Does helping a client license data affect CPA independence?
It depends on the client relationship and the role the firm takes. The AICPA Code says a member who assumes a management responsibility for an attest client, such as deciding on, committing to or signing a data license for it, impairs independence. Any referral reward raises separate commission rules, so check attest relationships and your state board first.
The short answer: helping and deciding sit on different sides of the line
For an attest client, the line that matters is between helping management and acting as management. The AICPA Code of Professional Conduct treats a management responsibility taken on for an attest client as a threat no safeguard can reduce, so a firm that decides whether the client licenses its data, commits the client to terms or signs for it would impair independence. Pointing the owner to a provider and leaving every decision with management is a different activity, but the facts of each engagement decide where it falls.
That leaves two questions: is anything your firm does around the license a nonattest service that must meet the Code's conditions, and would a reward for the introduction be a commission the Code restricts for attest clients? The answers turn on the attest relationship, the period it covers, your state's rules and, for public-company audits, SEC rules.
What the AICPA rules actually say
The relevant provisions all sit in the AICPA Code of Professional Conduct; the AICPA's online Code is the authoritative current version, so check it before relying on any paraphrase. Read these sections in this order:
- Independence Rule (1.200.001): a member in public practice must be independent when performing professional services for which standards require independence, such as audits and reviews.
- Nonattest services (1.295), management responsibilities: if a member assumes a management responsibility for an attest client, the management participation threat cannot be reduced to an acceptable level and independence is impaired. The Code's examples include setting policy or strategic direction, directing the client's employees, authorizing, executing or consummating transactions on the client's behalf, having custody of client assets and deciding which recommendations to implement.
- Nonattest services (1.295), general requirements: before performing a permitted nonattest service, the attest client must agree to assume all management responsibilities, designate an individual with suitable skill, knowledge or experience to oversee the service, evaluate its adequacy and results, and accept responsibility for them. The understanding with the client is documented in writing.
- Commissions and referral fees (1.520): a member in public practice may not, for a commission, recommend a product or service to a client when the firm also performs an audit or review, certain compilations, or an examination of prospective financial information for that client. The prohibition runs for the engagement period and the period covered by the historical financial statements involved. Permitted commissions and referral fees must be disclosed to the client.
- Contingent fees (1.510): fees that depend on a specific result are restricted for the same group of attest clients.
Two other regimes can sit on top. Where a firm audits an SEC registrant, SEC auditor-independence rules apply as a separate framework from the AICPA Code; SEC staff's 2004 letter to the AICPA ethics committee on contingent fees illustrates that the two are not the same. And state boards of accountancy can be stricter than the AICPA; the New Jersey Society of CPAs' guide to commissions and contingent fees shows one state picture that differs from the national Code.
How the rules apply in common situations
Most firms meet this question in one of a few shapes. The right-hand column is an outcome to confirm with your ethics partner, not a conclusion.
| Situation | What to check | Outcome to confirm |
|---|---|---|
| Tax-only client asks who helps companies license records, and you share a referral link | Whether any part of the firm performs attest work for the client; disclosure of any reward; state rules on referral fees | Independence not in play; any permitted reward disclosed to the client in writing |
| Audit or review client asks you for an introduction | Whether the introduction is a professional service at all; rule 1.520 on commissions | An introduction with no decision-making is often treated as a simple referral; a reward tied to that client is likely restricted while the attest period runs |
| Advisory team helps an attest client list its systems for a data inventory | The 1.295 general requirements; self-review threat if the records feed statements you audit | Possible as a nonattest service if management owns the inventory and the understanding is in writing |
| Owner asks you to review the license terms and recommend yes or no | Whether you advise or decide | Advice can be compatible; choosing which recommendation to adopt stays with management |
| Owner asks you to sign the license or approve the data release | Authorizing or consummating a transaction for the client | A management responsibility; incompatible with independence for an attest client |
| Firm proposes a success fee tied to the license closing | Rule 1.510 on contingent fees | Restricted for attest clients; check state rules for every other client |
A quick sort before you escalate
These lists do not replace the rule text, but they frame the question for your ethics partner.
