PPCS is a UK consultancy that works only with the accounting profession. We help practices, bookkeepers, payroll bureaux and audit firms govern their use of AI, and keep client data secure.
We are a Certified AIGAS™ Service Provider and Auditor. That means we can help your firm prepare for the AI Governance Assurance Standard and independently assess you against it.
Accredited to support and assess UK accounting firms against the AI Governance Assurance Standard.
Our story is simple. PPCS is a consulting company that specialises in the accounting industry. We help accountants with two things: AI governance and cyber security.
Our founder, Sal Nasser, spent more than 25 years in accounting software and technology before starting PPCS. So we know how practices work: tight deadlines, busy season, small teams, and client data that has to stay confidential. We build governance around that, not around a Big-4 audit team.
AIGAS, the AI Governance Assurance Standard, is the first AI governance standard written for UK accounting firms. It gives firms a proportionate way to show clients, insurers and regulators how AI is used in the practice, and that it is under control.
Most firms already use AI, often without realising it. It is built into Xero, QuickBooks, Dext and Copilot, and staff are trying ChatGPT. AIGAS starts with seeing what is in use, then builds the controls around it.
As a Certified Service Provider, PPCS helps firms meet the standard. As a Certified Auditor, we can also assess them against it.
Gap analysis, AI Register set-up, policies, controls and evidence, so your firm is ready for the level it is aiming for.
An independent assessment of your firm's AI governance against the AIGAS standard, with clear findings and next steps.
A live list of every AI tool in use across the firm. The free starting point for visibility.
PPCS: sets up and reviews your register, so nothing is missed.
A structured foundation: 15 controls across 6 domains, self-assessed.
PPCS: implements the controls and gets your evidence ready.
Independent validation of your firm's AI governance, for firms that need to defend it.
PPCS: prepares you, and carries out the assessment as a certified auditor.
The international AI management system standard. AIGAS prepares you for it, much like Cyber Essentials leads to ISO 27001.
PPCS: plans the move from AIGAS to a full AI management system.
AI governance sits on top of good security. We still help accounting firms with the certifications that clients and insurers ask for, with real remediation work rather than box-ticking.
The UK government-backed baseline: secure configuration, access control, patching, malware protection and firewalls, all made ready for certification.
Cyber Essentials →The same controls, independently tested. We prepare your devices and systems so the technical audit goes smoothly the first time.
Cyber Essentials Plus →A full information security management system: risk treatment, controls, documentation and audit-readiness, sized to a professional practice.
ISO 27001 readiness →Our team combines accounting industry experience, AI governance, legal research and hands-on cyber security work.
Sal has more than 25 years of experience in the accounting industry, working in accounting software and technology. His background covers practice software, cloud accounting platforms and the enterprise systems behind them.
He has seen how firms actually run, where client data lives, and what happens when new technology arrives faster than the controls around it. He now leads PPCS's AI governance work with UK accounting firms.
Zeeshan holds a Master's in Computer and Information Security and the (ISC)² Certified in Cybersecurity (CC) certification, with hands-on experience across enterprise support, cloud technologies and information security.
He supports our AIGAS™ readiness and assessment work, alongside Cyber Essentials projects for UK accounting firms.
Tam is an experienced legal professional who has worked across several sectors. She is skilled at drafting and analysing complex documents, detailed research and compliance-focused work.
With a BA in Law and Marketing, a Postgraduate Diploma in Law and the LPC, she has a strong grounding in UK law, and knows wider global requirements for private clients from her work supporting solicitors.
Our ISO 27001 auditor helps firms understand what good information security management looks like in practice, and how to evidence it properly.
This role covers ISMS structure, controls, risk treatment, documentation and audit-readiness, bringing independent assurance discipline to our work.
Our Cyber Essentials consultants help firms get the basics right: secure configuration, access control, endpoint hygiene, policy alignment, and the practical steps needed to be ready.
The goal is not just passing a questionnaire. It is putting sensible controls in place, so certification reflects a real improvement.
Our wider Cyber Essentials team supports firms through rollout, evidence gathering, policy application, user guidance, and ongoing improvement as their systems change.
That means support that is responsive, sensibly priced, and fits how accounting firms actually work day to day.
Governance only works if people know how to follow it. PPCS Learning is our online training platform: practical, role-based courses built for UK accounting practices, from the whole team through to partners.
Courses use real accounting workflows, not generic AI theory, and are short enough to fit around fee-earning work. They also support the training and awareness side of your AIGAS™ controls.
Access is by invitation. Your firm (or PPCS) registers your team. Email [email protected] to get started.
We don't make AI governance or cyber security more complicated than they need to be. We help firms move forward clearly, strengthen what matters, and put sensible structure around risk.
More than 25 years in accounting software and technology. You work with people who understand practices, not general consultants learning your sector as they go.
As a Certified AIGAS™ Service Provider and Auditor, our work is tied to a recognised standard, so your evidence holds up with clients, insurers and regulators.
Controls sized to your firm, from sole practitioner to multi-partner practice. Enough documentation for your stage, and no more.
Whether you are starting an AI Register, working towards AIGAS™ Bronze or Silver, or need Cyber Essentials or ISO 27001, we'll give you a clear, honest view of the right next step.