An offshore or outsourced team can be a genuine operating capability, but it is not automatically transferable, compliant or economical for a buyer. Before attributing value to it, identify every person and provider in the delivery chain, the work and client data they handle, who supervises and reviews them, and whether the contracts and permissions continue after completion.

Do not assume that outsourcing transfers responsibility. For tax services, the Tax Practitioners Board (TPB) says the practitioner must consider client disclosure and permission, competence, supervision, reasonable care and professional indemnity insurance. The buyer therefore needs evidence of the control system in practice, not merely a vendor name and a monthly cost.

Map the actual delivery model

Start by separating arrangements that are often grouped together. The TPB describes outsourcing as obtaining a process, function or service from another party, while offshoring concerns work performed outside Australia; an overseas employee of the practice, a captive overseas office, a related entity and an unrelated service provider create different contractual and control questions (TPB).

Build a work-and-data map for each provider, entity and country. Show:

  • employer or contracting entity, workforce location and any subcontractor;
  • tasks performed, services excluded and the client groups affected;
  • systems, folders and credentials each role can access;
  • where data is viewed, processed, stored, backed up and deleted;
  • preparer, reviewer and final sign-off responsibilities;
  • volume, turnaround, error, rework and escalation records; and
  • monthly cost, minimum commitments, currency exposure and transition charges.

Reconcile the roster to payroll, invoices, general-ledger accounts, job records and system-access logs. A claimed team of ten is not ten units of usable capacity if only six are active, the seller performs all technical reviews, or material rework is hidden in Australian staff time.

Evidence to request

Request the documents that prove the arrangement rather than relying on a process presentation:

  • master service agreements, statements of work, service levels and side letters;
  • ownership-change, assignment, termination, renewal, price-review and liability clauses;
  • subcontractor lists, work locations and restrictions on further subcontracting;
  • current engagement letters, client permissions, privacy notices and communication templates;
  • role descriptions, qualifications, training records and registered-practitioner details;
  • supervision plans, review checklists, sign-off logs, quality results and incident registers;
  • access matrix, authentication settings, device controls, audit logs and data-retention schedule;
  • business-continuity, outage, cyber incident and data-breach response procedures; and
  • insurance certificates, complaints, remediation, security assessments and unresolved disputes.

Walk two or three completed jobs from client intake to delivery with the Australian reviewer and offshore personnel. Observe where judgement entered, how exceptions escalated and whether the audit trail matches the procedure.

Test client permission, competence and supervision

For registered tax practitioners, TPB Code item 6 restricts disclosure of information relating to a client’s affairs to a third party unless the client has given permission or a legal duty applies. The TPB suggests a positive client step for general permission and clear disclosure about where information may be disclosed and work completed. It also says an unregistered third party performing tax agent services must work under appropriate supervision and control, with the practitioner ultimately responsible for that work’s quality (TPB).

Check whether engagement terms describe the actual provider, activity and location—not a superseded model. Match client permissions to the legal entities that receive information. Ask advisers to assess gaps, including historic work completed without sufficient permission.

The TPB’s current supervision guidance says remote arrangements should have documented processes, a supervisory plan, scheduled check-ins, training and document review. It also states that registered practitioners must maintain a documented and enforced quality-management system for tax agent services (TPB). Test evidence of review frequency, reviewer capacity and issue closure. A policy without recorded operation is weak evidence.

For members of participating professional bodies, identify the standards that apply. APES 110 includes confidentiality, professional competence and due care among its fundamental principles (APESB). APES 325 addresses a documented firm risk-management framework, while APES GN 30 provides guidance on outsourced-service risks, outsourcing agreements and service levels (APESB; APESB). Memberships, services and facts determine which obligations apply; obtain professional advice rather than assuming one standard covers the whole practice.

Follow the data across borders

Ask the seller to demonstrate where personal information goes, including remote viewing, downloads, email, cloud storage, backups and subcontractors. Where Australian Privacy Principle 8 applies, an APP entity generally must take reasonable steps before disclosing personal information overseas to ensure the recipient does not breach the APPs, and can be accountable for the recipient’s mishandling. The OAIC says overseas contractors will, in most circumstances, receive a disclosure and that enforceable contractual arrangements are generally expected; statutory exceptions require fact-specific analysis (OAIC).

Privacy Act coverage can vary by entity and activity, so have a privacy lawyer determine the acquired structure’s position. Do not overlook tax file numbers: the OAIC says the Notifiable Data Breaches (NDB) scheme applies to TFN recipients for TFN information. It also says an APP entity disclosing information overseas under APP 8.1 remains responsible for assessing an overseas incident and, if it is an eligible data breach, notifying affected individuals and the Commissioner (OAIC).

Test the provider’s incident-notification deadline, evidence-preservation obligations and cooperation with assessment, containment and notification. A generic promise to report incidents “promptly” may not give the buyer enough time or information.

Assess transferability and economics together

Model the arrangement after completion, not under the seller’s relationships. Confirm whether the buyer can assume the contract; whether rates, licences or dedicated staff change on ownership; who controls administrator accounts; and how data, workpapers and knowledge will be returned if the provider exits. Test a provider outage, the seller’s departure, loss of a key offshore supervisor and a temporary shift of work back to Australia.

Calculate a fully loaded cost per completed, reviewed job, including vendor fees, Australian review time, rework, software, security, management and resilient capacity. Compare timeliness, quality and margin by work type. Low hourly rates do not prove a lower delivered cost.

Use clear decision gates:

Question Satisfactory evidence Warning sign
Can the arrangement transfer? Written consent or assignable terms, confirmed staff and system access Informal seller relationship or change-of-control right
Is client disclosure supported? Current terms and permission mapped to actual recipients and locations Generic wording, missing opt-in evidence or undisclosed subcontractors
Is work competently controlled? Capacity-based supervision plan, review logs and closed quality issues Seller-only review, intermittent spot checks or repeated rework
Can data risk be managed? Data map, enforceable controls, tested incident process and exit deletion Unknown data location, shared credentials or delayed incident notice
Do the economics survive? Fully loaded cost and downside scenario by service line Savings exclude review, remediation or transition costs

Unresolved gaps may justify further diligence, remediation before completion, a revised forecast, contractual protection or a decision to pause. Transaction and legal advisers should determine the appropriate response; operational findings alone do not dictate price or drafting.

When specialist advice is needed

Engage a lawyer for privacy coverage, APP 8, client consent, contract transfer, workforce status, foreign-law and breach obligations. Accounting, tax, cyber, insurance and valuation advisers can examine quality controls, security evidence, normalised costs and deal protections. Advice should use the actual entities, countries, services and data flows.

Sources

Disclaimer

This article provides general information only. It does not constitute legal, tax, accounting, financial, credit, valuation or other professional advice. Circumstances differ. Obtain advice from appropriately qualified advisers before acting or entering a transaction.