Activities that leave decisions with management:
- Telling the owner that data licensing exists and sharing SourceX's public pages
- Making an introduction by email with the owner's permission
- Suggesting the owner try the company fit checker, a preliminary, non-binding screen
- Answering process questions at a meeting the owner runs
Activities that look like management responsibilities:
- Deciding whether the company licenses its data, or which records go in scope
- Negotiating with authority to commit the client, or signing the license
- Approving the release of records, or holding the exported data
- Directing the client's staff to run exports or redact records
If a staff member serves the client as an outsourced CFO, the related question of signing authority is covered in whether a fractional CFO can sign a data license. For audit clients preparing for a sale, how a one-time license payment is treated in adjusted EBITDA and quality of earnings is a separate conversation for the deal team.
Disclosure and consent good practice
Where a reward is allowed, the client should hear about it from you first and in writing. A short disclosure covers four points:
- Your firm is a registered SourceX partner, and the reward is a share of SourceX's fee that becomes payable only after the buyer pays and SourceX receives that fee.
- The reward is never deducted from what the company receives, and the company makes every decision, including whether to proceed at all.
- The owner can apply directly at sourcex.si/apply without your referral link.
- The engagements your firm performs for the client, so the independence review covers all of them.
Record the disclosure and the client's acknowledgment in the engagement file, and run the client name against your attest client list before anyone registers the introduction. For reference, partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company; the program terms set the details, and no reward is guaranteed.
Questions to take to your ethics partner or state board
- Is this client an attest client today, or was it during any period covered by statements we reported on?
- Would the introduction, or any follow-on help with a data inventory, be a nonattest service, and are the 1.295 conditions met?
- Is a partner reward a commission under 1.520 for this client, and if permitted, what written disclosure does our state require?
- Does our state board take a stricter position than the AICPA Code on commissions or contingent fees?
- Is the client part of an SEC registrant group, bringing SEC independence rules into play?
- Who in the firm signs off, and where is the decision documented?
This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.
Next step
Run the attest-client check first. If the client is clear, register as a partner and make the introduction; if it is an attest client and a reward is not permitted, the owner can still apply directly at sourcex.si/apply. The page on referral opportunities for accountants describes which clients tend to fit.
- Step 1Share your linkSend your personal link to a company you know.
- Step 2Company appliesThe company applies itself at /apply.
- Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
- Step 4You get your rewardYour share of SourceX fees becomes payable.
Common questions
Is introducing a client to SourceX a nonattest service under the AICPA Code?
Not necessarily. A simple introduction where management makes every decision is often treated as a referral rather than a professional service, but the label depends on what the firm actually does. If the firm goes on to help with the data inventory, review terms or advise on the deal, those activities can be nonattest services that need the Code's conditions, including a written understanding and a client designee who oversees the work.
Can a CPA firm accept a referral reward connected to an audit client?
The AICPA commissions rule bars accepting a commission for recommending a product or service to a client for whom the firm performs an audit, review, certain compilations or an examination of prospective financial information, during the engagement and the period covered by the statements. Whether a data licensing reward is a commission for that client is a question for your ethics partner, and state rules can be stricter.
What if our firm only prepares the client's tax returns?
Independence requirements attach to attest engagements, so a client that receives only tax services generally does not raise the nonattest services question. The commissions and referral fees rule still requires disclosure of any permitted commission or referral fee, and some states regulate CPA referral fees more tightly. Confirm that no other team in the firm performs attest work for the same client before treating it as tax-only.
Can our advisory team help an audit client prepare a data inventory?
Possibly, as a nonattest service, if management keeps every decision about which systems and records go in scope, designates a person with suitable skill, knowledge or experience to oversee the work, and accepts responsibility for the results, with the understanding documented in writing. Consider the self-review threat when the inventory touches records that feed financial statements your firm audits, and confirm with your ethics partner.
Does it matter that the reward comes from SourceX's fee rather than the client?
It matters to the client, because the reward is a share of SourceX's fee and never reduces what the company receives. It does not settle whether the reward counts as a commission under the AICPA Code or your state's rules. Those rules look at your relationship with the client and the services your firm performs for it, not only at who writes the check.
Related pages
Free resources
- Due diligence checklist generator — A tailored document request list by deal type.
- Cash flow calculator — A 12-month cash forecast with shortfalls highlighted.
- Referral earnings calculator — Hypothetical partner earnings with the per-company cap.
- All free tools · MCP resource center
By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09
Know a US company with valuable proprietary data?
Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.
Refer a company →I own a business
Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.
Start an assessment