The authority boundary
Who controls payments, tax filings and communications when finance is outsourced?
You do. Three acts commit your business to someone outside it — releasing money, submitting a filing, and sending something in your name — and each one is answered for by the business rather than by whoever prepared it. Everything leading up to those three acts can be outsourced, and most of the work sits there. The acts themselves should not be.
At Par holds that line exactly, in the same words on every engagement. At Par prepares payments and never moves, releases or executes client money. At Par prepares filings and does not submit them on a client’s behalf. Anything that leaves the business in the client’s name remains subject to the client’s authorisation.
Three acts, one property. Each binds the outside world.
Payments, filings and outward communications are normally discussed apart from one another. One is a treasury question, one a compliance question, one a matter of customer relations. They belong in the same conversation, because they share the single property that decides how authority should be delegated: each produces an effect the business cannot take back on its own.
Money released is gone until a counterparty agrees to return it. A filing submitted sits on record with an authority, and correcting it is a further act with consequences of its own. A message sent in your name has been read; a retraction is a second message, not an erasure. In each case the obligation lands on the business. An authority pursues the taxpayer, a supplier pursues the account holder, and a customer remembers who the email came from — none of them are interested in which party prepared it.
That gives a test which works on any provider, in any jurisdiction, without reading a contract.
Applied honestly, the test also explains why most finance work is safely delegable. Preparation is where the hours are, where the errors are, and where a provider adds most; commitment is a single act at the end of a long process. Keeping that act does not mean keeping the work.
A payment run can be prepared. Releasing money is your act.
Almost everything painful about paying suppliers happens before anyone approves anything, and all of it can sit with a provider.
- Bills captured, recorded against the right period and matched to what was ordered or contracted.
- Duplicates caught — the same bill arriving twice, or a statement paid alongside the invoices behind it.
- Supplier bank details checked against what was previously held, with any change treated as suspect until verified independently.
- The run built by due date, against available cash rather than the bank balance alone, with what is already committed taken into account.
- Each line presented with its evidence attached, so approval is a decision rather than an act of faith.
- The run reconciled afterwards: what actually left, what did not, what bounced, what remains outstanding.
What remains is the release itself — the instruction to the bank. It takes seconds, it happens once the difficult part is over, and it is the only step in the sequence that cannot be reversed by whoever performed it. Keeping it costs an owner almost no time and removes an entire class of risk, including the ordinary error kind rather than only the dishonest kind.
In fairness, this is not universal law. Larger finance functions do grant payment authority to outsourced teams and run it safely, on the strength of dual authorisation in the banking platform, segregation of duties and an independent audit trail. Those controls substitute for the owner’s eye. In an owner-led business with one approver and no second pair of eyes inside the company, nothing substitutes for it, and handing the release away buys back a few minutes a month at a genuinely poor price.
Six steps can be delegated. Submission is a different act.
Filing work decomposes more cleanly than most owners expect, and nearly all of the difficulty sits before anything is sent to an authority.
- Identification. Which obligations apply to this business, in this jurisdiction, on what cycle, and from which date.
- Calculation. The figures, derived from books that are current and reconciled rather than reconstructed in the last available week.
- Preparation. The return assembled in the required form, with the workings behind each figure retained rather than discarded.
- Validation. Checks back to the ledger, against prior periods, and against the conditions that make a return reject or draw attention.
- Packaging. A complete set — the return, the workings, the supporting evidence — ready to be submitted and, later, defensible.
- Deadline tracking. Every due date visible early enough to be met, each with a named owner rather than a shared assumption.
Submission is not the seventh step of that sequence. It is the first step of a separate responsibility. It places a declared position on record with an authority, it starts penalty and limitation clocks, and in most jurisdictions the party submitting takes on a defined status in the process. The consequences of what is submitted attach to the business and its officers, and they do not move because someone else pressed the button.
There is a legitimate alternative, and it is worth naming plainly. A registered tax agent, a licensed representative or an appointed filing agent can lawfully submit on a client’s behalf where that appointment exists, and for many businesses that arrangement is convenient and entirely appropriate. It is a real service and a real advantage. It is simply not the model At Par operates, and a business that wants submission handled end to end should appoint someone who is authorised to do it.
