Outsourcing Tax Preparation to India: A CPA Firm Guide

Can you send a client's 1040 to a preparer in India without breaking federal law? Yes, and thousands of US firms do it every busy season. The rules are specific though, and most guides skip straight past them.

This guide is for firm partners and EAs who already know capacity is the problem. It covers the Section 7216 consent sequence, who signs the return, the security plan you owe your clients, and what each delivery model costs.

From our experience helping global companies build finance teams in India, cost is rarely the hard part. The compliance sequence is. So that comes first here.

What does outsourcing tax preparation to India involve?

Outsourcing tax preparation to India means an India-based preparer handles intake, data entry and the first draft of a return inside your tax software. Your firm reviews it, signs it and files it. The client relationship, the review judgment and the signature never leave your office.

The work travels as a file, not as a client. Your staff upload source documents to a portal, an India-based preparer builds the return, and it comes back to you with open items flagged.

Four things usually move offshore:

• Document intake: sorting and indexing W-2s, 1099s, K-1s and brokerage statements.
• Data entry: keying source documents into the tax software you already run.
• Return drafting: a first-pass 1040, 1065, 1120 or 1120S with open questions listed.
• Workpaper preparation: tie-outs, depreciation schedules and supporting workpapers.

That split is what makes the legal question answerable, so start there.

Is it legal to send US tax returns to India?

Yes. No federal law bars offshore tax preparation. Internal Revenue Code Section 7216 does require your client's written, signed consent before you disclose their tax return information to a preparer outside the United States, and it carries criminal penalties if you skip it.

Section 7216 covers two separate acts. Disclosure means making tax return information known to another party. Use means applying that information yourself for something other than preparing the return.

Offshoring is a disclosure question. Disclosure and use need separate consent documents, so do not fold both into one form.

The penalties sit in two statutes:

• Criminal, Section 7216: a misdemeanor carrying a fine of up to $1,000, up to one year in prison, or both, plus the costs of prosecution.
• Civil, Section 6713: $250 for each disclosure or use, capped at $10,000 per calendar year.
• Identity-theft-related disclosures: the civil figures rise to $1,000 each, with a $50,000 annual cap.

That $10,000 cap reads small, and it is. The real exposure is the criminal limb plus your state board, so treat consent as a gating item rather than paperwork.

So what does a valid consent actually have to say?

What must a Section 7216 consent form contain?

A valid consent is a separate signed document, in 12-point type or larger, that identifies the information being disclosed, names the recipient, states the purpose and carries the taxpayer's signature and date. It has to be signed before anything leaves your systems.

The mandatory wording comes from Revenue Procedure 2013-14, as modified by Revenue Procedure 2013-19. Any consent obtained on or after January 1, 2014 has to carry that language.

What has to be on the form?

Every offshore disclosure consent needs all of these:

• A separate document: its own signed page, not a clause buried in the engagement letter.
• Legible formatting: paper 8.5 by 11 inches or larger, set in 12-point type or bigger.
• The specific information: described precisely, never as a blanket grant over everything you hold.
• The purpose: why the information is going outside the United States.
• Signature and date: from the taxpayer, before a single file moves.
• The TIGTA statement: the notice telling clients where to report a preparer who misuses their data.

How long does a Section 7216 consent last?

If the form does not state a duration, the consent runs for one year from the date the taxpayer signed it. You can set a different period on the form itself.

Opt-out designs are prohibited. A form that asks the client to deselect the disclosures they do not want is invalid, so every permission has to be affirmative.

Can you decline to serve a client who refuses consent?

In the preparer-to-preparer context, yes. The revenue procedure expressly allows you to decline tax preparation services, or change the terms including the price, if the client will not consent.

That reverses the general rule, where conditioning service on consent voids it. It is the most misstated point in this whole area.

What about the client's Social Security number?

This is the rule most guides get backwards. You may not obtain consent to disclose a client's Social Security number to a preparer located outside the United States. The default is that you redact or mask it.

One exception exists. You may disclose the number only where both your firm and the offshore preparer maintain an adequate data protection safeguard, at the moment you obtain consent and again at the moment you disclose.

Both parties. Both moments. A vendor's security certification does not satisfy this on its own, because your own side of the safeguard has to exist too.

The mandatory wording differs depending on which route you take, so the masked and unmasked versions are not interchangeable. Decide the route first, then draft the form.

Consent covers the client's data. The next question is whose name goes on the return.

Who signs the return when an India-based preparer prepares it?

Your firm does, in the standard model. The signing preparer is the individual with primary responsibility for the overall substantive accuracy of the return. When your reviewer holds that responsibility, your reviewer signs it, and the India-based staff count as nonsigning preparers.

