AI in everyday work
Fewer professionals, more rules: three AI workflows in the firm
Opening a new file, passing on the firm’s knowledge, guiding clients through the deadlines: the profession is shrinking while the rulebooks keep growing. This article walks through three workflows to show how an AI colleague works with your own documents and where the limits run.
In brief
- The profession is shrinking while the rulebooks grow: in Germany the chambers count 53,932 tax advisory practices, a good two thirds of them sole practices, and the members of the profession are 53.7 years old on average.1
- Kisuno works with your firm’s own documents. Client files, briefing notes, model letters and guidelines become a knowledge base: a collection you can question in plain language. Every answer names its source.
- The platform does not advise, it prepares. The German ban on unauthorised assistance in tax matters under Section 5 StBerG, professional secrecy and sign-off by a qualified professional all remain untouched.9
- Your data stays on your own server or in a European data centre, and it does not train any models.
Starting point: the profession is shrinking, the rulebooks are growing
In Germany the tax advisers’ chambers count 53,932 practices, a good 67% of them sole practices, and the members of the profession are 53.7 years old on average. Training contracts for tax clerks fell to 17,081, down 1.3%, while the number of career changers in retraining rose from 1,867 to 2,113.1 In Italy the profession is shrinking outright: at the end of 2025, 119,050 dottori commercialisti and esperti contabili were registered, 0.8% fewer than the year before; the 2024 tax returns show a median income of 48,420 euros against an average of 87,376 euros.2
In Liechtenstein the supervisor names the connection itself: in its supervisory priorities for 2026, the FMA writes that the number of providers in the fiduciary sector is declining slightly in the face of tightened regulation and a high regulatory workload.3 In Sweden the bottleneck sits on the other side: Srf konsulterna counts the redovisningskonsult among the shortage occupations, with around 70,000 company formations a year.4
At the same time, the rulebooks are arriving almost all at once. In France, from 1 September 2026 every VAT-registered business must be able to receive electronic invoices, and on that date the larger ones must also send them. From 1 September 2027 the sending obligation applies to all of them, in each case through a plateforme agréée, a state-approved invoicing platform.6 In Spain, entities subject to corporate income tax must adapt their invoicing systems before 1 January 2027 and all others before 1 July 2027. The B2B obligation from Real Decreto 238/2026 only starts running with a ministerial order that is still outstanding, and then twelve months for companies with a turnover above eight million euros and twenty-four for all the others.7 In Norway the amendments to the bookkeeping act take effect in stages: electronic invoicing between businesses subject to bookkeeping obligations from 1 January 2027, electronic bookkeeping from 1 January 2030.8 In Italy it has long been routine through the Sistema di Interscambio.
Each of these deadlines is two things at once: an advisory mandate and an administrative load in your own office. That technology is not the bottleneck is clear from the European statistics: in 2025, 55.0% of EU enterprises with 250 or more employees used at least one AI technology, but only 17.0% of those with 10 to 49 employees.5 That gap is wider than any gap between countries.
Use case 1: opening a client file instead of leafing through it
A new engagement arrives with four binders and two years of correspondence. The AI colleague reads what you give it and builds a chronology: who decided what and when, which contracts and amendments exist, which deadlines they name and which points remain open. Every entry comes with its source.
The same helps in an ongoing engagement: an overview of the state of play before a meeting, the requested documents drafted before an audit, a summary of a long assessment notice. What the assistant does not do is judge. It shows where something is written, not what follows from it.
- Files, contracts and correspondence of the engagement
- A chronology with the people involved and the sources
- Open points, named instead of overlooked
Deadline control stays in your practice management software and with a person. A date found in a document is a prompt to check, not a confirmed deadline.
Use case 2: the firm’s knowledge becomes queryable
Anyone starting out asks the same first question: how do we do this here? While training contracts in Germany are declining, the number of career changers in retraining is rising.1 Career changers bring professional experience, but not the knowledge of this particular firm. A knowledge base built from briefing notes, model letters and past correspondence answers such questions with a source reference, instead of interrupting an experienced colleague for the twelfth time.
Permissions apply right down to individual folders. Whoever does not work on an engagement does not see it through the assistant either, and every access is recorded in the log. That is the condition under which a knowledge base can be reconciled with client confidentiality.
- A question in everyday language, including from new staff
- Briefing notes, model letters and guidelines, with permissions per folder
- An answer with its source, checkable in seconds
The gain is twofold: experienced staff are interrupted less often, and the knowledge stays in the firm when someone retires. The knowledge base is only as good as the documents in it.
