your CPAs advise. Prest0n does the rest.

the IRS now tells practitioners to handle client data using only secure, enterprise-approved AI. here is what regulators have said, and how Prest0n compares, question by question.

what the rules say about AI, for finance & CPA

each in its own words, quoted in the sources below.

the IRS, June 2026: practitioners must handle all client data using only secure, enterprise-approved AI, with robust confidentiality safeguards in place.
federal tax law: a paid return preparer who knowingly or recklessly discloses information furnished for a return commits a misdemeanor.
the FTC’s Safeguards Rule: a tax preparation firm is a financial institution under the rule, and must keep a written information security program.
FINRA, 2024: its rules and the securities laws apply when member firms use generative AI, just as they apply to any other tool.

Prest0n and Claude, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Claude: on Free, Pro and Max you choose whether your chats train its models (kept five years if you allow it, 30 days if not); its commercial products are not used for training by default.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Claude: a few things are off-limits even with your approval, like trading securities or moving money between accounts.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Claude: before Claude Duet sends a message, makes a payment, signs a document or deletes anything, it shows you what it is about to do and waits for your approval.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Claude: you, task by task: its task list shows what Claude Duet has done and is doing, and you can steer it mid-task.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Claude: Claude Duet: a research preview for subscribers on Pro, Max and Ultra plans in the US, through a waitlist.

Prest0n and ChatGPT, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. ChatGPT: on personal plans, content is used to train its models, with an opt-out in settings; Business, Enterprise and Edu workspace data is not used for training by default.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. ChatGPT: ChatGPT Work gathers context, makes a plan and checks in when judgment or approval matters; cloud execution runs supported steps on OpenAI-managed infrastructure.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. ChatGPT: ChatGPT can request a separate confirmation before actions that could create a financial, legal, account or other consequential commitment.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. ChatGPT: you, site by site: by default it asks before visiting a new website, and allowing a website doesn’t approve every action there.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. ChatGPT: ChatGPT Work: you give it a goal, and schedule one-time or recurring tasks for yourself.

Prest0n and Muse, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Muse: your interactions help train Meta’s AI models by default, a default Meta calls good; you can opt out with a switch in Muse settings.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Muse: Muse for Small Business: you approve before anything publishes, sends or spends, and you can undo it.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Muse: Muse checks with the person before sensitive actions like sending an email or making a purchase.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Muse: you, at any point: its computer has a full browser that you and your agent can use, and you can step in whenever you like.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Muse: one person: Muse is a personal AI agent that completes tasks on your behalf.

Prest0n and OpenAI dots, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. OpenAI dots: a personal dot follows your ChatGPT data controls; Enterprise data is not used to train models by default.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. OpenAI dots: a dot can make mistakes, and stopping a task doesn’t undo actions it has already completed; removing access does not reverse them either.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. OpenAI dots: before an action affects your accounts or shares information, a review decides whether your dot proceeds, needs your approval or hands the step to you.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. OpenAI dots: workspace admins choose who can use dots, configure their capabilities and can pause a dot; each member chooses whether to create one.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. OpenAI dots: one member each: a dot is a personal agent, and each member chooses whether to create one.

Prest0n and Instinct, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Instinct: its terms let it use your materials to train AI models unless you opt out; what you add to its Vault is used only to provide the service to you.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Instinct: its terms appoint it as your agent to enter into agreements, commitments or transactions for you, binding on you as if you entered them yourself; its maker is not responsible for unintended actions.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Instinct: its terms say it may add confirmation requirements on certain actions, with no promise that they will prevent unintended ones.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Instinct: its terms authorize it to take the actions it deems responsive to what you ask.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Instinct: one person: its terms permit it for your personal use only.

Prest0n and Grok Bot, for finance & CPA

what happens to your content — Prest0n: your content is used only to provide the service to your firm, and Prest0 is committed to it never being used to train shared models; zero retention at every model provider is being built. Grok Bot: it follows your Cursor account’s data settings: with Privacy Mode on, customer data is not used for training.
when it acts for you — Prest0n: it works within the rules your management sets. these rules are built into the system: Prest0n cannot turn them off. governed actions land in an append-only audit feed your team can read. Grok Bot: an approval controls the proposed action; it does not reverse work already completed.
what waits for a person — Prest0n: by default, anything that leaves your firm waits for the person accountable for it to authorize it; only that person or your workspace can choose to send a kind without asking. Grok Bot: it depends on the tool, the risk of the action and your Auto-review rules: most actions run on their own, and an email you ask for in chat goes out once Auto Review allows it.
who decides what it may do — Prest0n: management decides what Prest0n can see and do, and permissions are resolved for the person asking, on every single message. Grok Bot: your rules and a review model: Ask first rules always stop matching actions, and Auto Review is on by default.
who it works for — Prest0n: your whole firm: one employee your team works with together. every person on your team uses it at no extra cost: you pay only for Prest0n employees. Grok Bot: each member, on their own Cursor account: on a self-serve Cursor Teams plan, every member gets Grok Bot.

