Ask anything. Risk nothing.
ChatCPA™ is the AI assistant for CPAs that treats client data like client data. It answers with the professional literature auditors actually work under, never trains on your data, forgets every model call by design—and travels with you on iPhone, iPad, Apple Watch, and Apple TV.
Standards question, sourced answer
Client added 14 leases mid-year. What do I need for ASC 842 testing?
Test the population for completeness first, then for each selection: lease classification, discount rate support, commencement date, and the ROU asset and liability recompute. For the mid-year additions, focus on…
Cites ASC 842-20 · AU-C 540One assistant. Every screen a CPA actually uses.
Your clients' data was never meant for a public chatbot.
Audit files hold bank statements, payroll records, tax details, contracts, and evidence clients never intended to paste into a consumer AI tool. ChatCPA™ is built so the answer comes to the CPA—not the other way around.
Zero-retention enterprise AI
Model calls run through AuditFile®'s own Microsoft Azure AI Foundry and Amazon Bedrock environments—processed in memory and discarded by the provider, and never tied back to an individual user's identity.
Encrypted in transit and at rest
Data in transit is protected with TLS 1.3, and data at rest is protected with AES-256 encryption—the same controls that protect the audit file itself.
Isolated by firm and by user
Every conversation is scoped to the signed-in user and their firm. Cross-firm access returns nothing—not even a hint that the conversation exists.
Permissioned like the platform
Firm-level AI enablement, engagement permissions, and role-based access decide who can ask what—behind MFA with TOTP or security keys, SAML SSO, Active Directory and LDAP, and firm IP allowlists.
Delete means delete
Users can delete uploaded files at any time, and deleting a conversation permanently removes it—prompts, responses, and uploaded files—from the product.
Your boundary, your model
By default, data is hosted in the U.S. on AWS and Azure, with regional hosting available. Firms that want maximum control can bring their own provider credentials or run self-hosted inference—Ollama, llama.cpp, vLLM, LM Studio, or OpenRouter.
The cloud AI services behind ChatCPA™ are independently assessed under AI-specific assurance programs, including ISO/IEC 42001:2023 for Azure AI Foundry Models and Amazon Bedrock. Read how AuditFile® AI handles client data
ChatCPA™ goes where the engagement goes.
Native apps for iPhone, iPad, Apple Watch, and Apple TV—behind the same login, MFA, and security controls as the AuditFile® platform.
iPhone
The full ChatCPA™ in your pocket. Ask the technical question, attach the support, read the citations, and hand the answer to the engagement—without waiting for a desk.
iPad
The conference-table canvas. Review an answer side by side with the workpaper it supports—on the count floor, in the walkthrough, or across the table from the client.
Apple Watch
Ask by voice, read the answer at a glance. Dictate a standards question from your wrist; the Watch never stores credentials—it relays through your iPhone.
Apple TV
The firm on the big screen. The same platform and sign-in power the Firm Live wallboard in the office—presence and engagement pulse, visible from across the room.
The device holds a revocable key—not the data.
ChatCPA™ on Apple devices takes the same approach as the AuditFile® app: the work stays in the platform, and every device authenticates with standards-based, revocable credentials.
Your login, unchanged
Sign-in opens AuditFile®'s own web login in a secure sheet—so TOTP and security-key MFA, SAML SSO, and firm IP allowlists apply exactly as they do on the web.
OAuth 2.0 with PKCE
Short-lived access tokens, per-device grants your firm can revoke at any time, and granular scopes—never a password stored on the device.
Keys stay on the device
Tokens live in the iOS Keychain, this-device-only, with no iCloud sync—and Face ID protects the app on hardware designed for it.
Re-checked on every request
Each API call is authorized against firm settings and engagement permissions. The app can't see more than the web can—and the Watch can't see more than the phone.
Answers a reviewer can check.
ChatCPA™ is grounded in authoritative professional literature—the standards CPAs actually work under—and answers include citations so a reviewer can verify the support, challenge the conclusion, and decide what belongs in the file.
U.S. GAAP (the FASB Accounting Standards Codification), IFRS, and the governmental frameworks set by GASB and FASAB.
PCAOB Auditing Standards for issuer audits, the AICPA Statements on Auditing Standards (AU-C), and the IAASB's International Standards on Auditing.
Generally Accepted Government Auditing Standards (the GAO Yellow Book) and the 2 CFR 200 Uniform Guidance.
The AICPA SSARS (AR-C) and the Statements on Standards for Attestation Engagements (SSAE / AT-C).
The AICPA Code of Professional Conduct.
Attach engagement workpapers and client request files so answers ground themselves in the file—not in a generic template.
Put a safe CPA assistant on every screen you own.
See ChatCPA™ answer a real standards question—with citations, inside your firm's security boundary, on the Apple devices already in your pocket and your office.