“We anonymize it in-house, then put AI to work”
Before any AI tool sees a return, names, SSNs, addresses and account numbers are removed on your own computers, reviewed by a preparer, and logged. That's a security practice you can describe to a client, put in your engagement letter, and show in your written information security plan.