always with your people

what waits for a person is up to you. what the field reserves for its people stays with them, always.

no tax or investment advice.
never moves money, pays a bill or changes bank details.
no filing of returns and no posting of journal entries.
a licensed professional reviews and releases the work.

runs on its own, as far as you allow

models and analysis
the advisor's client service
month-end close support
research and filings
cash forecast and FP&A pack

you decide how much it does

nothing runs without your permission. anything runs with it. as much or as little of the work as you choose: for you, and for your team. by default, anything that leaves your firm waits for the person accountable for it; only that person or your workspace can choose to send a kind without asking.

what it means for everyone at the table

one Prest0n employee, and what it changes for each person deciding.

managing partners: busy season without the busy-season hires: more clients, same team.
CPAs and advisors: the advice and the release stay yours; the prep arrives done.
staff accountants: reconciliations, exception lists and missing-document requests, handled.
client service: client email triaged, review packets prepared, follow-ups written.
controllers: bank-change requests routed for a callback; Prest0n never moves money.
IT and security: client data in your own workspace; permissions per person, actions on record.

sources

every statement about another product rests on its maker’s own published words, and every rule on a court’s, a regulator’s or the law’s own text, each quoted below with the day it was read.

Internal Revenue Service, Office of Professional Responsibility: Introductory Guidelines for Responsible AI Use in Federal Tax Practice (IRS Office of Professional Responsibility, Issue Number 2026-19 (June 24, 2026), at 4), https://www.irs.gov/pub/opr-taxpros/issue-number-2026-19-introductory-guidelines-for-responsible-ai-use-in-federal-tax-practice.pdf: “Practitioners must strictly handle all client data using only secure, enterprise-approved AI. AI systems should be utilized with robust confidentiality safeguards firmly in place.” (read 6 November 2026)
Office of the Law Revision Counsel, U.S. House of Representatives: 26 U.S.C. § 7216: Disclosure or use of information by preparers of returns (26 U.S.C. § 7216(a)), https://uscode.house.gov/us/usc/t26/s7216/: “Any person who is engaged in the business of preparing, or providing services in connection with the preparation of, returns of the tax imposed by chapter 1, or any person who for compensation prepares any such return for any other person, and who knowingly or recklessly” (read 6 November 2026)
Office of the Law Revision Counsel, U.S. House of Representatives: 26 U.S.C. § 7216: Disclosure or use of information by preparers of returns (26 U.S.C. § 7216(a)(1)), https://uscode.house.gov/us/usc/t26/s7216/: “discloses any information furnished to him for, or in connection with, the preparation of any such return, or” (read 6 November 2026)
Federal Trade Commission: § 314.2 Definitions (16 C.F.R. § 314.2(h)(2)(viii)), https://www.ecfr.gov/current/title-16/part-314/section-314.2: “An accountant or other tax preparation service that is in the business of completing income tax returns is a financial institution because tax preparation services is a financial activity listed in 12 CFR 225.28(b)(6)(vi) and referenced in section 4(k)(4)(G) of the Bank Holding Company Act, 12 U.S.C. 1843(k)(4)(G).” (read 6 November 2026)
Federal Trade Commission: § 314.3 Standards for safeguarding customer information (16 C.F.R. § 314.3(a)), https://www.ecfr.gov/current/title-16/part-314/section-314.3: “You shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue.” (read 6 November 2026)
FINRA: FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language Models (FINRA Regulatory Notice 24-09 (June 27, 2024)), https://www.finra.org/rules-guidance/notices/24-09: “FINRA reminds its member firms that FINRA’s rules–which are intended to be technology neutral–and the securities laws more generally, continue to apply when member firms use Gen AI or similar technologies in the course of their businesses, just as they apply when member firms use any other technology or tool.” (read 6 November 2026)
Anthropic: Updates to Consumer Terms and Privacy Policy, https://www.anthropic.com/news/updates-to-our-consumer-terms: “We will train new models using data from Free, Pro, and Max accounts when this setting is on (including when you use Claude Code from these accounts).” (read 6 November 2026)
Anthropic: Updates to Consumer Terms and Privacy Policy, https://www.anthropic.com/news/updates-to-our-consumer-terms: “We are also expanding our data retention period to five years if you allow us to use your data for model improvement, with this setting only applying to new or resumed chats and coding sessions. If you don't choose this option, you will continue with our existing 30-day data retention period.” (read 6 November 2026)
Anthropic: Is my data used for model training?, https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training: “By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.” (read 6 November 2026)
