Services Pricing About Free Report
Hello! I'm Jason Dinesen, EA

I help CPA firms
offshore with
confidence & compliance.

I specialize in IRC §7216, AICPA Code, and FTC Safeguards compliance for accounting firms building offshore teams. I've advised 500+ firms and trained 200,000+ professionals — so you can offshore from day one without regulatory risk.

Enrolled Agent (EA) IRC §7216 AICPA Ethics FTC Safeguards CPE Presenter
Jason Dinesen
500+
CPA Firms Advised
200K+
Professionals Trained
15+ Years in Advisory
500+
CPA Firms Advised
200K+
Professionals Trained
15+
Years Experience
3
Regulatory Domains
Jason Dinesen
EA · LPA Licensed CPE Presenter
About Jason

I am a compliance advisor
for CPA firms going offshore

I specialize in outsourcing compliance with 15+ years in public accounting, tax advisory, and regulatory work. I'm an Enrolled Agent (EA) and Licensed Public Accountant (LPA) with deep expertise in exactly the compliance obligations that most offshoring firms don't know they have.

As a nationally recognized CPE presenter, I've trained over 200,000 accounting professionals on IRS guidance, ethics, and tax law. I translate complex regulatory requirements into plain, actionable language your firm can implement immediately.

Deep expertise in IRC §7216, AICPA Code 1.700.040, and FTC Safeguards as applied to offshore outsourcing

Advised 500+ CPA firms on vendor due diligence, regulatory compliance, and offshore team structure

Known for translating complex regulatory requirements into plain, actionable language firms can implement immediately

Who We Serve

Built for firms offshoring
— or thinking about it

Whether you have 20 offshore staff or are just starting to evaluate vendors, GOA meets you where you are.

Already Offshoring, No Compliance Review

Active offshore team but never reviewed §7216 consent, AICPA disclosure obligations, or conducted formal due diligence. The most common — and most exposed — position.

Explore Advisory →

Evaluating Vendors, Need an Independent View

Selecting an offshore provider and want independent assessment covering compliance, data security, and operations — not the vendor's own pitch deck.

Explore Due Diligence →

Building a Captive Global Team (GCC)

Larger or PE-backed firms building owned offshore operations. Geography, entity structure, team design, and compliance from the ground up — fully guided.

Explore GCC Consulting →
Services

My advisory services

Direct access to Jason in every engagement. No account managers, no junior staff hand-offs.

02

Vendor Due Diligence Assessment

Independent evaluation of your offshore vendor across compliance, security, and operations. Uses the GOA Vendor Scorecard: 70+ questions, 7 weighted sections, Pass/Fail output. Becomes your AICPA 1.300.040 documentation.

SOC 2 Type II 70+ Questions ISO 27001
$1,499 $999 / assessment
Schedule Assessment →
See full scope: 3 assessment dimensions · 25-point checklist · GOA Vendor Scorecard · deliverables
Compliance · Merit · Operations Full Checklist 6 Deliverables + Scorecard
Assessment Dimensions
Full Checklist
GOA Vendor Scorecard
Deliverables
Three Dimensions Scored in Every Assessment
Compliance & Regulatory
IRC §7216 adequate data protection safeguard
AICPA Code 1.300.040 & 1.700.040 obligations
FTC Safeguards Rule §314.4 requirements
GDPR / data residency compliance
IRS Pub. 1075 framework alignment
AICPA/CICA Privacy Framework
WISP documentation and approval
Client consent documentation support
Merit & Data Security
SOC 2 Type II certification status
ISO 27001:2022 certification
AES-256 encryption at rest & in transit
MFA enforced for all users
Role-based access control (RBAC)
Penetration testing frequency
Incident response plan (IRP)
Cybersecurity & E&O insurance
Operations & Talent
Staff qualifications (CPA, EA, CA, ACCA)
Vetting & hiring process rigor
Employee turnover data by city/level
L&D ecosystem & CPE access
Client references with direct contacts
Work timing & timezone overlap
Financial stability indicators
Geographic diversification & risk
Legal, Registration & Financial
Vendor registered and compliant with local laws
No active regulatory sanctions or legal proceedings
Financial stability certificate from independent CA
E&O, Cyber, and General Liability insurance verified
Data Security & Infrastructure
SOC 2 Type II certification current and valid
ISO 27001:2022 certification reviewed
AES-256 at rest, TLS 1.3 in transit confirmed
MFA enforced for all system access
RBAC and least-privilege access controls
WISP documented and management-approved
24/7 CCTV and biometric physical security
SIEM real-time monitoring deployed
Pen testing every 6 months or after major changes
Incident Response Plan with 24-hr breach notification
USB ports locked, unauthorized storage blocked
Disaster recovery tested quarterly
Workforce, Quality & Regulatory
Staff qualifications and certifications verified
Turnover data by city/role/level disclosed
Client references with direct contact details
Termination and access revocation protocols
§7216 disclosure language in vendor agreement
FTC §314.4(f) service provider obligations met
AICPA 1.700.040 contractual agreement in place
GDPR / IRS Pub. 1075 framework alignment confirmed

