Key takeaways
- Tax data holds vendor, employee and pricing information, so treat it like financial records, not a test file.
- Know where the data is stored, who can see it and whether it trains anyone else's model.
- Insist on an audit trail from every number back to its source document.
AI tools can make tax work faster. They also ask for a lot of data: invoices, returns, ledgers, sometimes bank statements. Before any of that leaves your systems, a finance leader should be able to answer six plain questions.
- Where is the data stored?
Know the country and the provider. Many companies prefer storage in India.
- Who can see it?
Access should be limited to named people, with logins you can review.
- Is it used to train models?
Your data should not improve a tool for other customers without your written consent.
- How long is it kept?
Agree a retention period and a way to confirm deletion.
- Can every number be traced?
Each figure in a report should link to the document behind it.
- Who signs off?
A person, not a system, approves anything that is filed.
Why the audit trail matters most
A tax position has to survive scrutiny, sometimes years later. If a system matched an invoice to a return, you need to show which invoice, which return line and who approved the claim. Without that trail, a faster process creates a weaker file.
A simple governance checklist
| Area | Minimum standard |
|---|---|
| Storage | Known location; encrypted at rest and in transit |
| Access | Named users; reviewed regularly |
| Model training | No use of your data without consent |
| Retention | Agreed period; deletion on request |
| Evidence | Every figure traceable to a source document |
| Approval | Human sign-off before filing |
Source: TraCarta view. Not legal advice.
The personal data angle
Travel invoices and vendor records often contain names, phone numbers and email addresses. India's Digital Personal Data Protection Act, 2023 sets duties for anyone processing personal data. Ask how a provider handles it, and share only the fields the work needs.
Read our approach to responsible AI, or ask us how we handle client data.
Managing Partner of TraCarta. He started the firm in 2018 to recover airline GST credit for corporate clients and leads its three recovery practices.
View profileGeneral information only, not tax advice. Check the current law and your facts before acting.
