How do I invite my tax advisor?

When to use this article

You're working with an accountant, Steuerberater, comptable, revisor, or any external person who handles your bookkeeping or tax returns and you want them to see your data in TaxItEasy. The right path is the tax-advisor invite, not a generic team-member account, not a shared password, and not a year-end ZIP.

If you're the tax advisor yourself and a client just sent you an invite, the link in their email signs you in — see the advisor articles for the receiving-end view.

If you're working with someone inside your company (a bookkeeper on your payroll, a colleague), use the regular team-member flow instead — Settings → Team → Invite. Team members can do more than tax advisors (upload, edit, approve) and consume seats on your plan; tax advisors are external and don't.

The walk-through

Step 1 — open the tax-advisor page

In the web app, go to Settings → Tax Advisor. The page lists any tax advisors already connected to your company, plus an Invite tax advisor button.

Step 2 — send the invite

Click Invite tax advisor and fill in:

• Email address — the address your advisor uses for their TaxItEasy account (or will use to create one). If they're already a TaxItEasy user with this email, the invite goes to their existing account; no second password.
• Short message (optional) — useful for context, e.g. "Please focus on Q4 2025" or "VAT return Q1 ready for review". This appears in their invite email.

Click Send invite.

Step 3 — what your advisor sees

Your advisor gets an email from [email protected] with a one-time link. Clicking it does one of three things:

• They already have a TaxItEasy account with that email — they're signed in (or asked to sign in) and your company is added to their Clients dashboard. No new password, no extra signup.
• They don't have an account yet — they go through a short sign-up flow (email + password OR Sign in with Google, plus 2FA setup which is required for tax-advisor accounts). Then your company appears in their Clients dashboard.
• They decline — they can click "Decline invite" on the consent screen, and you're notified. No data is shared in this case.

The advisor confirmation is two-step: they create their account if needed, then they explicitly confirm the connection to your company. Both steps must complete before they can see anything.

Step 4 — confirm + verify

Back in your Settings → Tax Advisor page, the advisor's status moves from Invited to Active once they confirm. You also get an in-app notification.

You can verify access yourself: ask the advisor to open one of your invoices and read out the invoice number. If they see it and can read the fields, the connection works. (They cannot fabricate this — what they're reading is in fact your data.)

Step 5 — revoke when you're done

From the same Settings → Tax Advisor page, click Revoke next to the advisor. The connection severs immediately — their Clients dashboard loses your company, their active session is invalidated for your data, and any in-progress flags or comments stop being editable.

Revoking is non-destructive on your side. Nothing is deleted; only their access is removed. If you re-invite later, they'd see the same client connection restored to its current state.

What your tax advisor can do (and cannot)

The tax-advisor role is bounded read-access, enforced at the database query layer — not a UI restriction. They literally cannot retrieve data outside the bounds, even if they craft an API call manually.

What they can see:

• All invoices, receipts, and statements in your company
• All extracted fields (vendor, amount, VAT, dates, line items, currency)
• Bank-transaction summaries and matched-transaction history
• Trading partners (vendor and customer registry, with vendor-correction history)
• Audit log entries scoped to invoice/document activity in your company

What they can do (limited write):

• Flag an invoice for your attention with a comment (the only write action)
• Mark an invoice as Reviewed after they've looked at it
• Run their own per-period export of your data (JSON, same format as your own export)

What they cannot see:

• Your inbox, your u-…@in.taxiteasy.org forwarding address, the email-integration activity log
• Your billing plan, payment methods, past payments, or Stripe receipts
• Your team list, team-member roles, or active sessions
• Other companies in your account, if you have more than one
• Your 2FA recovery codes or any account-security settings

What they cannot do:

• Upload new documents on your behalf
• Change any extracted field (vendor name, amount, VAT, date, category — all read-only to them)
• Modify your subscription
• Invite other people to your company
• Delete anything (documents, invoices, your account)

See read-only scope — what I can and cannot see for the advisor-side view of these bounds.

What changes when your advisor flags something

The flag-and-fix loop is the main collaboration pattern.

1. Advisor flags — your advisor opens an invoice, notices the VAT rate looks wrong, and flags it with a comment ("Should be 7% not 19% for books").
2. You get notified — in-app notification + email with a deep link to the flagged invoice.
3. You fix it — click the link, open the invoice, correct the field. Save.
4. Auto-return — the moment you save, the invoice automatically returns to the advisor's review queue. They don't have to chase you; you don't have to re-notify.
5. Advisor approves — they confirm the fix and mark it reviewed.

You can also resolve a flag without fixing the field (if you disagree with the advisor's read). The conversation thread on the invoice keeps history of who flagged what and what the resolution was — useful months later when reconstructing a decision.

Working with multiple advisors

You can invite more than one tax advisor to the same company. Use cases:

• Tax advisor + bookkeeper at the same firm — both invited separately, both see the same data, audit trail attributes flags to each by name.
• Outgoing + incoming advisor during a switch — invite the new one, keep the outgoing one active for a few weeks, revoke the outgoing one when you're sure the new one has the full picture.

There's no fixed cap on tax-advisor invites per company today; if you have an unusually large advisory team, write to [email protected] so we can verify it's working at scale.

Working with one advisor across multiple clients

If you're the advisor's first TaxItEasy client, they go through signup. If they already have other clients on TaxItEasy, your company is added to their existing Clients dashboard. From their side, switching between clients is a one-click in the cockpit; data stays cleanly separated per client, with no cross-client leakage. See tax-advisor cockpit for the multi-client view.

Troubleshooting

My advisor already has a TaxItEasy account from another client. Same email, same account. The invite link adds your company to their existing Clients dashboard. No new password, no extra signup. They might still go through 2FA on the next sign-in if their session expired.

My advisor's firm has multiple people working on my books. Currently the invitation is per-person, not per-firm. Send a separate invite to each person who needs access. Per-firm sharing with a shared seat is on the 2026 roadmap.

I want to give my advisor write access. Not supported. The read-only constraint is a deliberate design choice — it keeps the audit trail clean (every change attributable to one named user), protects you from accidental data loss, and makes the trust model simple. If you want someone to edit on your behalf, that's a team-member role on your subscription, not a tax-advisor invite. Different flow, different page, different cost.

My advisor never received the invite email. Check that the email address on the invite matches one they actually use. If they have a corporate email server with aggressive filtering, ask them to whitelist [email protected]. You can also re-send the invite from Settings → Tax Advisor — that bumps the throttle and sends a fresh link.

I revoked access by accident. Re-send the invite from Settings → Tax Advisor. The new link comes with a fresh token but the advisor sees the same client connection restored to its current state.

I'm closing the company and want my advisor's access cleaned up. Revoke first, then delete or downgrade. Deleting the account also auto-revokes any active advisor connections; you don't need to do both, but revoking first lets you confirm the disconnection before the deletion grace period starts.

Related

• Read-only scope — what I can and cannot see — the advisor-side view of bounds
• Export your records for year-end — the file-based alternative
• Where is my data stored? — the security context for granting access
• The review queue, explained — how advisors work through your data