Voice dictation for accountants: client confidentiality, GDPR and time saved

Accountancy is as much a writing profession as a numbers one: file notes, engagement letters, client correspondence, review comments, board and management reports, annotated forecasts. A good AI-based voice dictation tool saves a practice a significant amount of time. But for an accountant, the choice of a digital tool is not neutral: a duty of confidentiality and the GDPR set strict requirements that most consumer-grade solutions do not meet.

Confidentiality is a fundamental principle for accountants

Confidentiality is one of the five fundamental principles of the IESBA International Code of Ethics for Professional Accountants (Section 114), adopted by the Irish professional bodies, including Chartered Accountants Ireland and CPA Ireland, and by ACCA and others across the English-speaking world. A prudent starting point, set out in the Code itself, is to treat all unpublished information about a client's affairs, however obtained, as confidential.

In a digital context, that duty extends to the tools used to process the information. Dictating a file note, a client letter or a review comment to a tool that sends audio to uncontrolled third-party servers creates a real risk to client confidentiality. Our guide on voice dictation and GDPR explains where your voice actually goes once you press dictate.

What the Code of Ethics and regulators say about AI

This is not a theoretical concern. In its Technology-related revisions to the Code, effective 15 December 2024, IESBA strengthened the confidentiality provisions for the digital age: the duty now expressly spans the full data lifecycle, from collection and use to storage and destruction. In practice, that means confidential client information should not be reused for other purposes, such as training AI tools, without appropriate authorisation. The profession's own ethics rules now speak directly to how data is handled by technology.

Regulators point the same way. Ireland's Data Protection Commission has published guidance on AI and Large Language Models, and on cloud processing, confirming that a cloud provider is typically a data processor and the firm the data controller: the controller must have a written contract in place and satisfy itself that the provider's security is appropriate for the personal data involved.

Before using an AI tool with confidential client information, it is prudent to require the following guarantees from providers. These map directly to the obligations set out in the EU General Data Protection Regulation (GDPR), transposed in Ireland by the Data Protection Act 2018:

The risk of US-based tools

Many well-known consumer voice dictation tools rely on providers such as OpenAI and Anthropic, with data hosted on infrastructure located in the United States. For an accountant in Ireland or elsewhere in the EU, this raises several issues:

• Data hosted in the US can, under certain conditions, be reached by American authorities. The US CLOUD Act allows authorities to compel US-based providers to disclose data even when it is stored abroad.
• Some services use submitted content by default to improve their AI models, which is difficult to reconcile with the confidentiality owed to clients.
• Terms of service, however detailed, do not by themselves amount to the documented processing arrangements the GDPR and your ethics code expect.

Fast Dictate Pro: built for practices that handle confidential data

Fast Dictate was designed for professionals subject to confidentiality obligations. The Pro Plan (€19.90/month) offers the guarantees that matter most when handling sensitive client information:

• EU servers located in France, certified to ISO/IEC 27001. Zero data retention.
• No model retraining on your voice data. Your dictations are not used to improve a shared model.
• Documented GDPR compliance, with clear contractual terms about data processing and retention, including a Data Processing Agreement under Article 28 of the GDPR. You act as the data controller and Fast Dictate as your data processor.
• Responsive support, so you can raise any compliance matter directly with the team.

EU data residency and zero retention help you keep client information under EU jurisdiction and outside the reach of the US CLOUD Act. The tool supports your duty of confidentiality; it does not replace your own professional judgement about which information is appropriate to dictate.

Your accounting vocabulary, recognised from the first dictation

Accountancy has its own language, and a dictation tool that mangles it wastes the time it is meant to save. Terms and acronyms such as VAT, PAYE, PRSI, USC, RCT, corporation tax, accruals, depreciation, trial balance or the profit and loss account need to be transcribed correctly, along with the names of your clients and the software you use.

Fast Dictate recognises this vocabulary from the very first dictation, with no voice training required. You can go further by building a custom vocabulary: add your proper nouns, in-house acronyms and technical terms once, and they are transcribed correctly on every dictation, in every application. Formatting rules let you standardise recurring wording automatically as well.

Practical use cases for a practice

GDPR checklist: verify your dictation tool's compliance

A practice handles large volumes of personal data: payroll and the personal details of its clients' employees, tax information, directors' contact details. Before adopting any voice dictation software, here are the essential compliance checkpoints to validate with the provider, in line with the GDPR:

• Processing location: is voice data processed in the EU? Ask for a written answer. US-based hosting exposes your data to the CLOUD Act, in tension with your duty of confidentiality.
• AI model retraining: does the provider use your dictations to improve its AI? If so, it is a potential breach of client confidentiality. Require a contractual non-reuse commitment.
• Data retention: how long is audio data stored after transcription? With Fast Dictate, it is deleted immediately.
• Sub-processors: does the provider use sub-processors outside the EU for data processing? Verify the full chain.
• Right to erasure: can you request deletion of all your data at any time?
• GDPR documentation: under the GDPR you act as the data controller and the provider as a data processor. Can the provider supply a DPA (Data Processing Agreement) compliant with Article 28 of the GDPR?

If your current tool does not check every box, it represents a risk for your practice. The Fast Dictate Pro plan was designed to meet each of these criteria.

Comparing dictation software for accountants

How do the main AI voice dictation tools compare for an accounting practice in Europe, where client confidentiality and data residency matter?

For a full head-to-head on each tool, see our detailed reviews: Wispr Flow alternative, SuperWhisper alternative and Dragon alternative.

EU data residency and ISO/IEC 27001 hosting are features of the Pro plan (€19.90/month); the lower-priced Standard plan (from €9.90/month) does not include French server residency, so accountants handling confidential client information should choose Pro. See our plans and pricing page for the full breakdown.

Roll out voice dictation in your practice in 5 minutes

Getting started with Fast Dictate in an accounting practice takes less than five minutes, with no IT department involvement required. Here is how:

1. Create a free account on fastdictate.com. No credit card is required. The free plan includes 2,000 words per week, enough to test the tool on real documents. Our how it works page walks through the basics.
2. Download the desktop app on Mac or Windows. Installation takes under a minute, with no complex setup.
3. Test in your usual software: open Word, Outlook, Xero, QuickBooks, Sage or your practice tool. Press the dictation shortcut and speak normally. The text appears where your cursor is.
4. Upgrade to Pro for confidential data: your voice data is then processed exclusively on ISO 27001-certified servers in France, with a contractual commitment that it is never reused to train AI models.

For a practice with several staff, each person creates their own account and installs the application on their own Mac or Windows workstation. There is no central server to configure and no IT administrator required. Within five minutes, the whole practice can dictate in any application.

The transition from a dictaphone or manual typing is immediate: no voice training and no adaptation period. The AI recognises your voice from the very first dictation and adapts to accounting and tax terminology.

When another tool may fit better

No single tool is right for every practice. If your priority is a highly specialised vocabulary running entirely offline on Windows, Dragon (Nuance) remains a well-established reference. It is a perpetual-licence product that processes speech locally on the device, with no audio leaving the workstation. Its trade-offs are a Windows-only footprint (no Mac version since 2018) and a license cost of several hundred dollars per seat.

Fast Dictate takes a different approach: a cloud service with EU data residency in France under the GDPR, AI clean-up and reformatting, and the same workflow across Windows, macOS, iOS and Android. Which fits best depends on whether you value offline operation and deep vocabulary tuning, or EU data residency and cross-platform consistency.

Frequently asked questions