary admin, you can’t transfer billing to yourself without their action. AICPA guidance says a CPA who entered your data into their own software isn’t required to hand over the data file unless engaged to do so. Keep primary admin rights throughout and name the handback list in native formats.

Should an outsourced accounting agreement be month to month or annual?

Month to month favors you on flexibility, and an annual term usually buys pricing stability, but the notice period matters more than either. Journal of Accountancy guidance recommends annual letters signed by both parties, since evergreen terms can extend claim exposure. Either way, read the exit mechanics closely, including who completes the close in progress and whether you can exit without penalty if a fee change lands. Indinero’s engagements run as a year-round partnership on a monthly close cadence rather than a seasonal filing relationship.

What notice period is normal for ending an outsourced accounting engagement?

A 30-day notice period on both sides is common for an ongoing monthly accounting engagement, though what it triggers matters more. Look for whether the period in progress gets completed, at what fee, and by what date, because serving notice on the 5th mid-close is a different event from serving it on the 25th. A transition cooperation obligation and a named handback list belong in the same clause. Ask any provider, indinero included, to state all three in writing.

How do you hold a provider accountable when a close deadline slips?

Accountability comes from the agreement, specifically a deliverable-and-deadline table, a named escalation contact with a reply window, and a stated remedy for repeated misses. Remedies worth asking for include a service credit, rework at no charge, or a termination right for repeated breach. None of it works if your own input dates are missing, since the provider will point at what it never received. Indinero runs the close with a CPA-led team and puts the escalation path in the engagement itself.

Can we ask a provider to change its standard agreement before signing?

Yes, and you should, because the draft you receive is a starting position rather than a fixed form. CNA reported that roughly 75% of 2023 claims against CPA firms in the AICPA liability program came from tax services, and over half had no engagement letter for the underlying service. If licensed firms leave that many engagements unpapered, the paperwork is less fixed than buyers assume. Ask for the deadline numbers, the handback list, and the admin rights. Have counsel read the final version.