How CPAs Should Respond to Negative Reviews Without Breaching Confidentiality

To respond to a negative review as an accountant, acknowledge the concern briefly and generally, never confirm that the reviewer is actually a client, never reference a dollar figure or filing detail, and move any real explanation into a private conversation — a reply that stays general satisfies both good customer service and the confidentiality rules that govern CPAs specifically. That last constraint is what makes this different from replying to a bad review about a haircut or a delayed shipment. A CPA who gets specific in public — even defensively, even to correct the record — risks disclosing exactly the kind of information the profession is built to protect. Getting the discreet version right matters enough that it's worth having discreet reply drafts for accounting firms ready before the first bad review ever shows up, rather than improvising one under pressure. Why CPA confidentiality rules change how you reply Two rules sit behind every reply a CPA firm posts publicly. AICPA Code of Conduct Rule 1.700 protects confidential client information and generally prohibits disclosing it without client consent, in advertising or anywhere else. IRC §7216 goes further for tax return information specifically, making unauthorized disclosure or use a federal offense with real penalties attached . Most CPAs know not to volunteer a client's financial details to a stranger. Fewer stop to think that confirming "yes, we handled your return" in a public reply, or restating a number the client themselves posted, can brush up against the same rules. Beyond the AICPA Code, every state board of accountancy maintains its own advertising rules, and some restrict specific claims more tightly than others . A firm operating in more than one state should have reply language checked against each board it answers to, not just its home state. The two things never to put in a public reply Whatever the specific complaint, two things stay out of every public reply without exception. First, never confirm the reviewer is a client — not by name, not by implication, not even to correct a false claim that they were never actually served. Confirming the relationship at all is itself a disclosure. Second, never cite a dollar figure, a filing outcome, a deadline, or any specific detail about the work performed, even if the client posted that detail themselves first. A client volunteering their own refund amount in a review doesn't give the firm permission to discuss it back. Reply templates for three realistic complaints Three complaint types account for most of what shows up in a CPA firm's reviews, and each has a safe, general reply that works without disclosing anything. "My bill was way higher than I expected" The work was likely correct — the client's books were messier than they realized, or their situation was more complex than a flat-fee estimate assumed. Explaining the math in public means disclosing the math. A safer reply: "We take billing concerns seriously and would like to walk through this with you directly — please call our office so we can go over it together." That invites a real conversation without confirming a single number in public. "They told me I'd get a refund and I owed money instead" This is almost never a preparer error — it's usually a mismatch between withholding and actual tax liability that the preparer can't control. But explaining why in public requires discussing the client's specific tax situation, which is exactly what's off-limits. A safer reply: "Tax outcomes depend on each client's full financial picture for the year, and we'd welcome the chance to go through yours together — please reach out to our office." It's honest, it doesn't deny anything, and it discloses nothing. "It took them forever to respond during tax season" This one doesn't touch confidentiality at all, which makes it the easiest to answer directly — and the easiest to get wrong by being too generic when a real apology would land better. A safer reply: "We're sorry our response time didn't meet your expectations, especially during our busiest season — we'd like to hear more about what happened so we can do better. Please give us a call." Fixing a process problem only works if the firm actually does something with the feedback afterward. Why "just explaining what happened" backfires The instinct to set the record straight is strong, especially when a review feels unfair or leaves out context that would make the firm look better. A partner reading "they overcharged me for a simple return" when the return actually took eleven hours because the client's bookkeeping was a mess for six months wants to say so. But saying so in public means describing the client's actual financial situation, which is the one thing confidentiality rules exist to prevent — and it rarely changes the reviewer's mind anyway. A defensive public reply tends to read as defensive to everyone else browsing the firm's profile, regardless of whether the underlying facts favor the firm. The better use of that same energy is a private phone call, where the full context can actually be laid out and, often, resolved. There's a second reason to resist the urge to over-explain: once a firm starts disclosing specifics to rebut one review, it sets an informal precedent that makes it harder to stay general on the next one. Clients and prospective clients notice inconsistency — a firm that discloses detail when it's defending itself but stays vague otherwise looks like it's managing its image rather than protecting confidentiality as a matter of principle. When to escalate to a partner A rule of thumb that holds up for most firms: if a reply needs anything beyond a generic acknowledgment and an invitation to talk privately, it needs a partner's eyes before it goes up, not after. At a fictional firm like Bellridge & Co. CPAs, that might mean a standing policy that any review mentioning a dollar amount, a dispute, or a threat to report the firm somewhere gets routed to a partner within the same business day — not because every situation needs a dramatic response, but because the cost of a careless public reply is high enough that a second set of eyes is cheap insurance. Keeping the reply fast without being careless Speed matters — a review sitting unanswered for two weeks looks worse than one answered the same day, even with a general reply. The goal isn't to slow down the process with layers of approval; it's to make sure whoever drafts the first response, whether that's an office manager or an AI-assisted drafting tool, works from the same two constraints every time: no confirmation of the relationship, no specific detail. A tool like Tailwind's negative review response generator can produce a first draft that already respects those guardrails, which a partner can then approve or adjust rather than writing from scratch under time pressure. . For the fuller picture of how reputation management works across both accounting and advisory practices — including tax-season review requests and the broader compliance landscape — see our pillar guide, Accounting Firm Reputation Management: A Guide for CPAs and Advisors. And whatever your reply policy ends up being, apply it to every client the same way: selectively asking only satisfied clients for reviews is review gating, which is illegal under FTC rules regardless of industry — see why review gating is a legal risk. Multi-partner firms need one policy, not several A firm with more than one partner or more than one office runs into a different version of this problem: consistency. One partner who replies thoughtfully within a day and another who either ignores reviews or occasionally lets a frustrated reply slip through creates a public record that looks inconsistent to anyone comparing partners before choosing one. The fix isn't more rules — it's one short, written policy everyone at the firm follows: who drafts the first response, what the two non-negotiable constraints are, and who gets looped in before anything beyond a generic acknowledgment goes live. A policy that exists only in one partner's head doesn't survive that partner taking a week off during tax season. It's also worth deciding in advance who owns the final sign-off when a reply needs partner review, rather than figuring that out for the first time under pressure. A simple rule — anything mentioning money, a threat, or a dispute goes to whichever partner is on reply duty that week — keeps the process moving without requiring every partner to review every reply. Frequently asked questions Can a CPA ever explain a tax outcome in a public reply? Not in any way that discloses the client's actual numbers or situation. A reply can acknowledge that outcomes vary and invite a private conversation, but explaining why a specific client's outcome looked the way it did means disclosing information that Rule 1.700 and §7216 protect, even if the client brought it up first. What should we do about a review from someone who was never a client? Most review platforms have a process for disputing content that violates their policies, including reviews from non-customers . You can file that dispute and still post a brief, calm public reply while it's pending, since disputes can take time to resolve and the review often stays visible in the meantime. How fast should a reply go up? Within a day or two if possible, especially during tax season when a slow response is itself a common source of complaints. A quick, general reply does more for the firm's public record than a delayed, carefully-worded one — speed and discretion aren't in tension here. Every review from Google, Facebook and Yelp in one inbox → Try Tailwind free. Tailwind runs $5 a month per tool, or $50 a month for the Full plan covering every tool, with the first month free and no card required to start.