Hours: Mon - Fri: 09.00 AM - 4.00 PM
Certified AIGAS™ Service Provider & Auditor

AI Governance for
Accounting Firms

The AI Governance Assurance Standard (AIGAS™) — an independent, practical framework helping UK accounting firms adopt Artificial Intelligence responsibly. PPCS is a Certified AIGAS Service Provider and Auditor.

2
Assurance Levels
6
Governance Domains
12
Month Assurance
The Challenge

AI Is Already Inside Your Practice

Artificial Intelligence is rapidly becoming embedded within modern accounting practices. Tools such as ChatGPT, Microsoft Copilot and AI features integrated into accounting platforms are already being used across firms of all sizes.

However, as AI adoption increases, so do governance responsibilities. Firms must begin asking the right questions — before problems arise.

  • Draft communications
  • Summarise documents
  • Assist with research
  • Analyse information
  • Improve productivity across internal workflows
Key Questions

Is Your Firm Asking the Right Questions?

Accounting firms must consider governance before AI risks become liabilities.

Can confidential client information be entered into AI tools?
How should AI outputs be verified before advice is given?
What risks does AI introduce to professional liability?
What governance controls should be documented?

The AI Governance Assurance Standard (AIGAS™) was created to give accounting firms a practical framework for implementing responsible AI governance. About AIGAS

The Framework

What Is the AIGAS Framework?

The AI Governance Assurance Standard (AIGAS™) is an independent, sector-specific governance standard designed specifically for UK accounting firms adopting Artificial Intelligence tools.

🔍

Evidence-Based Review

Assurance is evidence-based, confirming appropriate safeguards are in place — unsupported self-declaration alone is not sufficient.

⚖️

Responsible

Demonstrates that your use of AI is responsible, risk-aware and professionally accountable.

🎯

Sector Specific

AIGAS focuses specifically on governance challenges faced by accountants — not general IT or cybersecurity.

🛡️

Properly Controlled

Confirms that governance controls are documented and actively implemented within the firm.

How AIGAS works for firms  ·  Download the Standard

Risk Awareness

Why AI Governance Matters for Accountants

Artificial Intelligence can significantly improve efficiency within accounting firms, but it also introduces new forms of risk. Understanding these risks is the first step toward managing them.

⚠️

Incorrect or Hallucinated Outputs

Generative AI systems can produce responses that appear credible but contain factual errors. Without appropriate review processes, incorrect outputs could influence professional advice.

🔒

Confidentiality and Data Protection Risks

Entering identifiable client data into external AI tools could create confidentiality risks or potential data protection concerns. Accounting firms must understand how AI providers process and store submitted information.

📋

Professional Liability

Professional indemnity insurers increasingly expect firms to demonstrate governance around emerging technologies. Failure to manage AI risks appropriately may expose firms to liability.

🏛️

Regulatory Scrutiny

Regulators and professional bodies are increasingly examining how firms adopt AI technologies and manage associated risks. Documented governance frameworks help demonstrate responsible adoption.

Read more: AI risks in an accounting practice

The Framework

The AIGAS Governance Framework

AIGAS is structured around six governance domains. At Bronze they establish a foundation; at Silver they become structured, documented controls. These domains reflect recognised governance principles while remaining practical for accounting firms.

1

AI Strategy and Purpose

Firms should clearly understand how and why AI tools are used within the practice. This includes maintaining a register of AI tools and documenting their purpose.

  • AI tool register
  • Documented purpose for each tool
  • Formal AI strategy and defined use cases (Silver)
  • Acceptable use guidelines
Bronze: Understanding your AI
2

Risk and Compliance

AI introduces operational and regulatory risks that should be identified and managed, including incorrect outputs, automation over-reliance, confidentiality exposure and regulatory implications.

  • Structured risk assessments
  • AI risk registers
  • Regulatory risk identification
Bronze: Understanding the risks
3

Data Protection and Confidentiality

Accounting firms handle highly sensitive client information. The framework requires safeguards governing how client data interacts with AI systems.

