Control over AI

For accounting and bookkeeping firms

Use AI in your firm and keep client data safe.

See which AI tools your firm uses and record what is allowed for each one. Staff get help as soon as client data appears in their text.

Prefer to try it yourself? 14 days free, no credit card.

AI is already part of the work in your firm. Oversight is not.

Accounts assistants use AI to rewrite notes to the accounts, payroll staff put salary questions to ChatGPT and tax advisers try out new tools. It saves time. But those texts hold names, ID numbers and figures that clients trusted the firm with. Here's how to stay in control, in four steps.

1 See

See which AI tools the firm uses.

The partners want to know whether staff really use the approved AI environment, or their own tools. The catalogue shows the tools seen in this firm, from Copilot and ChatGPT to Twinfield and a new bookkeeping assistant, each with a risk score and the firm's decision. Usage and Compliance show what share of AI use goes through approved tools.

More about See

All tools

Every known AI tool, filterable by risk and properties.

Add your own tool
AllAllowedLimited useNo decision yet5Not allowed
Search by tool, vendor, domain or former name…
FiltersOnly in use9 tools
ToolSectorCountryVisitsRiskDecision
DeepSeek
DeepSeek
GeneralChina96Critical · 90/100Not allowed
ChatGPT
OpenAI
GeneralUnited States1,842High · 66/100Limited use
Boekie AINew
Boekie AI
FinanceNetherlands84Medium · 51/100No decision yet
Exact Assistant
Exact
FinanceNetherlands312Medium · 46/100Limited use
Claude
Anthropic
GeneralUnited States926Medium · 45/100Limited use
Silverfin
Visma
FinanceBelgium604Low · 37/100Allowed
Twinfield
Wolters Kluwer
FinanceNetherlands926Low · 35/100Allowed
Basecone
Wolters Kluwer
FinanceNetherlands431Low · 35/100Allowed
Microsoft 365 Copilot
Microsoft
GeneralUnited States8,124Low · 28/100Allowed

An impression of the AI tools catalogue. The tools and risk scores come from the product. The decision in the last column is your firm's own.

2 Decide

Assess a new tool and record what is allowed.

A colleague tries Boekie AI, a new bookkeeping tool that reads receipts. Nobody has assessed it yet. The screen shows the assessment of Boekie AI: who the vendor is, where the data is held, whether it trains on input and whether a data processing agreement (DPA) is available. The firm decides, for example, to allow limited use without client data, and records that in the AI register.

More about Decide
AI register
Boekie AI

Boekie AI

Decision

Decision

Decision
No decision yet.
Designated alternative
Silverfin Change

Not in the register yet. Make a decision to add it.

About the tool

From the BeeSensible catalog, not editable here.

RiskMedium · 51/100BeeSensible's estimate, not a legal judgement · reviewed on 2 Oct 2026

No data-processing agreement in the catalogue. Reads the bookkeeping page it runs on, so it sees more than just the invoice. Little public information about the underlying model. Dimensions: Data governance (3), Jurisdiction (1), Compliance (4), Incidents (1), Integration scope (4), Vendor trust (3).

Vendor

Vendor
Boekie AI
Country
Netherlands
Kind of tool
Bookkeeping AI

Data

Trains on input
Unknown
Hosting and region
EU
Processing agreement from the vendor
Not available

Regulation

EU AI Act
Depends on use
Certifications
Unknown

The classification is about the tool itself; which obligations apply depends on your use.

Product example with fictional data.

3 Help

Help staff protect client data while they work.

An assistant pastes a note to the accounts into an AI tool to shorten it. The client's name, company number and result are all in it. BeeSensible highlights names, company numbers, ID numbers and amounts in the text. One click turns them into a placeholder such as [NAME1], or removes them. The firm can also set masking to happen automatically when text is pasted or sent. A payroll journal can be anonymised the same way before it is shared.

Names that only mean something at the firm, such as the code name of an acquisition or an engagement number, can be added as custom terms.

Custom terms that fit here

  • Project Helix Project
  • Northhaven acquisition Project
  • Van Doorn Holding Client
  • Engagement 26-0471 Code or reference
More about Help
Gemini
Can you make this note to the financial statements shorter and more businesslike?
Of course. Do check the client details before you share this outside the firm.
BeeSensible puts its highlights right in the text.

Product example with fictional data.

4 Substantiate

Show how your AI policy works in practice.

During a quality review, the reviewer asks what the firm does to keep client data confidential. Each month or quarter you create a report: how many tools have a decision, how many critical details were adjusted before sending, and how often staff chose the approved alternative. Always for the whole firm, never per person, and downloadable as a PDF.