Anthropic: Introducing Claude Duet, https://claude.com/resources/articles/claude-duet: “A few things are off-limits even with your approval, like trading securities or moving money between accounts.” (read 6 November 2026)
Anthropic: Introducing Claude Duet, https://claude.com/resources/articles/claude-duet: “But before it sends a message, makes a payment, signs a document, or deletes anything, it shows you exactly what it’s about to do and waits for your approval.” (read 6 November 2026)
Anthropic: Claude Duet Safety, Privacy, and Security, https://claude.com/resources/articles/claude-duet-safety-privacy-and-security: “You can see what Claude Duet has done and is doing in its task list, where each task has its own page, and steer it mid-task.” (read 6 November 2026)
Anthropic: Get started with Claude Duet, https://support.claude.com/en/articles/17631495-get-started-with-claude-duet: “Claude Duet is available as a research preview to users on Pro, Max, and Ultra plans in the US, through a waitlist.” (read 6 November 2026)
OpenAI: Plans and Pricing, https://chatgpt.com/pricing/: “Plan: Free, Feature: Content is used to train our models, Opt-out available” (read 6 November 2026)
OpenAI: Plugins in ChatGPT, https://chatgpt.com/features/plugins/: “Plus and Pro users can manage data-use preferences in their settings” (read 6 November 2026)
OpenAI: ChatGPT Work cloud security, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-cloud-security: “Business, Enterprise, and Edu workspace data is encrypted in transit and at rest and is not used to train OpenAI models by default.” (read 6 November 2026)
OpenAI: ChatGPT Work: AI for Projects, Tasks, and Teams, https://chatgpt.com/work/: “Give ChatGPT Work a goal, schedule recurring work, or ask it to watch for updates while it gathers context, makes a plan, and checks in when judgment or approval matters.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “Cloud execution runs supported steps on OpenAI-managed infrastructure.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “Allowing a website doesn’t approve every action on that site. ChatGPT can request a separate confirmation before actions that could create a financial, legal, account, or other consequential commitment.” (read 6 November 2026)
OpenAI: ChatGPT Work Overview, https://learn.chatgpt.com/docs/enterprise/chatgpt-work-overview: “By default, ChatGPT asks before visiting a new website.” (read 6 November 2026)
OpenAI: ChatGPT Work: AI for Projects, Tasks, and Teams, https://chatgpt.com/work/: “Schedule one-time or recurring tasks for yourself.” (read 6 November 2026)
Meta: How We Built Safety Into Muse, https://muse.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse: “We think this is a good default — every Muse user gets a better personal agent as we all collectively use the product and help the model understand the intricacies of human life.” (read 6 November 2026)
Meta: How We Built Safety Into Muse, https://muse.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse: “If you do not want your data to be used in model training at all, you can opt-out via a simple switch in Muse settings.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “People can also opt out of their interactions being used to train Meta’s AI models.” (read 6 November 2026)
Meta: Muse for Small Business: Build Your Company with AI, https://muse.ai/business: “No. Nothing publishes, sends or spends without your approval, and you can undo it.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “Muse checks with the person before sensitive actions like sending an email or making a purchase.” (read 6 November 2026)
Meta: Muse — Your Personal AI Agent from Meta, https://muse.ai/: “Muse Secure VM is a persistent, isolated Linux computer with a full browser that you and your agent can use to complete tasks, allowing you to intervene at any point.” (read 6 November 2026)
Meta: Introducing Muse: The World’s First Personal AI Agent Built for Everyone, https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/: “Muse is a personal AI agent. It doesn’t just answer questions, it actually does the work.” (read 6 November 2026)
Meta: The Future Is for Everyone: Muse for Small Business, https://about.fb.com/news/2026/09/introducing-muse-small-business/: “Earlier this month we introduced Muse, a personal AI agent available in the US and Canada that completes tasks on your behalf.” (read 6 November 2026)
OpenAI: Control your dot, https://learn.chatgpt.com/docs/dots/controls: “Your ChatGPT data controls also apply to eligible conversations with your dot and the work it carries out.” (read 6 November 2026)
OpenAI: Safety and security in dots, https://learn.chatgpt.com/docs/enterprise/dots-security: “Enterprise data is not used to train models by default.” (read 6 November 2026)
OpenAI: Meet dots, https://learn.chatgpt.com/docs/dots: “Your dot can make mistakes, and stopping a task doesn’t undo actions it has already completed.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Removing access does not reverse actions already completed in another service.” (read 6 November 2026)