Use case 3: guiding clients through the deadlines
Every one of these deadlines creates the same work: explaining, reminding, following up. A circular on electronic invoicing, a query about missing documents, thirty times in a slightly different version. The assistant draws the draft from your own technical notes, groups engagements by who is affected, and files the letters for review.
In cross-border engagements language is added: from the German briefing note, the French, Italian or Spanish version is drafted, with the same source references. For legally relevant letters the translation remains a draft, never the binding text.
- The firm’s technical note or briefing note on the new obligation
- One input, several versions by engagement and language
- Drafts in the firm’s tone, with the same source references
- Sign-off by the qualified professional, and only then dispatch
What deliberately does not happen: nothing is transmitted automatically to a government system, not to the Sistema di Interscambio, not to VERI*FACTU and not to a plateforme agréée. The assistant prepares, a person transmits.
The limits, plainly stated
In Germany, providing assistance in tax matters on a commercial basis is reserved to the persons named in Sections 3 to 4e StBerG. Section 5 StBerG prohibits it for everyone else.9 Kisuno therefore gives neither tax nor legal advice. The platform prepares the answer and replaces neither the professional nor an expert-comptable, a commercialista or a gestoría.
Professional secrecy is the second fixed point: secret professionnel in France, segreto professionale in Italy, secreto profesional in Spain, and the duty of confidentiality under professional law in Germany, Austria and Liechtenstein. In France, Italy, Spain and Germany a breach is a criminal offence; in Austria and Liechtenstein it is sanctioned under professional law.10 A data processing agreement does not set it aside. The responsibility stays in the firm. Three sentences follow: a language model can produce errors, which is why every text is a draft. Every source reference is checked against the original. And compliance is never automatically fulfilled; it arises through people and processes. This section describes the legal position and is not legal advice.
Connectors: what can be linked to your firm software
An AI colleague is only as useful as what it is allowed to reach. The link to another program is called a connector. It runs over MCP, an open standard for connecting external systems. The prerequisite is a documented interface, an API in technical language: the vendor publicly describes how other programs may retrieve data. Some vendors already ship a ready-made connecting piece for this, an MCP server. Permissions apply per tool, and every call is logged. The state of play for common practice management and accounting software, checked in August 2026: For the Spanish practice-management suites no verified findings are available, which is why they have no row in this table.
| Software (country) | Interface | Connection to Kisuno |
|---|---|---|
| DATEV (DE) | Partner API; the developer portal requires a login and is not visible without a DATEV account | Only through the DATEV partner channel |
| Lexware Office (DE) | REST API, openly documented | Possible via MCP: contacts, invoices, reminders |
| BMD NTCS and RZL (AT) | No public developer portal; RZL runs an interface partner programme | Through the partner channel |
| Vertec (LI, CH) | Open interface, documented | MCP server available from the vendor: time recording, engagements, invoicing |
| Pennylane (FR) | REST API openly documented, OAuth 2.0, dedicated access for firms | Possible via MCP: receipts, postings, master data |
| Fatture in Cloud (IT) | REST API openly documented, OAuth 2.0, webhooks | Possible via MCP; the documented exception within its group |
| Holded (ES) | REST API openly documented, bearer authentication, webhooks | Possible via MCP: accounting, invoices, contacts |
| Fortnox (SE) | REST API openly documented, OAuth2, documented rate limits | Possible via MCP: invoices, vouchers, customers, payroll |
| Tripletex, Fiken and PowerOffice Go (NO) | Open docs with a test environment; with Fiken the customer creates the access key | Possible via MCP: accounting and invoicing |
The pattern is the same in all eight markets: what is open is usually the accounting system, what is closed is the large practice suite. Is your software missing? Most of the daily work runs without any system connection. How the AI connection to a practice management or accounting software works via MCP is described on the integrations page.
Data protection: client data stays where you want it
Kisuno runs on your own server or managed in data centres with ISO 27001 certification. Customer data does not train any models, and the data processing agreement and subprocessor list are published openly on this website. The choice covers the current models from OpenAI (ChatGPT) and Anthropic (Claude); they run in the AWS data centre in Frankfurt. AWS is a US company, so the US CLOUD Act applies even with servers in Frankfurt, and we say so openly. How that path runs in detail is set out in the article on the Anthropic models on Amazon Bedrock. For customers with higher data-protection requirements, open frontier models such as GLM, Kimi and DeepSeek are available, operated by European companies on servers in Europe; the CLOUD Act does not apply there.