Every vendor due diligence engagement uses the GOA Vendor Scorecard - a comprehensive 70+ question scoring tool across 7 weighted sections. Scores are 0-5 per question with automatic aggregation, color-coded ratings, and a Pass/Fail determination. The completed scorecard becomes your AICPA 1.300.040 due diligence documentation.

Scorecard Structure
Section 1: Legal & Financial (10% weight)
Section 2: Compliance & Regulatory (25% weight)
Section 3: Data Security & Infrastructure (25% weight)
Section 4: Workforce & Expertise (15% weight)
Section 5: Quality & Process (10% weight)
Section 6: Operations & Delivery (10% weight)
Section 7: Contractual & Insurance (5% weight)
Scoring & Thresholds
0-5 per question · 70+ questions total
85-100%: PASS - Recommended
70-84%: PASS - Conditional
55-69%: MARGINAL - Caution
40-54%: FAIL - Remediation Required
Below 40%: FAIL - Do Not Engage
Critical override: Compliance section below 60% = automatic fail
What You Get
Completed GOA Vendor Scorecard (Excel)
Color-coded section ratings with heat map
Automatic Pass/Fail recommendation
Section-level gap notes from Jason
Assessor sign-off block for your files
AICPA 1.300.040 documentation language
Advisory call with Jason to review findings

Every vendor due diligence engagement delivers these documents within 48 hours - all go into your compliance files and satisfy AICPA documentation requirements under 1.300.040.

Delivered
GOA Vendor Scorecard (Excel)

Complete scored assessment across 70+ questions in 7 sections, with automatic aggregation, Pass/Fail recommendation, and assessor sign-off block.

Delivered
Scored Vendor Assessment Report (PDF)

Written narrative report covering key findings, dimension ratings, and final recommendation - suitable for partner review and firm files.

Delivered
§7216 Compliance Gap Summary

Written summary of any gaps in your vendor's adequate data protection safeguard compliance, with specific remediation steps.

Delivered
Due Diligence Documentation Pack

AICPA 1.300.040-compliant documentation confirming you conducted proper due diligence - ready to file with client records.

Delivered
FTC Safeguards Vendor Checklist

A completed FTC §314.4(f) service provider checklist confirming your oversight obligation has been met and documented.

Bonus
Vendor Interview Cheat Sheet

Structured question guide for your own vendor evaluation calls - what to ask, what to probe, and which red flags to watch for.

03

GCC Consulting Program

For firms ready to build a captive offshore operation. Jason guides geography selection, entity structure, team design, in-country compliance, and a 12-month build roadmap across three structured sessions.

India / Philippines EOR vs Subsidiary 12-Mo Roadmap
$4,999 $2,999 / program
Inquire About GCC →
See full scope: build dimensions · geography matrix · 6 program deliverables
3 Build Dimensions India vs. Philippines 6 Deliverables
Build Dimensions
Geography Matrix
Program Deliverables
Compliance & Legal
In-country labor law requirements
Data residency & privacy regulations
Tax implications of captive structure
IP ownership and data security
U.S. regulatory obligations maintained
Entity type & registration requirements
Geography & Talent
India: city-by-city talent comparison
Philippines: cost, skills, timezone
Tier 2/3 city advantages vs. metro
Talent pool size by discipline
Turnover benchmarks by location
Total cost including all-in salary
Build & Operations
EOR vs. subsidiary vs. branch model
Phase 1: pilot team (months 1-4)
Phase 2: scale & specialize (5-12 mo)
Leadership hiring & onboarding
Captive vs. vendor cost-benefit
Infrastructure & tech stack setup
India: City Comparison Overview
Mumbai / Pune: large talent pool, highest cost, higher metro turnover
Hyderabad / Bangalore: tech-heavy, mid-cost, strong accounting talent
Ahmedabad / Surat: Tier 2, lower cost, strong CPA exam culture, lower turnover
Jaipur / Indore: emerging Tier 2 hubs, competitive all-in cost structure
Smaller towns: lowest cost, highest loyalty, requires stronger L&D investment
Night shift differential: non-mandatory in India, mandatory in Philippines
Entity Structure Options
Employer of Record (EOR): fastest to start, no local entity needed, higher per-head cost
Wholly Owned Subsidiary: full control, compliance burden, 6-12 months to establish
Branch Office: simpler structure, some limitations on permitted activities
Hybrid: EOR to start, transition to subsidiary once team exceeds ~20 FTEs
Build Phase Milestones
Months 1-2: geography confirmed, entity structure decided, recruiting begun
Months 3-4: first hires onboarded, infrastructure set up, SOPs documented
Months 5-6: pilot team producing work, quality review process live
Months 7-12: scale, specialize, add leadership layer, evaluate EOR transition

Structured deliverables at each of the three sessions - you leave every call with something tangible. Six documents delivered across the engagement.

