Bookkeeping Client Onboarding Checklist: 2026 Guide

Use this bookkeeping client onboarding checklist before your practice accepts files, accesses accounts or starts recurring work. Print it, assign each line to a named person and record the evidence that closes each item. Use this checklist for the work-completion steps. Use the separate client-onboarding software guide for product selection and configuration.

• [ ] Record the legal client name, trading name, ABN or ACN, entity type and contact details.
• [ ] Identify every person authorised to instruct the practice.
• [ ] Complete proof of identity for the client and any representative.
• [ ] Confirm the representative's authority to appoint the practice.
• [ ] Define services, exclusions, fees, timing and client duties in writing.
• [ ] Obtain signed client authority and acceptance of the engagement terms.
• [ ] Collect prior records through an approved secure channel.
• [ ] Record payroll, GST, BAS, superannuation and reporting obligations.
• [ ] Assign an owner, reviewer, due dates and an escalation contact.
• [ ] Test access without sharing passwords.
• [ ] Log open exceptions and set a deadline for each one.
• [ ] Approve, defer or decline the engagement.

1. Confirm the client and their authority

Verify the client and each representative before you provide tax agent or BAS services. Record the person's full name and either date of birth or residential address, then sight the evidence required for that client type. For a company, trust, partnership or other non-individual client, verify that the entity exists and confirm that the representative can engage the practice.

The Tax Practitioners Board guidance says proof of identity applies to new clients and, when appropriate, existing clients. The Australian Taxation Office also states that client-to-agent linking confirms authority within Online Services for Business but does not replace proof of identity. BAS agents remain responsible for the verification decision. This control also protects the professional judgement clients buy.

Record the date, time, method, evidence type and staff member who completed the check. The Tax Practitioners Board says practitioners do not have to retain copies of identity documents, but they should keep a contemporaneous verification record. Avoid asking clients to email identity documents. Use an approved secure channel or sight documents by an accepted method.

2. Set the engagement boundary

Document the work, responsibilities and limits before any recurring task begins. APES 305 requires members in public practice to document and communicate their terms of engagement. The letter should identify the client, the services included, exclusions, fees, timing, record obligations, communication contacts and the basis for ending or changing the engagement.

Use a separate schedule when the service list is long. State whether the practice will prepare BAS, process payroll, reconcile accounts, manage supplier bills or provide management reports. Name tasks that remain with the client. Record who approves lodgements and payments. Obtain signed client authority before adding the client to ATO or other service records.

If the practice wants to systemise a small business process, start with this approval boundary. It prevents informal requests from becoming unpriced recurring work.

Gate comparison

• Identity: minimum evidence: Verification record; owner: Onboarding lead.
• Engagement: minimum evidence: Signed terms and authority; owner: Partner or manager.
• Work ready: minimum evidence: Access test and exception log; owner: Assigned bookkeeper.

3. Collect records through a secure channel

Collect only the records needed for the agreed work and send them through an approved channel. Australian Privacy Principle 11 requires an APP entity to take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. It also requires reasonable steps to destroy or de-identify information that is no longer needed, unless a law or court or tribunal order requires retention.

Ask for the current chart of accounts, recent reconciliations, open receivables and payables, payroll summaries, superannuation records, lodged activity statements, fixed asset records and loan balances where relevant. Record each file's period and source. Do not collect a broad archive merely because it is available.

Use named access, multi-factor authentication where available and separate permissions for preparation and approval. Do not ask a client to send a password in a message. The call transcription privacy workflow provides a useful model for consent, access and retention decisions when onboarding includes recorded calls.

4. Map obligations, access and opening balances

Create one dated record of every obligation, account and unresolved balance before the first reporting cycle. Confirm GST registration, BAS frequency, payroll cycle, superannuation due dates, reporting deadlines and the client's approval path. Record the source used for each date rather than relying on a handover email.

Test each approved connection with the client's authority. Confirm that the assigned team member can reach the required records and that reviewer permissions differ where the work requires separation. Reconcile bank, receivables, payables, payroll liabilities, GST accounts, loans and retained earnings to the agreed start date. Mark inherited discrepancies as opening exceptions.

A clean handover also needs a repeatable request path. Use a named contact, a due date and a reminder rule. The client follow-up guide explains how a consistent follow-up method reduces scattered requests and missing context.

5. Assign exception ownership

Give every unresolved item one owner, one reviewer and one next date. An exception log should state the missing evidence, the person responsible, the due date, the effect on planned work and the condition that closes the item. Examples include an unsigned authority, an unreconciled payroll balance, missing bank access or an unexplained GST difference.

Use three checks before approval:

1. Can the team point to the record that supports completion?
2. Does one person have authority to resolve or escalate the issue?
3. Does the next action have a date that protects the first deadline?

Relevant accounting practices providing designated services are newly regulated for AML/CTF from 1 July 2026. That caveat matters because the obligations do not apply to every bookkeeping engagement merely because it involves financial records. Affected practices should check their services against AUSTRAC guidance and obtain advice for their circumstances. Their onboarding process may need customer due diligence, risk rating, record keeping and escalation steps within the practice's AML/CTF program.

6. Approve the first work cycle

A bookkeeping client onboarding checklist is complete only when the evidence supports the first agreed task. The partner or manager should review the verification record, signed terms, client authority, access test, obligation register, opening balances and exception log. They should record one decision: approve, defer pending named evidence or decline.

After approval, schedule a short review after the first BAS, payroll cycle or month-end close. Confirm that source records arrived on time, access worked, reviewers completed their checks and the client followed the agreed approval path. Update the checklist when the review finds a repeated gap. For a wider process review, read how to automate accounting processes after the manual gate is stable. This guide to AI workflow automation explains why a bounded task still needs evidence and review.