Why Your Engagement Letters Are Putting Your Firm at Risk
Accountancy

Why Your Engagement Letters Are Putting Your Firm at Risk

Your engagement letter is the primary document protecting your firm against professional negligence claims. Most of them have significant gaps. Here are the seven most common failures and how to fix them.

5 May 2026
9 min read
SignFlow Now

Most accountancy firms have an engagement letter template they've been using for years. The problem: engagement letters are the primary document protecting your firm against professional negligence claims. And most of them have significant gaps.

Why Engagement Letters Matter More Than You Think

Your engagement letter is a contract. When a client claims you failed in your professional duties, the engagement letter is the first document a court or PI insurer will look at. It defines what you agreed to do, what you didn't agree to do, the client's responsibilities, your liability limitations, and your fee basis. A vague or incomplete engagement letter doesn't just fail to protect you — it can actively harm your defence.

The Seven Most Common Gaps

1. Unclear scope definitions. Vague language like "we will provide accounting services" leaves enormous room for interpretation. Be specific. List exact services covered, then add an explicit exclusion clause: "Services not listed above are not included in this engagement."

2. Missing liability cap. Many engagement letters have no cap on the firm's liability. ICAEW guidance recommends including a liability limitation. Check yours does, and that the cap is commercially appropriate.

3. No clause addressing client responsibilities. Include: "You are responsible for providing us with complete and accurate information. We will rely on the information provided without independent verification unless we have reason to question it."

4. No anti-money laundering clause. Under the Money Laundering Regulations 2017, accountants must conduct customer due diligence. Your engagement letter should reference this and state that you cannot continue if the client fails to provide required information.

5. Outdated data protection provisions. Your GDPR clause must identify you as data controller, describe the lawful basis for processing, explain what data is processed and why, address third parties you share data with, include your retention period, and reference your privacy notice.

6. No provision for fee disputes. Set out payment terms, what happens if invoices are unpaid, and a process for resolving disputes.

7. Unsigned or unfiled. The most embarrassing gap: no signed copy on file. An unsigned engagement letter provides almost no protection. Digital signing ensures you have a Certificate of Completion with timestamp and cryptographic hash — evidence you can produce instantly.

What a Robust Engagement Letter Covers

Parties and date, scope of services with explicit exclusions, period of engagement, client responsibilities, your responsibilities, fees and payment terms, liability limitation, confidentiality, data protection, complaints procedure, governing law, and a signed signature block.

The Annual Review

Engagement letters should be reviewed and re-sent to clients at least annually. With digital signing, this takes minutes per client — the engagement letter goes out, the client signs on their phone, you have a signed copy and Certificate of Completion automatically.

What to Do This Month

  1. Compare your current template against ICAEW or ACCA current guidance
  2. Identify gaps using the checklist above
  3. Update the template — or commission a solicitor to do it
  4. Check which active clients have a current signed engagement letter on file
  5. Re-send to any client where it's more than 12 months old, unsigned, or where scope has changed
  6. Implement digital signing to make the process frictionless

Try SignFlow Now

Start Your 14-Day Free Trial

E-signatures, payments, and identity verification — built for UK legal professionals.

Get Started Free