  • Restrictions on entering confidential data into public AI tools
  • Review of AI provider data handling practices
  • Data protection impact screening where appropriate
Bronze: Protecting confidential information
4

Governance and Accountability

Responsible technology adoption requires clear oversight. Firms implementing the framework designate an individual responsible for AI governance. At Silver, this becomes a designated AI Governance Lead with documented roles and periodic governance oversight.

Bronze: Responsibility and acceptable use
5

Operational Controls

Artificial Intelligence should assist professional work rather than replace professional judgement. AI-generated outputs should be reviewed by qualified individuals before being relied upon in client advice.

  • Human review before client advice
  • Procedures for correcting AI errors
  • Staff awareness training
Bronze: Human judgement and staff awareness
6

Monitoring and Continuous Improvement

AI technologies evolve rapidly. Firms should periodically review AI usage and governance controls to ensure they remain appropriate. AIGAS assurance is revalidated annually.

Bronze: Keeping governance current
Governance Pathway

The AIGAS Pathway

The framework provides a progressive governance pathway — from a free AI Register, through foundational and assured controls, towards internationally recognised certification.

Bronze and Silver are the two assurance levels of the AIGAS™ Standard. ISO/IEC 42001 sits beyond AIGAS and is certified by accredited certification bodies. AIGAS™ may serve as a practical preparatory step toward ISO-level governance where appropriate. See the full pathway

LevelFrameworkPurpose
Start Free AI Register A living inventory of every AI tool in use across the firm
🥉 Bronze AIGAS Bronze — Foundation Foundational AI governance safeguards
🥈 Silver AIGAS Silver — Assured Structured governance and risk management, independently assessed
Beyond ISO/IEC 42001 International AI management system certification
AI

AI Register

Free & self-serve
Start with visibility

→
🥉

AIGAS Bronze

Foundation
Foundational controls

→
🥈

AIGAS Silver

Assured
Independently assessed

→
42

ISO/IEC 42001

International Standard
Accredited certification

Start your free AI Register: airegister.ppcs.uk

🥉
AIGAS Bronze

Foundation

Particularly suited to:

  • Sole practitioners
  • Bookkeeping and payroll practices
  • Small accounting firms
  • Firms experimenting with AI tools such as ChatGPT or Copilot
  • Practices seeking to document responsible AI usage

Typical Governance Controls

  • Maintaining an AI tool register
  • Implementing an AI acceptable use policy
  • Ensuring human review of AI outputs before client advice
  • Documenting AI risk awareness
  • Assigning a responsible individual for AI oversight

Bronze assurance demonstrates that a firm has implemented basic but meaningful safeguards around AI usage — 15 controls across the six domains.

AIGAS Bronze on aigas.org.uk

🥈
AIGAS Silver

Assured

Designed for:

  • Firms actively integrating AI into internal workflows
  • Practices seeking structured governance frameworks
  • Firms preparing a pathway toward ISO/IEC 42001

Additional Governance Controls

  • AI strategy and defined use cases
  • Formal AI risk assessments
  • A documented AI risk register
  • A designated AI Governance Lead with defined roles and responsibilities
  • AI incident response procedures
  • Governance review processes
  • Documented operational control procedures
  • Supplier review and data protection impact screening where applicable

Silver assurance demonstrates that AI governance is actively managed within the organisation, and is independently assessed.

AIGAS Silver on aigas.org.uk

Governance Pathway Toward ISO 42001: For firms requiring internationally recognised certification, the next step beyond AIGAS™ Silver is ISO/IEC 42001 Artificial Intelligence Management Systems. PPCS provides readiness guidance for firms pursuing ISO implementation. Certification itself is conducted by accredited certification bodies.

Side-by-Side

Comparison Overview

Feature🥉 Bronze🥈 Silver
AI Tool Register✔✔
AI Acceptable Use Policy✔✔
Human Review Controls✔✔
Risk Awareness Documentation✔✔
Staff Awareness Training✔✔
AI Strategy & Defined Use Cases—✔
AI Risk Assessment—✔
AI Risk Register—✔
Designated AI Governance Lead—✔
Incident Response Procedure—✔
Governance Review ProcessBasicStructured
Independent Assessment—✔
Annual Revalidation✔✔
Preparation for ISO 42001LimitedStronger foundation
How It Works

The AIGAS Assurance Process

Assurance is granted following a structured evidence review conducted by a Certified AIGAS Service Provider and Auditor such as PPCS. Assurance remains valid for 12 months, after which it is revalidated.

1

Initial Review

Initial review of the firm's AI usage and governance documentation.

2

Governance Assessment

Governance assessment against AIGAS framework requirements.

3

Evidence Review

Evidence review to confirm implementation of required controls.

4

Assurance Decision

Assurance decision where governance controls are confirmed and AIGAS assurance is issued.

Try the AIGAS self-assessment

Transparency

What AIGAS Is — and Is Not

AIGAS provides independent governance assurance. We believe in complete transparency about what the standard covers and where its boundaries lie.

✔ AIGAS Does

  • Confirm the presence of documented AI governance controls
  • Demonstrate responsible AI adoption
  • Require annual revalidation

✘ AIGAS Does Not

  • Constitute ISO certification
  • Claim to be UKAS-accredited certification
  • Imply approval by the ICO, ICAEW, ACCA or another regulator
  • Replace regulatory compliance obligations

ISO/IEC 42001 certification must be conducted through accredited certification bodies. PPCS provides readiness and preparatory guidance for firms pursuing this pathway.

FAQ

Frequently Asked Questions

Common questions from accounting firms exploring AI governance for the first time.

What is AI governance?

AI governance refers to the policies, procedures and oversight mechanisms used to ensure artificial intelligence systems are used responsibly and safely within an organisation.

Do accounting firms need AI governance?

Firms using AI tools should implement governance controls to manage risks relating to confidentiality, incorrect outputs and professional liability.

Is AIGAS the same as ISO 42001?

No. AIGAS is an independent, sector-specific AI governance assurance standard designed for accounting firms. ISO/IEC 42001 is an international standard for AI management systems. AIGAS is designed to be accessible for smaller firms and can serve as a preparatory step toward ISO implementation.

Can AIGAS help prepare for ISO 42001?

Yes. The framework reflects similar governance principles and can act as a preparatory step toward ISO implementation. PPCS also provides specific ISO 42001 readiness guidance.

How long does AIGAS assurance last?

Assurance is valid for 12 months, after which it is revalidated to confirm governance controls remain current and appropriate.

What is PPCS's role in AIGAS?

PPCS is a Certified AIGAS Service Provider and Auditor, listed on the official AIGAS service provider directory. We help accounting firms prepare for, implement and achieve AIGAS assurance.

More answers: AIGAS FAQs for firms

Looking Forward

Responsible AI Adoption for Accounting Firms

Artificial Intelligence will continue to transform the accounting profession. Firms that adopt AI responsibly will benefit from improved efficiency, enhanced research capability and stronger productivity across teams.

However, governance must evolve alongside technology. The AI Governance Assurance Standard (AIGAS™) provides accounting firms with a structured and proportionate way to implement responsible AI governance — and as a Certified AIGAS Service Provider and Auditor, PPCS helps firms put it into practice.

✅Improved efficiency
✅Enhanced research capability
✅Stronger productivity across teams
Get Started

Learn More About AIGAS™

If your firm is currently exploring AI tools or already using them internally, implementing governance controls early can significantly reduce risk. To learn more about AIGAS™ Bronze or Silver assurance, contact PPCS — a Certified AIGAS Service Provider and Auditor.

📞
✉️