Custom Software for NZ Accounting Firms: Portals, Workpapers, AML, and Auto-Billing

Most NZ accounting practices are running on a patchwork of tools that were never designed to work together. Xero Practice Manager or MYOB AE for jobs. A shared drive or CCH for workpapers. Email for client document collection. A spreadsheet for AML/KYC records. Another spreadsheet for WIP. Time captured in one system, billed through another. Partners manually chasing clients for bank statements two weeks before the return deadline.

It's not that the individual tools are bad. It's that the gaps between them create friction, errors, and hours of non-billable administrative work every week. A custom system doesn't replace everything — it connects what you already have, fills the gaps that off-the-shelf software leaves open, and builds workflows specific to how your practice actually operates.

This article covers what a well-built custom system for a NZ accounting firm should actually do: client portals, AML/KYC compliance, workpaper management, time tracking, auto-billing, and the practice dashboard that ties it all together.

Client Portal: Replacing the Email Chaos

The average accounting firm communicates with clients across email, phone, and sometimes text. Documents arrive via email attachments, physical post, and the occasional USB drive. Engagement letters get emailed as PDFs, printed, signed by hand, scanned, and emailed back. Bank statements and receipts are forwarded from personal Gmail accounts to the practice email, where they sit in someone's inbox until they're needed.

A client portal replaces all of that with a single, secure interface that both clients and staff use. Here's what it needs to do:

Secure document exchange. Clients upload source documents — bank statements, payroll records, GST invoices, trust distributions — directly to the portal, where they're immediately visible to the relevant team member. No email, no forwarding, no wondering whether the attachment made it through. All uploads are timestamped and linked to the relevant engagement or job, so there's a clear record of what was received and when.

Engagement letter e-signatures. Every new engagement should start with a signed engagement letter. In most practices, getting that signature is a multi-step process involving PDFs, scanning, and follow-up calls. A portal with built-in e-signature (compliant with the Contract and Commercial Law Act 2017, which recognises electronic signatures) lets clients sign from any device. The signed document is automatically archived against the engagement. CA ANZ's practice management guidelines recommend documented engagement agreements — this makes them effortless to obtain and store.

Job visibility for clients. Clients should be able to log in and see the current status of their jobs: "Tax return — in progress", "GST return — awaiting your source documents", "Annual accounts — filed". This reduces the volume of "just checking in" calls and emails that partners and admin staff field every week. It also sets expectations — clients can see when something is waiting on them, not just when it's waiting on you.

Document delivery. Completed returns, financial statements, and management reports are delivered through the portal rather than emailed. This keeps sensitive financial information out of unencrypted email chains, and it creates a permanent record of delivery and access. For trusts and companies with multiple directors or beneficiaries, you can control exactly who sees what.

AML/KYC Compliance: Getting Off Spreadsheets

Accounting firms that provide specified services — including trust and company management, conveyancing, and managing client money — are reporting entities under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009. This isn't optional, and the Department of Internal Affairs (DIA), which supervises accountants for AML/CFT compliance, has been actively auditing firms and issuing enforceable undertakings.

The core obligation is customer due diligence (CDD): verifying who your clients are, understanding the nature of the business relationship, and assessing the risk they represent. For individual clients, that typically means verifying identity (passport, driver licence) and address. For companies and trusts, it extends to beneficial ownership — identifying the natural persons who ultimately own or control the entity.

Most practices handle this manually. A staff member asks for ID, makes a copy, fills in a form, and files it somewhere. The risk rating is a judgement call that varies by staff member. Ongoing monitoring — the obligation to periodically refresh CDD information — is often inconsistent or forgotten. When the DIA comes knocking for an audit, the scramble to pull records from multiple locations is stressful and time-consuming.

A custom CDD workflow changes this completely:

Client onboarding workflow. When a new client relationship is initiated, the system triggers a structured CDD process. The client receives a portal invitation and is prompted to upload their identity documents directly. The system tracks what's been received and what's outstanding, and sends automated reminders if items are missing. Staff don't need to chase — the workflow does it.

Risk rating. The system applies a risk rating to each client based on configurable criteria: entity type (individual, company, trust, partnership), business type, country of origin, PEP (politically exposed person) status, and transaction patterns. High-risk clients trigger enhanced due diligence requirements — additional documentation, senior sign-off, more frequent review cycles. The rating is documented and auditable.

Ongoing monitoring. The AML/CFT Act requires ongoing monitoring of business relationships. A custom system can set review triggers — for example, flagging a client for CDD refresh every two years, or immediately when a material change occurs (new beneficial owner, change in business activity). These triggers create tasks automatically rather than relying on someone remembering.

Record keeping. The Act requires records to be kept for 7 years. All CDD documents, risk assessments, and monitoring records are stored centrally with timestamps. When the DIA requests an audit sample, producing records is a matter of running a report, not excavating a filing cabinet.

Suspicious activity. If a transaction or client behaviour triggers concern, staff can log a suspicious activity report (SAR) internally. The system maintains a log of these, and produces the documentation needed to submit to the Police Financial Intelligence Unit if required.

