Baker Tilly

Loading...

Subscribe to newsletters
About Us
Careers
Client Portals
Pay Invoice
Locations
Industries
Services
Professionals
Legal & Privacy
CCPA Privacy
Contact Us
Request a Proposal

© 2024-2026 Baker Tilly US, LLP / Baker Tilly Advisory Group, LP

Baker Tilly US, LLP and Baker Tilly Advisory Group, LP and its subsidiary entities provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.

Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are independent members of Baker Tilly International. Baker Tilly International Limited is an English company. Baker Tilly International provides no professional services to clients. Each member firm is a separate and independent legal entity and each describes itself as such. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP are not Baker Tilly International’s agent and do not have the authority to bind Baker Tilly International or act on Baker Tilly International’s behalf. None of Baker Tilly International, Baker Tilly Advisory Group, LP, Baker Tilly US, LLP, nor any of the other member firms of Baker Tilly International has any liability for each other’s acts or omissions. The name Baker Tilly and its associated logo is used under license from Baker Tilly International Limited.

Article

Data integrity and security in AI companies: A comprehensive approach

Feb. 19, 2025 · Authored by Daniel Olson

Subscribe to newsletters

Share

Related sections

  • Technology

As companies increasingly harness the power of artificial intelligence (AI) to drive innovation and efficiency, the importance of maintaining data integrity and security can’t be overstated.

AI systems automate data processing, which enhances operational efficiency but also introduces potential risks, particularly concerning data accuracy and security. For companies developing AI products, robust management practices and audit strategies are essential to safeguard financial data and ensure compliance with regulatory standards.

Don’t overlook data integrity and security when expanding operations.

Robust management practices, enhancing access controls, and safeguarding compliance with regulatory standards protect financial data and mitigate risks.

Data integrity and accuracy

AI systems are designed to process vast amounts of data quickly and efficiently. However, this automation can inadvertently introduce risks of errors if not properly managed. Management must implement rigorous controls to ensure that data input is accurate and that financial statements reflect true transactions. This involves establishing a framework for data validation, which includes automated checks and balances to identify discrepancies before they impact financial reporting. Regular audits of data processing systems should be conducted to assess the effectiveness of these controls and to ensure that the integrity of the data is maintained throughout its lifecycle.

Depending on the number of transactions that are being processed, a representative sample of transactions can be tested in a given period to verify the accuracy and completeness of the outputs against source documentation such as contracts and price listings. This can reassure an organization that, on a statistical basis, AI systems are processing data  appropriately.

Access controls and security

As cyber threats become increasingly sophisticated, protecting sensitive financial data is paramount. AI companies must prioritize the implementation of stringent access controls and security measures.

This includes a thorough review of:

  • Logical access protocols
  • Authentication methods
Daniel Olson profile photo

Daniel Olson

Principal

Related sections

  • Technology
  • Data encryption practices

    • Management should ensure that only authorized personnel have access to critical financial data and that robust change management processes are in place to track alterations to sensitive information.

    Regular security assessments and penetration testing can help identify vulnerabilities and fortify defenses against unauthorized access, thereby safeguarding the organization’s financial integrity.

    Management should also consider how AI uses data in a given system to prevent a potential unwanted leak of proprietary information.

    Safeguards and policies should be implemented to govern the use of AI and specify what is being used as well as what to do in the instance of a perceived threat or a security breach.

    Third-party service providers

    Many AI companies rely on third-party vendors for essential services, such as cloud hosting and data storage. While these partnerships can enhance operational capabilities, they also introduce risks that must be carefully managed.

    Management should assess the risks associated with these third-party relationships, including their potential impact on various processes, controls, and the overarching financial statement drafting process.

    This involves evaluating the due diligence processes employed when selecting vendors, as well as ongoing monitoring of their compliance with agreed-upon service levels and security standards.

    Establishing clear contractual obligations regarding data handling and security can help mitigate risks associated with third-party service providers.

    System interdependencies

    AI companies often operate within a complex ecosystem of interconnected systems, including data storage solutions and processing algorithms.

    Understanding these interdependencies is critical for management in evaluating data flow and its implications for financial reporting.

    Management should map out the various systems and their interactions to identify potential points of failure that could affect data accuracy or security. This comprehensive understanding will benefit management in audit readiness given the increasing focus on information technology and key reports.

    This will further enable management to pinpoint areas where process improvements such as automation can be employed to lower the risk of error.

    Regulations and standards

    Compliance with regulatory requirements is fundamental to an AI company. Management must stay informed about the evolving landscape of data privacy laws and financial reporting standards that affect their operations.

    This includes understanding the implications of regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), which impose stringent requirements on data handling and reporting.

    Furthermore, companies must establish protocols to demonstrate safeguards against data loss and potential litigation in the event of breaches or cyber threats. Regular training and awareness programs for employees can help foster a culture of compliance and vigilance.

    Solutions

    Advanced data analytics tools can help identify anomalies and improve the accuracy of financial reporting.

    Foundation in data analytics for audit testing

    Utilizing data analytics can significantly enhance an organization’s data for business strategy as well as audit efficiency and effectiveness. Given the nature of data in AI companies, which is often more on-demand, management can collaborate with stakeholders in the organization to develop controls and processes to analyze large datasets for trends or anomalies that may indicate issues in revenue recognition or expense reporting.

    This can aid in the audit process by allowing audit firms to gain deeper insights into financial data, enabling them to identify potential risks and areas for improvement more swiftly.

    Data availability

    AI operations can offer streamlined access to data, which can facilitate the audit process. Management can provide audit teams with read-only access to relevant data and details, ensuring that auditors have the necessary information to support their assessments without compromising data security.

    This approach not only enhances transparency but also fosters collaboration between management and auditors, ultimately leading to more accurate and reliable financial reporting.

    Have questions? Baker Tilly can help.

    Contact a specialist