It’s early October and your team is racing the Oct. 15 extension deadline. A senior associate has been using the firm’s artificial intelligence assistant to summarize client documents and draft engagement emails all day, until it stops: usage limit reached, try again later. Three returns are still waiting. So she opens a free AI chatbot on her personal laptop, uploads a client’s brokerage statement, and keeps going.
The work gets done. But a client’s financial records now sit with a vendor the firm never approved, outside its written security plan.
As AI usage limits tighten, that scenario is becoming more common. The interruption is a nuisance. The workaround is the real risk.
What AI tokens are and why they run out
Tokens are how AI tools measure work. A token is a small piece of text, often part of a word, and everything counts toward the total: the prompt, uploaded statements and spreadsheets, the running conversation history, and the response. Business AI plans include an allowance, called tokens, credits, or messages depending on the vendor.
In 2026 those allowances are tighter and more closely metered. Vendors are moving from flat plans to usage-based billing. Microsoft, for example, now bills some Copilot features in Copilot Credits with administrator spending limits. Long PDFs, multi-tab workbooks, and agent-style tasks that run several steps on their own consume tokens quickly, and filing deadlines are exactly when usage peaks.
What happens when the limit hits
Depending on the tool and plan, one of three things usually happens:
- Work stops: New requests are blocked until the allowance resets or an administrator raises it. IT Brew reported one consultant waiting 13 hours for tokens to refresh.
- Costs climb: Overage billing keeps work moving, then lands on next month’s invoice.
- Staff improvise: Under deadline pressure, people reach for free personal AI accounts.
That third outcome is shadow AI: AI tools used for firm work without approval or oversight. Free consumer tools may retain what is pasted in and, depending on settings, may use it to improve their models.
For accounting firms, the exposure is specific. The FTC Safeguards Rule requires a written information security program and oversight of the service providers that handle customer information. For tax preparers, Internal Revenue Code Section 7216 restricts using or disclosing tax return information without client consent. A staff member pasting return data into an unvetted AI tool can put the firm on the wrong side of both.
IBM’s 2025 Cost of a Data Breach report found that 63% of the breached organizations it studied had no AI governance policy, and that high levels of shadow AI added about $670,000 to the average cost of a breach.
Eight steps firm leaders should take now
- Inventory every AI tool in use: Ask partners and staff what they use, including browser add-ins and AI features built into tax and accounting software. Confirm the answers with web traffic reports.
- Approve business-grade tools only: Choose AI with administrator controls and contract terms that keep client data out of model training.
- Plan capacity for busy season: Review usage monthly and raise allowances before January. Set spending caps and alerts so the firm sees a limit coming before staff hit it.
- Add an AI policy to your WISP: Name approved tools, prohibit client data in anything else, and spell out exactly what staff should do when a limit is reached.
- Create a fast escalation path: A same-hour way to request more capacity keeps staff from going around the rules at 9 p.m. in April.
- Restrict unapproved AI on firm devices: Use web filtering and data loss prevention tools to block or flag Social Security numbers and account data headed to unknown AI services.
- Train for efficient use: Start a new chat for each client, upload only the pages needed, and use lighter models for routine drafting.
- Build AI into your continuity plan: Document the manual fallback for every AI-assisted workflow so a filing deadline never depends on a token count.
Be ready for client questions
Clients are paying closer attention to how firms use AI. Clear answers build trust:
Q: Do you put my financial information into AI tools?
A: Only into tools the firm has approved, secured, and included in its written information security program. Staff may not use personal or free AI tools with client data.
Q: Could AI use my tax information for other purposes?
A: Approved tools are configured so client data is not used to train AI models, and the firm follows federal rules that limit how tax return information can be used or shared.
Q: If your AI tool hits a limit during tax season, will my return be late?
A: No. AI speeds up the work, but every AI-assisted step has a manual process behind it.
Q: Does a professional review work that AI helps produce?
A: Always. A credentialed member of the team reviews every return, report, and client communication.
The bottom line
Every accounting firm will eventually hit an AI usage limit. The firms that come through it well will have planned ahead with approved tools, sensible capacity, a written policy, and a safe path for staff. That preparation protects the firm, and more importantly, the clients who trust it with their most sensitive financial information.
ABOUT THE AUTHOR:
Scott Carr, owner of Farmhouse Networking in Grants Pass, Oregon, is a veteran Network & Computer Systems Architect with over 30 years of IT experience. For over a decade, he’s led his team in delivering proactive, secure, and fully managed IT services to more than 80 businesses—including accounting and finance firms that rely on data security, compliance, and efficiency. Scott’s hands-on, jargon-free approach ensures every client understands their technology and gains confidence in their systems. His firm is known for fast, responsive support—most issues are resolved within 15 minutes—and deep expertise in cybersecurity, network design, and IT compliance. Learn more about how Farmhouse Networking supports the accounting industry at https://www.farmhousenetworking.com/finance-it-support/.
Photo credit: logturnal/Freepik
Sign in to get access to this free resource, and all of our whitepapers and reports.
Download this content today!
Register Now Already registered? Click here to Log In