Session 1
GCC Feasibility Report

Written assessment of whether captive is right for your firm - with recommendation and rationale based on your goals.

Session 1
City Selection Matrix

Side-by-side comparison of 6-8 city options across cost, talent, turnover, infrastructure, and regulatory complexity.

Session 2
Entity Structure Recommendation

Written guidance on which entity model fits your timeline and budget, with setup timelines and cost estimates.

Session 2
12-Month Build Roadmap

Phased timeline covering hiring, infrastructure, compliance, team structure, and leadership milestones across four phases.

Session 3
Captive vs. Vendor Cost Analysis

Detailed cost comparison for your projected headcount over 3 years - total cost of ownership modeled both ways.

Ongoing
60-Day Email Access to Jason

Direct email access for follow-up questions, document review, or working through decisions post-session.

Process

My working process

Every engagement follows a structured, deliverable-driven process — so you leave every session with something tangible and actionable.

1. Assess

Compliance Gap Review

We identify where your firm stands on §7216, AICPA Code, and FTC Safeguards before any offshore work continues.

2. Strategize

Readiness & Structure

Score your firm across five readiness dimensions and design the right onshore-offshore team structure for your size and service mix.

3. Document

Compliance Templates

Receive ready-to-use consent forms, vendor agreements, WISP updates, and AICPA-compliant disclosure language — all tailored to your firm.

4. Finalize

Launch & Implement

Receive your deliverables within 48 hours and execute your 30-day action plan — with Jason available for follow-up questions throughout.

Pricing

Transparent pricing

Choose your advisory level. Direct access to Jason in every engagement — no account managers, no junior hand-offs.

Outsourcing Advisory
2-session bundle · Regulatory + Business
$1,198
$699
per bundle
  • Regulatory Advisory session (1-hr)
  • Business Advisory session (1-hr)
  • §7216 consent templates
  • FTC Safeguards self-assessment
  • Offshore readiness score report
  • Task mapping template & team blueprint
  • 30-day onboarding plan
Book Bundle →
GCC Consulting
3-session captive build program
$4,999
$2,999
per program
  • 3 structured advisory sessions
  • GCC feasibility report
  • City selection matrix (6–8 cities)
  • Entity structure guidance
  • 12-month build roadmap
  • Captive vs. vendor cost model
  • 60-day email access to Jason
Inquire Now →
Need help?

You need a compliance consultation?

Most firms don't know what they don't know about outsourcing compliance. Let's fix that — with a structured session, clear deliverables, and a roadmap you can act on immediately.

Contact Jason →
Free Assessment

Are you ready
to offshore?

10 questions. 3 minutes. A personalized readiness score and PDF report — with your compliance stage, gaps, and next steps — delivered to your inbox instantly.

  • §7216, AICPA Code, and FTC Safeguards — where you actually stand
  • Vendor due diligence status vs. AICPA 1.300.040 standards
  • Team readiness: processes, people, and structure scored
  • Stage placement + prioritized roadmap of next steps

Get Your Free Report

Enter your details to unlock the assessment and receive your personalized PDF instantly.

No spam. Report delivered to your email.
Takes about 3 minutes.

Readiness CheckQuestion 1 of 10
Does your firm currently use any offshore or outsourced staff for accounting, tax, or bookkeeping work?
Have you obtained IRC Section 7216 written client consent for offshore disclosure of tax return information?
Has your firm conducted formal due diligence on your offshore vendor's compliance and data security?
Does your firm have a Written Information Security Plan (WISP) that specifically covers your offshore service provider?
How would you describe your onshore team's ability to delegate and manage an offshore team?
Do you have a signed contractual agreement with your offshore vendor covering confidentiality and data security?
Has your firm mapped which tasks are appropriate to offshore versus keep onshore?
Are you familiar with AICPA Code 1.700.040 - the disclosure rule for third-party service providers?
What is the size of your firm?
What is your primary goal right now?
-
Offshore Readiness Score
Sending to Your Inbox
Offshore Readiness Summary PDF (personalized)
Sample GOA Vendor Scorecard preview
Section 7216 Quick Reference Guide for CPA Firms
Book Outsourcing Advisory Bundle →

Full PDF report sent to your email within minutes