Security built for firms that hold client trust
Answer clients from a signed record of file and sign-in activity.
Examiners
| Who asks | What they ask for | ARRTECH record |
|---|---|---|
| FTC | A log of authorized user activity under 314.4(c)(8). | Directory, VPN, Microsoft 365 and file server logs, with a risk score per user. → |
| IRS | Audit trails, reviewed at least every 90 days. | Scheduled reports by email, so each review has a date. → |
| Regulated clients | Notice within 72 hours of a breach. | A case timeline and a signed export. → |
| PCAOB, from Dec 15, 2026 | Evidence on technological resources. | A signed record of system activity. → |
| Your clients | Which of their documents left. | File share and DLP file activity records. → |
Client notice
Tell clients exactly which files were taken
When client data is taken, clients ask which of their files left. ARRTECH links file access to sign-ins in a signed record, so you can answer file by file.
FTC Safeguards Rule
Meet the FTC Safeguards Rule for tax firms
The FTC Safeguards Rule treats tax preparers as financial institutions and requires them to monitor and log user activity (16 CFR 314.4(c)(8)). ARRTECH logs directory, VPN, Microsoft 365 and file server activity, with a risk score per user.
IRS Publication 5708
Review logs the way the IRS expects
The IRS expects tax professionals to keep a written security plan that includes reviewing audit trails, as its Publications 4557 and 5708 describe. ARRTECH sends scheduled reports by email, so each review has a date.
26 USC 7216
Stop tax data leaving by email or AI
26 USC 7216 makes knowing or reckless disclosure of tax return information a crime. ARRTECH DLP checks email, uploads and prompts to AI tools before tax data leaves.
By rule
FTC
A log of authorized user activity under 314.4(c)(8). ARRTECH: Directory, VPN, Microsoft 365 and file server logs, with a risk score per user.
IRS
Audit trails, reviewed at least every 90 days. ARRTECH: Scheduled reports by email, so each review has a date.
PCAOB, from Dec 15, 2026
Evidence on technological resources. ARRTECH: A signed record of system activity.
Your clients
Which of their documents left. ARRTECH: File share and DLP file activity records.
Questions
Can tax data leave by email or AI tools?
ARRTECH DLP checks email before it is sent, inspects web uploads and prompts to AI tools, and controls USB drives and printing.
Would we spot a fake client email?
The IRS Security Summit warned in 2026 of phishing from people posing as new clients. ARRTECH SIEM checks links and domains against threat intelligence, and Cyberdroid AI Detection flags a user or computer acting unlike its own history.
Who approves an action?
A person. ARRTECH SOAR emails the approver up to five options and waits. The history shows who chose what and when.
What stays with you?
Writing your security plan, securing your tax software, and anything inside a vendor’s platform. Cyberdroid AI Detection reports about once an hour and never blocks.
Sources
Guide
Does the FTC Safeguards Rule apply to accountants?
Yes. Tax preparers are financial institutions under the rule and must monitor and log user activity.
What is IRS Publication 4557?
IRS guidance for tax professionals on safeguarding taxpayer data, including audit trails and a written security plan.
What is 26 USC 7216?
A federal law that makes knowing or reckless disclosure of tax return information a crime.
Next steps
Spot unusual behavior early. Learns what normal looks like for every user, computer and application from your SIEM, and flags what changes.
Get the evidence fast. Investigates each finding with read-only queries and hands a person the evidence. It never approves its own work.
Keep sensitive data in. Checks email, uploads, USB drives and AI prompts before sensitive data leaves the computer.
Respond with a person in charge. Runs incident response steps through your existing tools, with a person approving each decision.
See every system. Collects and signs logs from more than 500 source types and links related events, with a verification tool for every export.