Workpaper Management: Version Control and Review Workflows

Workpapers are the backbone of any accounting engagement — the documented evidence that supports the financial statements and returns you prepare. Managing them well is both a quality control issue and a professional standards issue. CA ANZ's quality management standards (aligned with ISQM 1 and ISQM 2) require that firms have documented review processes and that workpapers are retained appropriately.

In most practices, workpapers live in a shared drive with a folder structure that made sense when it was set up and has been slowly degrading ever since. Files get named "Final", then "Final v2", then "Final ACTUAL". Reviews happen via email or verbal sign-off. Tracking which jobs are complete, which are in review, and which are waiting on client information requires either a separate spreadsheet or regular partner meetings.

A custom workpaper management module replaces this with:

Structured workpaper preparation. Each job type has a standard set of workpapers — lead schedules, bank reconciliations, depreciation schedules, tax calculations. The system presents staff with the appropriate checklist for the engagement type. Workpapers are uploaded or completed within the system against specific checklist items, so it's always clear what's done and what isn't.

Manager review workflow. When a preparer marks a job as ready for review, it appears in the manager's review queue. The manager can work through workpapers, add review notes, request changes, or approve. All review actions are timestamped with the reviewer's identity. Partners can see at a glance which jobs are waiting for their review and how long they've been sitting there.

Version control. Every document upload creates a new version. The system retains previous versions, so you can see exactly what changed between the preparer's first draft and the final approved version. This is particularly valuable if a client queries a figure months after filing — you can trace exactly how it was calculated.

Integration with practice management. The workpaper status connects to the job record in Xero Practice Manager or MYOB AE. When a job moves from "In Progress" to "Review Complete" in the workpaper system, the practice management job status updates automatically. This gives partners a single source of truth for job progress without maintaining two systems manually.

Completion checklists. Before a job can be marked complete, the system enforces that required checklist items have been signed off. This prevents jobs being marked done when they're not, and ensures consistency across staff and engagement types.

Time Tracking: Granular Capture That Actually Gets Used

The fundamental problem with time tracking in most accounting practices isn't the system — it's the process. Time is entered at the end of the day, or at the end of the week, or (let's be honest) at the end of the month when billing runs. By then, the specifics are gone. Staff round up, round down, or simply forget work that was done. WIP is understated, recoveries look worse than they should, and billing decisions are made with incomplete information.

A custom time tracking module is designed around how accountants actually work:

Granular capture. Time is linked to a specific client, job, and task. Not just "annual accounts — 3 hours", but "annual accounts — bank reconciliation — 45 minutes". This granularity makes WIP reporting meaningful, helps identify which tasks are consistently over or under estimated, and gives partners the data to have informed conversations about pricing.

Quick entry options. A running timer that staff can start when they begin a task and stop when they finish is ideal. But the system also needs to support retrospective entry for staff who work that way, with a clean interface that makes it fast — not a form with twenty fields. Mobile-friendly entry matters for accountants who work across client sites.

WIP management. The system maintains a live WIP ledger — unbilled time accumulated by client. Partners can see at any point exactly how much work-in-progress exists across the practice, broken down by client, job type, and fee earner. This is the data that drives billing decisions and cash flow forecasting.

Write-up/write-down workflow. Before billing, partners need to be able to adjust time — writing up for exceptional results or writing down where a job ran over estimate and the client shouldn't bear the cost. These adjustments are captured with a mandatory reason code, so the practice has a record of where margins are being made or lost and why.

Staff productivity reporting. Fee earner utilisation rates, average recovery rates by job type, comparison of estimated vs actual time — these reports tell you whether your pricing is right and whether specific job types are profitable. Most off-the-shelf practice management tools provide some version of this, but a custom system can be built around exactly the metrics your partners care about.

Auto-Billing: From Time Entries to Xero in Minutes

Billing in most accounting practices is a monthly ritual that consumes a significant chunk of a partner's time. WIP reports get pulled, reviewed, adjusted, and discussed. Invoices are manually created in Xero or the practice management system. They're formatted, checked, and sent. Debtors are tracked in yet another spreadsheet or in Xero's accounts receivable, which nobody looks at until a client is 90 days overdue.

Auto-billing from approved time entries compresses this process:

Invoice generation from time entries. Once time entries are approved and write-offs recorded, the system generates a draft invoice automatically. The invoice line items reflect the work done — broken down by job and task if you prefer detailed billing, or consolidated if you bill fixed fees with time-based backup. Partners review the draft, make any final adjustments, and approve.

Xero integration. Approved invoices push to Xero directly — customer record, invoice amount, GST treatment, due date, and payment terms. There's no re-entry, no transcription errors. The invoice exists in both systems simultaneously, so your Xero debtors ledger is always current without any manual reconciliation.

Automated delivery. Once approved in Xero, the invoice is emailed to the client automatically — or delivered through the client portal if they're enrolled. The delivery is logged, so there's no argument about whether the client received it.

Payment reminders. Automated reminders at 7 days, 14 days, and 30 days overdue reduce the amount of time staff spend chasing debtors. The reminders are professional and templated, with the invoice attached. Escalation rules can flag accounts to a partner when they hit 60 days without payment.

