Does PJRJ claim SOC 2 or ISO certification on this site?

No. Do not cite invented badges. Ask for the access, logging, and contractual controls that apply to your engagement — and verify them.

What access model should we require?

Prefer named users, least privilege, MFA on cloud ledgers, no shared passwords, and a written list of systems in scope. Revoke access promptly at offboarding.

How should client data be segregated?

Ask whether teams can see only assigned clients, how folders are named, and whether export rights are limited. Weak vendors share broad drives “for convenience.”

What about IRS Section 7216 or similar consent rules?

Consent and disclosure rules depend on your facts and jurisdiction. PJRJ does not publish IRS attorney opinions here — route consent design to your counsel and engagement letter.

How do I start diligence with PJRJ?

WhatsApp +91-8882913461 with your questionnaire, software stack, and whether white-label delivery is in scope. Pair this FAQ with the partner checklist and pilot guide.

Outsourcing Security Diligence FAQ | CPA Vendor Checklist

Outsourcing Security Diligence FAQ

Honest security diligence questions for US CPA firms evaluating India accounting outsourcing — no invented SOC or ISO claims.

Domestic Services

International Services