More about Substantiate
Accountability

AI use, decisions and sensitive data, for accountability and audits.

Q3 2026Create report

1 July to 30 September 2026

Visibility of AI use

GDPR art. 5(1)(c) · NIS2 art. 21(2)(a) · AI Act art. 4(1)

11
AI tools observed
7
Tools with a decision
7 of 11 observed tools

Which AI tools staff visited, and for how many of them a decision is recorded.

Explanation

Protection of sensitive data

GDPR art. 5(1)(c) and 32(1) · NIS2 art. 21(2)(d)

3,202
Critical detections
86%
Adjusted
2,754 of 3,202 masked or removed

How often BeeSensible flagged critical data, and how often it was then masked or removed.

Only in the apps where BeeSensible helps; what happens elsewhere is not included.

Explanation

Supporting staff

NIS2 art. 21(2)(g) · AI Act art. 4(1)

148
AI notices shown
37%
Alternative opened
after 55 of 148 notices

How often an AI notice appeared, and how often the suggested alternative was opened after it.

These figures do not show whether staff are sufficiently trained.

Explanation

Decisions as they stood on 30 September 2026, at the end of the period.

Measurement coverage

How large the part is that BeeSensible measures.

  • BeeSensible is activated on 93% of the seats

    112 of 120 seats in the subscription. Activated means the extension or the desktop app reported in at least once; it does not mean every account is protected at all times.

  • 78% of AI use was in apps where BeeSensible helps (estimate)

    › How is this calculated?

Relevant laws and regulations

GDPR art. 5(1)(c) · NIS2 art. 21(2)(a) · AI Act art. 4(1) · GDPR art. 5(1)(c) and 32(1) · NIS2 art. 21(2)(d) · NIS2 art. 21(2)(g) · AI Act art. 4(1)

Show provisions ⌄

Product example with fictional data.

A customer's view

"Everyone here knows you have to be careful with customer data. But that awareness fades when you're busy. Knowledge is no guarantee of behaviour. That's exactly why we use BeeSensible."
Portrait of Debby Elfrink, operations director at Speck Pompen Debby Elfrink Operations director, Speck Pompen

This customer works in a different sector.

Trust and getting started

Your data stays safe, and getting started is quick.

What happens to your data

  • Text is checked on our own servers, hosted by the European companies Scaleway and Hetzner, and deleted straight away.
  • The dashboard shows totals for the whole organisation, never a breakdown by employee. Figures only appear once five or more users are active.
  • You get a data processing agreement (DPA). The product DPIA and security information are available on request.
Go to the Trust Center

How to get started

  • Install the extension on a few workstations, or have IT roll it out centrally through Intune or Group Policy, on any plan.
  • Employees get an explanation and short videos about what they'll see and what they can do.
Quick start for admins

Good to know

Questions we often get.

Does BeeSensible highlight amounts and company numbers?

Yes. Besides names, ID numbers and contact details, it also highlights bank account numbers, amounts, company numbers and organisation names. In each detection profile you choose which types are included and how strictly. Client names and engagement numbers the detection does not know can be added as custom terms.

What does this record for our quality system?

For each AI tool: the decision, who made it, the condition, documents such as the DPA, and the review date. You can export that as CSV or PDF, together with the report for a period.

How does this fit professional rules and the GDPR?

Professional rules such as the VGBA, the Dutch code of conduct for accountants, ask for reasonable measures so that staff keep client information confidential. BeeSensible can be one of those measures, and shows how it is applied. The AI register feeds into your record of processing activities and your DPIA. It is for the firm to judge what is appropriate.

Does BeeSensible block AI tools?

Not on its own. People see what was found and what you decided about a tool. You decide whether someone can still go ahead with a tool that is not allowed, and whether masking happens by default. What happens after a highlight or a notice is counted, without content and without a name.

Does this replace our AI policy and training?

No, it builds on them. Policy and training lay the groundwork. BeeSensible helps staff apply those rules while they work.

Read more about AI governance for accountants

Start by seeing which AI tools your firm uses

Start with a few colleagues, or see it in a demo first.

Start free trial

14 days free, no credit card. Rolled out across your organisation within an hour.

Portrait of Rens Timmermans from BeeSensible

Prefer someone to walk you through it?

Rens, BeeSensible

I'm happy to give you a twenty-minute tour. Leave your details and I'll find a time that suits you. You're also welcome to call or email.

Prefer to talk to someone first?

Want a live demo, or a quote for 100+ users? Leave your details and we'll be in touch within one working day.