Where a filing is out of scope altogether — a jurisdiction or an obligation not covered — that belongs in the engagement at the start, not in a conversation three days before a deadline.
Written by someone else. Sent in your name.
This is the boundary businesses give away most casually, because the first message is always harmless. A statement of account, a polite reminder, a request for a remittance advice — none of it feels like an exercise of authority. The cost arrives later: a chase to a customer in the middle of a renewal conversation, a note to a supplier whose terms were about to change, a line to an authority in a register you would not have used.
The rule is not that a provider should never write. Follow-up performed by a finance function, in a neutral institutional voice, is usually better than the same message from an owner. The rule is that the business decides what is said in its name, and that the decision attaches to something specific rather than to the engagement in general.
- Standing authorisation, drawn narrowly. Routine, low-consequence messages can run on a standing approval that names the message type, the wording, the recipients and the cadence — a statement of account, a reminder on an agreed schedule. The approval covers that pattern and nothing beyond it.
- Specific authorisation for everything else. Anything touching a dispute, anything that changes or extends terms, anything to a counterparty in a live commercial conversation, anything to an authority.
- Nothing that concedes. A discount, an extension, a credit note or a write-off offered inside a message is a commercial decision wearing the clothes of a communication, and it should be authorised as the decision it is.
- Escalation is a decision, not a tone. Moving an unpaid account to legal recovery is an act of the business, taken deliberately, and no follow-up sequence should arrive there by momentum.
- Visible copy, in one place. Whatever goes out in your name should be readable by you where the rest of the account sits — not only in a mailbox you never open.
Where the line quietly blurs.
The three boundaries are clean in principle and get muddy in implementation, almost always through an arrangement set up for convenience and never revisited. These are the ones worth checking on any provider, including one you are happy with.
- Access that can both view and pay. A banking login with payment rights does not become read-only because everyone agrees not to use it that way. Access defines authority far more reliably than policy does.
- Direct debits and standing instructions. Money that leaves automatically was authorised once, sometimes years ago, occasionally by someone who has left. Those authorisations should be reviewed on a cycle rather than inherited indefinitely.
- Scheduled or auto-release payment runs. A run that releases unless somebody objects is a release with an opt-out. It is not an approval, and it should not be described as one.
- Agent registrations with an authority. Registering a provider as an authorised agent grants a status that persists until it is withdrawn, independently of the engagement it was granted for. Know exactly what it permits, and withdraw it when the engagement ends.
- Submitting under the client’s own credentials. Using the business’s login does not make the submission the business’s act in any meaningful sense. It makes the record of who acted unreadable, which is worse than either arrangement honestly declared.
- A mailbox in the company name. An address such as accounts@ operated by a provider sends in the company’s name by default. The authorisation model for that mailbox needs stating specifically.
- Automated reminder sequences. An automated chase is still a message from the business. The authorisation attaches to the sequence — its wording, triggers and stop conditions — and it should halt the moment a customer replies, disputes or pays.
A short audit worth running once a year: list every route by which money can leave, every credential that can submit something to an authority, and every address that can send in your name. Then name who holds each. Most businesses find at least one they had forgotten about.
Where At Par fits — and the limits.
At Par is built to do the preparation and stop at the line. Bills captured, matched and assembled into a payment run with evidence attached; filings identified, calculated, prepared, validated, packaged and tracked where they are in scope; follow-up drafted, scheduled and recorded. A qualified accountant (ACCA) is accountable for the work, and the boundary is the same on the first day of an engagement as on the last.
The recurring service around it: bookkeeping and month-end close, receivables and invoice follow-up, payroll, and management reporting. What a provider should own more broadly is set out separately: what an outsourced accounting provider should actually own.
If the wider question is how to keep a grip on finance you no longer perform yourself, that is outsourcing bookkeeping without losing financial control. If the boundary matters because you are leaving a provider, start with what your accounting provider should return when you leave.
Asked by owners about to hand over the consequential parts.
Who is responsible for a tax filing when accounting is outsourced? +
The business and its officers, in almost every jurisdiction. Delegating preparation does not transfer the responsibility for what is declared, and it does not move the penalties for a late or incorrect return. Even where a registered agent lawfully submits on a taxpayer’s behalf, the position filed remains the taxpayer’s position. That is the practical reason preparation and submission are worth separating: the party carrying the consequence should be the party performing the act that creates it.
