Your biggest AI governance problem may be the tools leadership never approved.
In Thomson Reuters’ 2026 tax and accounting research, 35% of professionals said they were using AI tools their firm had not authorized. That creates a basic control failure: leadership cannot govern tools it cannot see.
Shadow AI is not just an IT problem.
It can affect client confidentiality, professional judgment, documentation, vendor exposure, and the firm’s ability to explain how work was produced. A blanket ban rarely solves it; staff adopt tools because they are trying to get work done faster.
A practical 5-step response
1. Inventory without punishment
Ask what AI tools staff are actually using, for what work, with what data, and why. The first objective is visibility.
2. Classify by exposure
Separate low-risk productivity uses from work involving client data, tax advice, audit evidence, financial decisions, or external communications.
3. Approve a small tool set
Give staff sanctioned options with clear usage boundaries so governance does not become a productivity tax.
4. Require human review
Define which outputs can assist and which require professional verification before they become client work or firm decisions.
5. Maintain a living record
Track tools, owners, approved use cases, vendor evidence, risks, review expectations, and unresolved issues in one place.
The management question to ask every month
“Can we explain which AI tools touched our work, what they were allowed to do, who reviewed the output, and why leadership still considers that use acceptable?”
If the answer depends on memory, Slack messages, or a one-time policy PDF, the governance layer is incomplete.
Track the AI program instead of merely announcing one.
The Ops Control HQ AI Governance Control Pack is a $49 one-time Excel workbook for AI inventory, use-case ROI gates, vendor review, risk tracking, executive oversight, and governance notes.
Get the AI Governance Control Pack — $49Read the accounting-firm governance guideSource: Thomson Reuters Institute, Future of Professionals 2026 Tax and Accounting Report: https://www.thomsonreuters.com/en/institute/future-of-professionals-2026/report-tax-and-accounting
This page is operational guidance, not legal, tax, cybersecurity, or professional-practice advice.