Aesop tells of a donkey that found a lion's skin in the forest and put it on. Dressed as a lion, it wandered the countryside and every animal fled at the sight of it, until a fox heard it bray. The sound gave it away instantly — the skin looked right, but nothing underneath it had changed.
A lot of tax-return outsourcing works the same way. From the outside, a "prep desk" and a black-box offshore shop can look identical: a website, a price list, a promise of fast turnaround. The difference only shows up when you ask it to do something a costume can't do — show its work. This is a short list of what to ask for before you hand a desk your client's return, and what the honest answer sounds like.
1. Ask where the return is, right now
A firm that outsources should be able to name the stage a return is in, at any hour of the extension season: intake, preparation, review, or ready for pickup.
A black-box shop answers this with an email, if it answers at all, usually a day or two after you asked. The information exists somewhere on their side; you just don't have access to it. That delay is not an inconvenience. It is the whole arrangement, visible for a moment: you handed over a file and a return address, not a process.
The honest answer is a pipeline you can see yourself, without asking anyone. The return sits in a named stage, updated as it moves, on a screen you can open any time you want.
2. Ask who touched it, and when
Every return that leaves your office passes through at least two people before it comes back: a preparer and a reviewer. Ask for their names, or at minimum, proof that two distinct, credentialed people were involved and can be told apart.
A black box gives you one name, if it gives you any, and no way to confirm a second person looked at the file at all. "We double-check everything" is not a control. It is a sentence.
The honest answer names the roles even when it can't name the individuals: an IRS-licensed enrolled agent prepared the return, and a second, different enrolled agent reviewed it before it came back to you. Both actions are logged, with a timestamp, not just claimed.
3. Ask what "reviewed" actually checked
Reviewed can mean anything from a careful second look at every schedule to someone opening the PDF and confirming it has a page count. Ask what the reviewer is actually required to check, and ask to see one anonymized example.
A black-box shop treats this question as an insult, or answers with adjectives: "thorough," "rigorous," "detailed." None of those words are a checklist.
The honest answer is a checklist, and the desk will show it to you: election consistency, prior-year carryforwards, a re-computation of the return's key figures independent of the preparer's own math, and a sign-off tied to a specific reviewer, not a department.
4. Ask what happens to the data, specifically
"Your data is safe with us" answers a question nobody asked. The real questions are narrower: Is it encrypted in transit and at rest? Who controls the encryption key? Which named roles can see a Social Security number, and is that visibility logged?
A black box says "safe" and stops there, because the specific answer would reveal that almost anyone with a login can see almost anything.
The honest answer is a role, a key, and a log. Role-based access, so only the assigned preparer, the reviewing EA, and your own authorized staff can open the file. A key the desk does not unilaterally hold — on a properly configured engagement, the firm controls it. An immutable audit trail recording every upload, view, edit, and export, in an order that cannot be rewritten afterward.
5. Ask what the consent process actually says
Sending a client's return to an outside preparer, especially one located outside the US, triggers a specific disclosure obligation under Internal Revenue Code Section 7216 — the statute that governs a preparer's use and disclosure of client tax information. A firm that skips this step is not saving the client paperwork. It is skipping a legal requirement and hoping nobody asks.
A black-box shop either doesn't mention this or hands you a generic form and calls it handled.
The honest answer is a proper §7216 consent kit: a disclosure in at least 12-point type, signed before anything leaves your office, naming the fact that preparation may occur outside the US, and giving the client a real complaint channel if something goes wrong.
What the checklist actually protects
None of these five questions are exotic. They are the questions any competent partner already asks about their own staff — who did this, who checked it, where is it right now, who can see it, did we get consent for this. The only thing that changes with outsourcing is that a black-box vendor is betting you won't ask, because the honest answers would slow down a pitch built on speed and price alone.
A prep desk that can answer all five, in specifics rather than adjectives, has nothing to hide and no reason to avoid the questions. That is the entire test. It costs you five minutes on a discovery call, and it tells you more than a reference ever will — because a reference describes someone else's experience, and a straight answer to these five questions describes the system you are about to trust with your client's return.
A costume can look like a lion right up until it opens its mouth. Ask the questions before you find out which one you hired.