Trust account reconciliation flags. For firms that hold client funds in trust — for example, during property transactions or estate administration — the system can flag when client trust balances should be reconciled against outstanding invoices and prompt the appropriate trust-to-office transfer. This keeps trust accounting clean and reduces the risk of a compliance issue at Law Society or DIA audit (relevant if your firm provides legal and accounting services jointly).

Practice Dashboard: Visibility Across the Whole Firm

Partners in most accounting practices don't have a clear real-time picture of what's happening across their firm. They know what's on their own desk. For everything else, they either ask someone, run a report, or wait for the monthly partner meeting.

A practice dashboard surfaces the information that matters without requiring a report to be run:

WIP visibility. Total WIP across the practice, broken down by partner, by job type, and by age. Old WIP — time that's been sitting unbilled for more than 60 days — is highlighted. This is often where practices discover that a significant amount of work has been done that nobody has remembered to bill.

Job pipeline status. Every job in the system, categorised by stage: awaiting client documents, in preparation, in review, awaiting sign-off, complete. Overdue jobs — those past their target completion date — are flagged. Partners can see at a glance whether the practice is on track or whether there's a backlog building.

Filing deadlines and IRD obligations. NZ-specific deadline tracking matters here. The dashboard can surface upcoming IRD filing obligations: GST returns by period (monthly, two-monthly, or six-monthly depending on the client), income tax returns, employer monthly schedules, and FBT returns. Companies Office annual return reminders can be tracked here too — a useful reminder for clients whose return date is approaching and who haven't engaged yet.

Staff capacity. Which staff members have available capacity this week? Which are fully loaded or overallocated? This information helps partners make decisions about job assignments and identify bottlenecks before they become problems. It's particularly useful during the September-October peak period when provisional tax, income tax returns, and GST obligations converge.

Billing targets vs actuals. Monthly billing targets by partner, with actual invoicing to date. This is the single metric that tells you whether the practice is performing financially. Most practices track this in a spreadsheet that gets updated manually. A live dashboard that updates automatically as invoices are approved removes the lag and gives partners the information they need to make decisions in real time.

NZ-Specific Considerations Worth Building In

A generic practice management system treats all jurisdictions the same. A custom system built for NZ accounting firms can bake in the jurisdiction-specific details that matter:

IRD agent portal limitations. The IRD's myIR agent portal doesn't offer a public API, which means direct integration is limited. A custom system can still work around this — for example, by generating pre-filled forms, tracking which returns have been filed based on agent confirmation, or using RPA (robotic process automation) techniques for repetitive portal interactions where appropriate. The system should also track myIR login credentials management and staff access permissions.

GST period tracking. Clients are on different GST filing periods — monthly, two-monthly, or six-monthly. The system should know each client's GST period and surface upcoming return obligations automatically. For clients switching between periods (which requires IRD approval), the system tracks the change date and adjusts the schedule.

Companies Office filing reminders. NZ companies must file annual returns with the Companies Office, and directors have ongoing obligations. A custom system can track each company client's annual return date and trigger reminders — both to the practice and optionally to the client — well in advance. For clients who haven't yet engaged for the year, this is a natural touchpoint for relationship maintenance.

CA ANZ professional requirements. Chartered Accountants Australia New Zealand sets professional standards for its members, including requirements around engagement documentation, quality management, and continuing professional development. A custom system can support compliance with these standards by ensuring engagement letters are always obtained, review sign-offs are always documented, and workpaper retention policies are enforced automatically.

Trust taxation complexity. NZ trusts have specific taxation requirements — trustee income rates, beneficiary income allocation, the five-year bright-line test for property held in trust, and the foreign trust disclosure regime. For practices with significant trust client bases, the system can include trust-specific fields, distribution tracking, and reminder workflows around trust review obligations.

What This Looks Like in Practice

A mid-sized NZ accounting practice — say, 4 partners and 15 staff — might process 800 to 1,200 jobs per year across income tax, GST, annual accounts, and advisory work. Managing that volume across disconnected systems means significant time spent on coordination that doesn't bill. Partners spend time they could spend on client work chasing status updates, tracking down documents, and manually running billing reports.

A custom system built around that practice's specific workflows can realistically recover several hours of partner time per week — time that can be redirected to billable work, business development, or simply finishing at a reasonable hour. For practice managers and senior staff, the reduction in administrative burden is often more significant: less time chasing, less time reconciling, less time fixing errors that wouldn't have happened if the workflow had been structured properly from the start.

The AML/CFT compliance piece has its own return on investment. DIA audits are real, enforceable undertakings are public, and the cost of a compliance failure — financial, reputational, and in management time — is significantly higher than the cost of building a proper workflow. A custom CDD system pays for itself the first time an auditor asks for your records and you can produce them instantly instead of spending a week pulling them together from across the firm.

If you're running an accounting practice in New Zealand and you're spending time on processes that should be running automatically, I'd be happy to talk through what a custom system might look like for your specific situation. Every practice is different — the right solution starts with understanding how yours actually works.