Factually, one point matters most. If personal data is transferred to a third country, that is a country outside the European Economic Area, Chapter V of the General Data Protection Regulation applies. That means its own legal basis and, depending on the instrument, an assessment of the legal situation there. If storage and model processing stay within the European Economic Area, that step falls away. What remains is processing on behalf of a controller under Article 28, which every firm already handles. Nothing becomes automatically lawful that way, but it becomes easier to justify. The data processing agreement, however, covers only data protection. For professional secrecy, Germany adds a further step: you have to select the service provider carefully and oblige it to secrecy in the contract; for tax advisers this is set out in Section 62a of the Tax Advisory Act, for lawyers in Section 43e of the Federal Lawyers’ Act.11
The second point is fit. In 2025, 71.0% of AI-using enterprises in Norway and 62.1% in Sweden used commercial software bought off the shelf.5 Such tools are useful, but they do not know your own firm: not your client files, not your model letters. That is precisely where the difference lies.
Frequently asked questions from tax, law and fiduciary firms
May the platform give my clients tax or legal advice?
No. In Germany, assistance in tax matters on a commercial basis is reserved under Section 5 StBerG to those authorised to provide it. Comparable professional reservations apply in the other target markets. The assistant finds passages, summarises and drafts. The assessment and the sign-off stay with the qualified professional. This article is not legal advice.
How does this work with professional secrecy?
In France, Italy, Spain and Germany a breach of professional secrecy is a criminal offence; in Austria and Liechtenstein it is sanctioned under professional law. A data processing agreement does not set professional secrecy aside: it governs data protection. For professional secrecy you also have to select the service provider carefully and oblige it to secrecy by contract.
We work with DATEV. Does Kisuno work with it?
Yes. Connecting to DATEV runs through the developer programme and requires a partnership. But most of the benefit does not depend on it: opening client files, the knowledge base, client letters and translations all work with documents.
Is this a high-risk system under the AI Act?
As a rule, no. Searching documents, summarising and drafting does not fall into the high-risk categories. It is different as soon as a system sorts job applications or evaluates employees. Regardless of risk, the regulation requires every deployer to take measures that promote the AI literacy of its staff, meaning training and documented rules of use. Since the 2026 amendment, nobody has to guarantee a particular level of literacy.
What does it cost for a firm of twelve people?
The managed instance costs CHF 7 (EUR 7.50) per person per month. Through the end of the current month: 50 percent off with a twelve-month term, that is CHF 3.50 (EUR 3.75) per person per month. Testing is free and not limited in time. Every new account starts with a starting credit of CHF 50 (EUR 55) for model usage. No payment details are required; access still runs through the form. If you self-host, the software costs nothing. LibreChat, the base, is MIT licensed, and the repository with our own extensions follows shortly. Everything else is on the pricing page.
Where is our data held, and do we need an IT department?
In the managed variant in European data centres with ISO 27001 certification, with self-hosting on your own server. You do not need an IT department. For self-hosting you need someone who can maintain a Linux server with Docker; Docker is the common technology for running server software in self-contained packages. The evidence is available in the Trust Center.
See it on an engagement of your own
Bring a client file or a briefing note, and we will walk through the workflow together.
Sources
All figures and legal references come from these sources, last checked in August 2026.
- Bundessteuerberaterkammer, professional statistics 2025 (DE): bstbk.de; prior-year figure for career changers from the professional statistics 2024: bstbk.de
- Fondazione Nazionale dei Commercialisti, Rapporto 2026 sull’Albo (IT): fondazionenazionalecommercialisti.it
- Financial Market Authority Liechtenstein, supervisory priorities 2026 (LI): fma-li.li
- Srf konsulterna on the shortage of redovisningskonsulter, 2025 (SE): via.tt.se
- Eurostat, isoc_eb_ai, AI use by size class and sourcing route, 2025: ec.europa.eu
- Direction générale des finances publiques, facturation électronique (FR): impots.gouv.fr
- Agencia Tributaria on invoicing deadlines and Real Decreto 238/2026 (ES): agenciatributaria.gob.es and boe.es
- Stortinget, Lovvedtak 52 (2025 to 2026) amending the bokføringsloven (NO): stortinget.no
- Steuerberatungsgesetz, Section 5, unauthorised assistance in tax matters (DE): gesetze-im-internet.de
- Criminal provisions on professional secrecy: Strafgesetzbuch Section 203 (DE): gesetze-im-internet.de; Code pénal Article 226-13 (FR): legifrance.gouv.fr; Codice penale Article 622 (IT): normattiva.it; Código Penal Article 199 (ES): boe.es; duty of confidentiality under Section 80 WTBG 2017 (AT): ris.bka.gv.at
- Bringing in service providers as a holder of professional secrets: Steuerberatungsgesetz Section 62a: gesetze-im-internet.de; Bundesrechtsanwaltsordnung Section 43e: gesetze-im-internet.de; together with Strafgesetzbuch Section 203(3) (DE): gesetze-im-internet.de
Last reviewed: