Data security for remote bookkeepers rests on four rules: a home network with its default router settings changed, a work device that holds no client files outside approved storage, a screen nobody else can read, and named access that ends the day someone leaves. Written down, those rules let staff work from anywhere without scattering client statements.
What changes about data security when bookkeepers work remotely?
Working remotely moves client data out of a space the practice controls and into homes, cafes and shared rooms the practice never sees. The data is the same. What changes is the network it crosses, the devices it lands on and the people who might be nearby when it is on screen.
In an office, a practice can choose the router, lock the door and see who walks past a desk. At home, a bookkeeper's laptop shares a network with a teenager's games console and a smart doorbell. In a coworking space, the person at the next desk can read a bank statement at a glance. None of this makes remote work unsafe. It means the safeguards have to travel with the person.
Three gaps appear most often when a practice goes remote without a plan:
- Files spread to personal places. Statements end up in a laptop's Downloads folder, a personal cloud drive or a phone's photo roll.
- Family devices get used for work. A shared home computer becomes the quick way to check one client's file in the evening.
- Access outlives the job. A contractor in another city finishes and nobody turns off their logins, because nobody sees them leave.
The sections below take each risk in turn, then end with the people side: hiring and offboarding staff you may never meet in person.
Home router and Wi-Fi settings for remote bookkeepers
A remote bookkeeper's home router is now part of the practice's network, so it needs the same care. Change the default administrator password, turn on WPA2 or WPA3 encryption, keep the router's software up to date, and turn off remote management. These take about twenty minutes once.
The FTC's consumer guide on how to secure your home Wi-Fi network sets out these steps. It also suggests setting up a guest network, so visitors and their devices stay off your main one. The FTC's cybersecurity guidance for small businesses adds that businesses should require secure connections for remote access and multi-factor sign-in for areas holding sensitive information.
Give remote staff a checklist they can complete and sign:
- Router admin password changed from the default and stored in the practice password manager.
- Wi-Fi encryption set to WPA2 or WPA3, not WEP or open.
- Router software checked for updates, with automatic updates on if the router offers them.
- Remote management, WPS and UPnP turned off.
- Guest network set up for visitors and smart home devices.
- Work laptop connected to the main network only, never the guest one.
A practice cannot inspect every staff member's home. A signed checklist at least confirms each person did the work, and it gives a reason to revisit the list once a year.
Laptop and phone rules for remote bookkeeping staff
Device rules decide where client data can physically end up. The safest pattern is a work laptop used only for work, with an encrypted drive, a screen lock, automatic updates and no other household users. Phones should reach client data only through apps with their own sign-in, never through saved files.
Set the rules in writing and keep them short:
- Work device only. No client work on a shared family computer, even "just to check something".
- Full-disk encryption on. Built into current Windows and macOS. Turn it on before the laptop leaves the office for the first time.
- Screen lock after a few minutes. Remote staff step away more often than office staff do.
- Updates on. The operating system, the browser and any accounting tool.
- No client files on phones. Opening a statement on a phone is fine. Saving it to the phone's storage or photo roll is not.
- Lost device reported the same day. Remote wiping only helps if someone starts it quickly.
If a practice pays for staff laptops, these rules are easy to enforce. If staff use their own computers, require a separate user account for work at the very least, and accept that the control is weaker.
Screen privacy for remote bookkeepers in shared spaces
Screen privacy means making sure nobody nearby can read client data on a remote bookkeeper's screen. It matters most in coworking spaces, shared homes and video calls. A privacy filter, a seat facing a wall and a habit of sharing one window rather than a whole screen cover most of it.
Bookkeeping work puts a lot of detail on screen at once. Matching transfers between a client's bank accounts, for instance, means two statements side by side, both showing account endings, balances and every payment. Someone glancing past for a few seconds can take away a surprising amount.
Practical habits for remote staff:
- Use a privacy filter on the laptop screen in any shared space.
- Sit with your back to a wall in coworking spaces and cafes.
- On video calls, share a single window, not the full desktop, and close other clients' files first.
- Turn off notification previews, so a client's email does not pop up while you share your screen with another client.
- Lock the screen every time you stand up, even at home.
Calls themselves need care too. A conversation about a client's overdraft carries through an open-plan room as easily as a screen does. Take client calls in a closed room or on a headset with the volume low.
Where may remote bookkeepers store client statements?
Remote bookkeepers should store client statements only in places the practice controls and can revoke: the practice's cloud storage, the accounting software and the statement tool. Personal drives, email inboxes, USB sticks and chat apps are where copies go missing. A clear table removes the guesswork.
The table below is an example policy. Adjust the details to your own tools.
| Storage place | Allowed? | Reason |
|---|---|---|
| Practice cloud storage, client folder | Yes | Access is named, logged and removable |
| Accounting software for the client | Yes | Each client's books stay in their own file |
| Statement conversion tool | Yes | Files stay inside the tool, under its retention setting |
| Laptop Downloads folder | Only while working, cleared daily | Files there are invisible to the practice |
| Personal cloud drive | No | The practice cannot remove access when someone leaves |
| Email inbox, as a store | No | Attachments stay in mailboxes for years |
| USB stick or external drive | No, except encrypted practice backups | Small, easy to lose, rarely encrypted |
| Messaging and chat apps | No | Files copy to every device signed in to the app |
Working inside a tool rather than with local files reduces the clutter. With AutoBankConvert, statements are uploaded to the client's workspace, files are encrypted in transit and at rest, and you choose how long originals are kept after export, so a remote bookkeeper does not need to keep a local copy at all.
One temptation needs its own rule. When a statement will not convert, a remote staff member working alone may try a free website to get past it. Explain why the file was rejected instead: the guide to why a statement is flagged as unsupported covers safe ways to fix the file itself.
Remote bookkeeping from cafes, hotels and travel
Public networks in cafes, hotels and airports are shared with strangers, so treat them as hostile. Use a phone hotspot or the practice's VPN for client work, check that every site loads over HTTPS, and leave large uploads and bank sign-ins for a trusted network if you can.
The FTC small business guidance tells businesses to warn staff about the risks of public Wi-Fi, to stop phones joining public networks automatically, and to consider a VPN for employees who connect remotely. In practice, a phone's personal hotspot is often the simplest secure option for a bookkeeper on the move, because it avoids the shared network entirely.
Some work should simply wait:
- Signing in to a client's bank, even with a view-only user.
- Uploading a batch of statements for many clients at once.
- Anything on a hotel business-centre computer, which other guests use after you.
Travel abroad adds one more step. Before crossing a border, check that the laptop is encrypted and powered off, not asleep, so the encryption is fully in force. Keep no client files on it outside approved storage.
Hiring and offboarding remote bookkeeping staff
Remote hiring means giving access to client data to someone you may never meet. Checks before access, named logins from day one, and a same-day offboarding routine matter more than they do in an office, because nobody sees a remote person pack up their desk.
Before access, decide what checks your practice runs for any role that handles client statements. The guide to background checks for bookkeeping staff covers what is reasonable and what needs consent. Then give the new person their own login to every tool, with only the clients they will work on.
When someone leaves, the removal must happen that day, in every tool, without waiting for a laptop to come back in the post. The step-by-step routine in revoking staff access to client files on day one works for remote and office staff alike. The Firm plan of AutoBankConvert includes team seats and roles, so each remote bookkeeper can work under a seat of their own rather than a login shared with colleagues.