What is the difference between preparing a payment and making one? +
Preparation is the long part: capturing bills, matching them to what was ordered, catching duplicates, verifying supplier bank details, scheduling by due date, checking against available cash rather than the bank balance, and presenting each line with its supporting evidence. Making the payment is the instruction to the bank at the end of all that. It takes seconds and cannot be undone by whoever performed it, which is why it belongs to the business even when everything preceding it is outsourced.
Does At Par submit tax returns for clients? +
No. At Par prepares filings and does not submit them on a client’s behalf. Where a filing is in scope, At Par identifies the obligation, calculates the figures from reconciled books, prepares the return in the required form, validates it against the ledger and prior periods, packages it with its workings and supporting evidence, and tracks the deadline. Submission sits with the client or with a separately appointed agent authorised to perform it.
Can a bookkeeper email customers on a company’s behalf? +
Drafting, scheduling and sending routine follow-up can be delegated, and it is usually done better by a finance function than by an owner. What should not be assumed is consent to any particular message. Routine reminders can run under a standing authorisation that names the wording, the recipients and the cadence. Anything touching a dispute, a change in terms, a live commercial negotiation or a communication to an authority needs authorisation for that specific message.
What is a standing authorisation in outsourced finance? +
A narrow, pre-agreed approval covering a defined pattern of low-consequence actions — a statement of account issued monthly, a reminder on an agreed schedule, using wording already approved and going to a defined group of recipients. It works because it describes exactly what may happen. A standing authorisation that reads as general permission for a provider to communicate as it sees fit is not a control, and the difference is the specificity rather than the existence of the approval.
Should an outsourced provider be registered as a company’s tax agent? +
Only deliberately, and only where submission is genuinely part of what has been bought. An agent registration grants a status with an authority that persists until withdrawn, independently of the engagement that prompted it, and it can carry access and permissions well beyond the filing it was intended for. If it is granted, its scope should be understood at the time and it should be withdrawn when the engagement ends. At Par does not operate as a submitting agent.
What should happen to a provider’s access and authorisations when an engagement ends? +
All of it should be withdrawn on a stated date, and the withdrawal should be verified rather than assumed. Named user accounts in the accounting system and any banking access come first. Agent registrations with an authority persist independently of the engagement and have to be cancelled separately. Shared mailboxes, portal logins and credentials the provider held on the company’s behalf should be changed. Access nobody remembers granting is the most common way authority outlives the relationship it was granted for.
Who decides whether to escalate an unpaid invoice legally? +
The business, explicitly, as a commercial decision rather than the next stage of a follow-up sequence. Legal escalation changes the relationship with a customer permanently, carries cost, and often forecloses a negotiated outcome that was still available. A provider can supply what the decision needs — the invoice history, the evidence, the correspondence, the promises made and broken — but the decision itself belongs to the business, and no automated sequence should arrive there by default.
Why are payments, tax filings and customer communications treated as one question? +
Because each creates a commitment outside the business that the business, not the provider, answers for. Money released must be recovered from a counterparty. A filing on record with an authority can only be changed by a further act with its own consequences. A message that has been read cannot be unread. Everything preceding those three acts is preparation and can be delegated safely; the acts themselves attach to whoever the outside world holds responsible.
Can a client give an accounting provider more authority than this? +
With some providers, yes — payment authority under dual bank authorisation and appointed-agent submission are established, lawful models, and for larger finance functions they can work well. At Par is not one of them. Preparing payments without moving client money, and preparing filings without submitting them, are fixed properties of the service rather than default settings. A business needing money moved or returns submitted end to end should appoint a provider authorised and structured to do it.
Tell us what your provider does today. We’ll show you where the line sits.
How payments get released, who submits your filings, and what goes out in your name. Bring the current arrangement and we will map it against the three boundaries above — including the parts where we would not be the right answer.
Prefer to reach us directly? Tell us a little and we'll come back with a time.
Ask about authorityWe use your details only to prepare for and hold this call. No spam, ever.
Reviewed by an ACCA on the At Par team · Last updated 29 July 2026 · The three At Par boundaries stated here are fixed properties of the service, not configurable options. See what we actually do.