Note what the rule does not say. No regulation bars an offshore preparer from signing. The test is functional and turns on who carries responsibility for accuracy, not on geography.

In practice your firm reviews the return and keeps that responsibility, so your firm signs. Build the review step so that answer stays true.

Two PTIN points matter here:

• Who needs a PTIN: anyone who prepares, or assists in preparing, a federal return for compensation. That language reaches offshore staff doing substantive work.
• Foreign preparers without an SSN: they apply on Form 8946, the supplemental application for foreign persons, which needs original identity documents and takes several weeks.

Signing is the statutory layer. Your professional standards add another one on top.

What do the AICPA standards require when you outsource?

Two things. You have to tell the client, preferably in writing, that a third-party provider may be used before you hand over confidential information. And you remain responsible for the work under the Statements on Standards for Tax Services, whoever prepared it.

The revised Statements on Standards for Tax Services took effect on January 1, 2024. They are restructured into four standards covering general matters, compliance, tax advisory and representation.

Three obligations follow from them:

• Client notification: tell the client a third-party provider may be used, preferably in writing, before confidential information goes anywhere.
• Data protection: make reasonable efforts to safeguard taxpayer data, including data transmitted or stored electronically.
• Non-delegable responsibility: you can outsource the task. You cannot outsource the professional responsibility for the result.

The Confidential Client Information Rule adds a separate condition. Before disclosing to a third-party provider you need either a contractual confidentiality agreement or the client's specific consent.

That is stricter than Section 7216, which does not require separate consent for a US-based provider. Offshore work has to clear both tests.

Both layers assume your data is actually protected, which is its own body of rules.

What data security rules apply to offshore tax work?

The FTC Safeguards Rule covers tax preparation firms as financial institutions. It requires a written information security program, and it makes you oversee your service providers: select providers that can maintain safeguards, require them by contract, and reassess them periodically.

Among other elements, the program has to cover:

• A qualified individual: one named person accountable for running the program.
• A written risk assessment: the foreseeable threats to customer information, revisited as your operations change.
• Access controls and encryption: customer information encrypted in transit and at rest, with multi-factor authentication on system access.
• Service provider oversight: selection, contractual safeguards and periodic reassessment of anyone touching client data.
• A written incident response plan: roles, communications, remediation and a post-incident review.

Breach notification became a hard deadline in May 2024. If a notification event affects at least 500 consumers, you notify the FTC as soon as possible and no later than 30 days after discovery.

Do you need a written information security plan?

Yes. The Safeguards Rule requires a written security program. IRS Publication 5708 is the template the IRS publishes for building one, and Publication 4557 is the companion guide on safeguarding taxpayer data.

Neither publication is itself the legal requirement. The obligation comes from the Safeguards Rule, and the publications give you a workable format for meeting it.

Does India's DPDP Act apply to your vendor?

Partly, and not yet in full. India's Digital Personal Data Protection Act was enacted in 2023, and the DPDP Rules were notified in November 2025 with an eighteen-month phased compliance window.

As of September 2026 those obligations are still phasing in. Treat a vendor's DPDP readiness as a diligence signal, not as a compliance guarantee you can lean on.

Your own duties do not move either way. The Safeguards Rule and Section 7216 bind you regardless of what Indian law currently asks of your vendor.

With the rules settled, the practical question is what work you can actually move.

Which tax preparation work can you move to India?

Most preparation labor moves. Intake, data entry, return drafting, workpapers and extension processing all travel well. Review, signing, tax positions and client advisory stay with your firm, because responsibility for the accuracy of the return stays with your firm.

Once you know what moves, you pick how it moves.

What delivery models are available, and what does each cost?

Three routes. You can buy finished returns from an outsourcing firm, rent dedicated offshore staff from that firm by the seat, or employ your own India-based preparers. They differ on who controls the review chain, who holds the data, and how the cost scales.

Per-return or per-FTE?

Per-return suits spiky volume. You pay only for what you send, and you carry nothing in the off season.

Per-FTE suits predictable volume. The same people learn your workpaper conventions, and that is where the real savings show up.

The break-even is not a headcount rule. It is the point where your per-return spend across a season passes what a dedicated seat costs for the same months.

Why is the headline rate not the real cost?

Because the number that matters is not the draft price. It is the draft price plus the review time your side spends fixing the draft.

A low-cost draft that needs two extra reviewer hours at a US loaded rate can cost more than a better draft that needs none. Track rework hours per return from week one.

Price your first season on rework, not on the rate card. It is the only figure that tells you whether the arrangement is actually working.

What does your own India-based preparer cost?

If you employ the preparer directly through an Employer of Record, the cost is salary plus statutory contributions plus a per-employee fee. No vendor margin sits on top of it.

Below is the fully loaded annual employer cost at three salary levels, including health insurance and the platform fee, with FX as of September 15, 2026.

Run your own numbers before you commit. The employee cost calculator takes a salary and returns the same breakdown, including statutory contributions and net pay.

Statutory employer contributions in India are modest, roughly 5% to 8% of gross. The share falls as salary rises, because provident fund, the local equivalent of a 401(k) contribution, is capped against a fixed wage base.

How does that compare with US preparer pay?

The Bureau of Labor Statistics put the mean annual wage for US tax preparers at $60,930 in its May 2025 survey, with a median of $54,920. For accountants and auditors the mean was $94,750.

Those are wages, not loaded cost. Add benefits and payroll taxes and the gap against an India-based seat widens further, which is the reason this market exists at all.

Be careful with savings percentages. No authoritative source publishes what offshore tax preparation costs per return, so any percentage you have read came from someone selling it.

Capacity is the real driver anyway. The AICPA counted 55,152 accounting degrees awarded in 2023 to 2024, down 6.6% year over year, though undergraduate enrollment has since started climbing again.

Whichever route you pick, the setup sequence is the same.

How do you set this up before busy season?

Start at least one quarter out. Get consents drafted and signed during engagement letter season, run a paid pilot on returns you have already filed, and agree the review metrics before volume arrives. The compliance work is the long pole here, not the recruiting.

A workable sequence looks like this:

1. Write the consent: draft the Section 7216 disclosure consent with the offshore wording, and decide now whether Social Security numbers will be masked.
2. Update the engagement letter: add the third-party provider notification, and send it alongside the consent rather than inside it.
3. Run diligence: security certifications, background checks and written confirmation of the safeguards on the other side.
4. Fix your own security plan: the written program, the qualified individual, encryption and multi-factor authentication.
5. Pilot on filed returns: send twenty returns you have already completed, then compare the offshore draft against what you actually filed.
6. Measure rework: record reviewer hours per return during the pilot. That single number decides which model you pick.
7. Set the workflow: naming conventions, workpaper standards, an open-items format and one named point of contact.
8. Scale into the season: start with the simplest return types and widen the scope as the review data holds up.

Even a clean setup runs into the same handful of problems.

What goes wrong with offshore tax preparation?

Four things, repeatedly. Consent gaps, review load that swallows the savings, turnover on the vendor's bench that resets your training, and handoffs that add a day to every open question. All four are preventable, and all four are predictable.

The time-zone question cuts both ways. A return drafted overnight in India is on your desk by morning, which is the genuine upside, so build the handoff deliberately.

If you would rather the preparers were your own employees than a vendor's bench, that changes who you work with.

How does Wisemonk help you build a tax preparation team in India?

Wisemonk is an India-native Employer of Record that helps global companies hire, pay and manage talent in India without setting up a local entity.

More than 300 global companies run their India teams with us, covering over 2,000 employees and $20M+ in annual payroll processed. We hold a 4.8/5 rating on G2, and EOR pricing starts at $99 per employee per month.

For a firm building tax capacity in India, that usually means:

• Employer of Record: we employ your preparers in India on your behalf, so the review chain stays inside your firm.
• Contractor of Record: for seasonal specialists you want engaged compliantly rather than hired outright.
• Recruitment: we source and screen India-based preparers and reviewers who have worked on US returns.
• Background verification: pre-hire screening before anyone gets near client data.
• Managed payroll: if you already hold an Indian entity and just need the payroll run correctly.
• Entity setup: when the team outgrows the arrangement and you want your own company in India, available on a custom quote.

One thing to be clear about: we support the employment and hiring side of these routes in India. We do not prepare tax returns, and we are not an outsourcing firm competing for your return volume.

We are a leading EOR in India, now expanding our services to the US and UK.

We came across Wisemonk and met with the CEO and staff to explain our situation, and were very impressed with their customer-focused approach to their business. Wisemonk onboarded all of my employees in one or two days. They paid my employees' salaries on the day after my payment cleared. Needless to say, my employees and I were very satisfied with their service then and remain so over a year later. We are an American company, so I was very happy to see that they have a US bank account where I can make ACH payments to minimize bank charges. All salary payments are timely. They worked directly with my employees to enroll them in the health care program and explain any coverage-related issues. The best part is that we get to work with a dedicated person assigned to our company. I would highly recommend Wisemonk and think of them as our Indian HR department.
- Frank Menes, Founder & CEO at Senem RFP