OpenAI: Meet dots, https://learn.chatgpt.com/docs/dots: “Before an action affects your accounts or shares information, review determines whether your dot can proceed, needs your approval, or must hand a step over to you.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “You choose who can use dots, configure their capabilities, and manage personal dots across your workspace.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Pause a dot from Admin Console when you need to stop it temporarily. An admin pause prevents the member from resuming the dot.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “Each member chooses whether to create a personal dot.” (read 6 November 2026)
OpenAI: Manage dots permissions and capabilities, https://learn.chatgpt.com/docs/enterprise/dots-admin-guide: “A dot is a personal agent in ChatGPT that can take on ongoing work, use connected apps, and delegate tasks to Work or Codex.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You agree that we may use Materials to develop, provide, maintain and improve the Services and our other products and services, including training AI models, and for any purpose specified in our Privacy Notice, subject to your opt-out rights and Vault materials as outlined below.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “If you do not want us to use your Materials to train AI models, you can opt out by visiting app.instinct.com/settings.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “However, for Materials that you add to our feature of the Service known as the "Vault" (or its successor name), we will only use such Materials to provide the Services to you and will not use such Materials to train AI models.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You hereby appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf or confirm your acceptance to the terms and conditions of any such third party service or application that the Services interact with on your behalf as part of such Actions. Any such agreements or commitments shall be binding on you as if entered into directly by you.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We are not responsible for any unintended Actions or any loss, damage, charge, liability, or other consequence arising from Actions, including interactions with any Connected Services on your behalf.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We may implement safeguards, confirmation requirements, or other controls on certain Actions; however, we make no representation or warranty that such safeguards will prevent unintended or erroneous Actions.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “You authorize the Services to take Actions on your behalf as the Services may deem are responsive to your Input.” (read 6 November 2026)
Spear Street Technology, Inc. (Instinct): Terms of Service, https://instinct.com/terms: “We hereby permit you to use the Services for your personal use only, provided that you comply with these Terms in connection with all such use.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “Grok Bot uses Cursor authentication and account data settings. Training opt-out follows the applicable Cursor account and privacy settings.” (read 6 November 2026)
SpaceXSI: Grok Bot for teams and enterprises, https://docs.x.ai/grok-bot/teams-and-enterprises: “With Privacy Mode enabled, customer data is not used for training; Cursor enforces this on its servers, and when the setting cannot be verified, the system defaults to not training.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “An approval controls the proposed action. It does not reverse work already completed.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “The answer depends on the tool, the risk of the action, and—when enforcement is enabled—your Auto-review rules. Sensitive or consequential actions can stop for approval.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “Most actions run on their own. When one needs your OK, the Bot shows an approval card in your chat with the proposed operation and its inputs, and waits for your answer.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “When you ask for an email in chat, it goes out once Auto Review allows it.” (read 6 November 2026)
SpaceXSI: Grok Bot security, https://docs.x.ai/grok-bot/security: “Ask first rules always stop matching actions, and Allow automatically rules let matching actions proceed only when the reviewer finds no other reason to stop.” (read 6 November 2026)
SpaceXSI: Approvals, security, and privacy, https://docs.x.ai/grok-bot/approvals-security-and-privacy: “Auto Review is on by default.” (read 6 November 2026)
SpaceXSI: Grok Bot: frequently asked questions, https://docs.x.ai/grok-bot/faq: “On a self-serve Cursor Teams plan, every member gets Grok Bot on their Cursor account, without a Premium seat or an admin request” (read 6 November 2026)

Prest0 is not affiliated with, or endorsed by, any of these companies, and names their products only to compare them.

Claude and Claude Duet are trademarks of Anthropic, PBC. ChatGPT is a trademark of OpenAI. Muse and Meta are trademarks of Meta Platforms, Inc. OpenAI dots and ChatGPT are trademarks of OpenAI. Instinct is a trademark of Spear Street Technology, Inc. Grok and Grok Bot are trademarks of SpaceX Super Intelligence LLC.