Introduction: the real question is not “which AI”
The head of a Luxembourg accounting firm is not shopping for an AI. What they want to know is which back-office tasks can run on their own without client files leaving the firm's perimeter.
That split comes down to a single test: who has the final say. A task whose output is a piece of information can run autonomously; a task whose output commits the firm keeps a human who decides. This is not a matter of style. On August 21, 2026, the Dutch data protection authority fined Uber €825 million. The reason: account deactivations decided by automated means, with no effective human review (as reported by TechCrunch on August 23, 2026). The complaint was not about the model, but about the absence of anyone able to reverse the decision.
The calendar is not waiting for you either. On July 17, 2026, the Luxembourg government approved the bill that sets the date: every business will have to be able to receive electronic invoices by January 1, 2028 (Paperjam). Your incoming flows will become machine-readable, whether you are ready or not. This is where AI automation in Luxembourg without exposing your data comes in, applied to a profession bound by professional secrecy.
This article takes stock of that back office, rules on each task, then lists what to demand from a provider before handing over a single document.
1. An accounting robot and a specialised AI agent do not do the same job
Two very different things travel under the same word, “automation”, with neither the same scope nor the same risk. The accounting robot is a rule: it applies a posting template to a label it recognises, files what it has already seen, and fails silently the moment a document falls outside the template. Your production software already contains some, under the name of automatic posting.
The specialised AI agent reads a document it has never seen, extracts what matters, chains several steps (chase, file, prepare, alert) and knows how to say it is not sure. That last property is what makes it usable in a firm: an automaton that never flags its own doubt has to be fully rechecked, so it saves nothing.
💡 Good to know: the right indicator of an agent fit for an accounting firm is not its advertised success rate, it is its escalation rate. An agent that regularly raises a doubtful document is worth more than one that never raises anything.
Hence the practical consequence: you do not delegate a task to “the AI”, but to an agent whose output, doubt threshold and human fallback have all been defined. The same exercise on the brokerage side, in the five tasks an insurance broker can delegate, follows the same mechanics.
2. The back office of an accounting firm, task by task
Here is the inventory as it looks in a Luxembourg firm. The column that matters is the third one: it names who has the final say.
|
Task |
What the agent produces |
Who decides |
Recommended action |
|---|---|---|---|
|
Collecting and chasing documents |
Dated reminders, tracking of missing items per file |
The agent |
Cap the reminders before a human takes over |
|
Filing and naming |
Document attached to the file, the period and the type |
The agent |
Spot-check a sample during the first month |
|
Deadline monitoring |
Schedule kept up to date, alert ahead of the filing |
The agent alerts, the human arbitrates |
Let it carry the alert, never the arbitration |
|
First-level replies |
Sourced procedural answer, escalation when in doubt |
The agent, with an explicit human exit |
Announce the escalation rule to the client |
|
Pre-posting of entries |
Proposal with a confidence level attached |
The staff member, on the exceptions |
Route to a human below a defined threshold |
|
Preparing the VAT return |
File ready, discrepancies and missing documents flagged |
The chartered accountant, who signs |
Never automate the final validation |
|
Client onboarding and file opening |
Documents gathered, inconsistencies raised |
The firm, on its assessment of the risk |
Keep the risk assessment out of the automaton |
Four tasks out of seven run autonomously, three stay as a pair. None disappears: the workload shifts from execution to control. This document-handling layer is exactly what automated document processing by an AI agent covers.
3. The four tasks an agent absorbs without continuous supervision
These four have one thing in common: if the agent gets it wrong, someone sees it before anything takes effect.
Collecting and chasing documents. The most draining item on the firm's human energy bill.
Filing and naming. A misnamed document costs twice: on the way in, then six months later.
Deadline monitoring. It does not arbitrate between two overdue files: it raises both, with how long each has been overdue.
First-level replies. “Where does my file stand”, “which documents are you missing”: every one of these questions has a factual answer. The same logic applies to automatic qualification of incoming requests. If the channel is the telephone, the data takes a different route, as shown in the journey of clients' voices through a phone agent.
Limit: these four items do not cut accounting production itself. They free up time upstream and at the client interface. A firm hoping to automate its review work will be disappointed in year one.
4. The three tasks that keep a human, and what makes that mandatory
Pre-posting, VAT preparation and client onboarding are of a different nature: their output commits the firm. A validated posting becomes an entry, a filed return becomes a position that can be held against you, an accepted client becomes a relationship the firm answers for.
This test is not a vendor's opinion, it carries a published price tag: the Uber fine from the introduction. Article 22 of the GDPR does not say “no automation”: it says that at the end of the chain, someone must be able to change the decision, with the time and the authority to do so.
💡 Good to know: clicking “approve” on a queue of several hundred proposals is not human review. A useful check requires a volume compatible with the time available, which means an agent that filters instead of pushing everything through.
Translated into how a firm is run: the agent proposes but never writes the final entry on its own. It prepares the return but does not file it. It assembles the onboarding file but leaves the risk assessment to the designated manager. Three lines to write into an internal procedure, to be reread once a year. They overlap with the seven criteria for choosing an AI provider for an accounting firm.
5. Where client files end up: three clauses to demand
This is the only irreversible question. A wrong posting can be corrected; a document that has gone into a training set does not come back.
Article 458 of the Luxembourg Criminal Code applies to the chartered accountant and to the people in their service, within the framework of the amended law of 10 June 1999 organising the profession. An AI provider is not a person in your service: it is a processor within the meaning of Article 28 of the GDPR. What it may do with your documents is written in a contract, not on a marketing page.
- No reuse for training, by default. Not as an option you can switch on, not “except to improve the service”. It is the only test that survives a change in the terms and conditions.
- Effective purge of conversations and documents. A written retention period, and above all a scope: working copies, technical logs and backups count too. Ask what remains after the purge.
- Reversibility in an open format. Getting your files and the processing history back without depending on the provider. That is what lets you change your mind.
Add to this a dimension that was theoretical for a long time: in August 2026, the French government excluded an American AI provider from its own uses on sovereignty grounds, according to Reuters. The jurisdiction your provider falls under has become an argument you can hold against them.
6. Where to start without overhauling your production software
Nowhere inside the production software. The agent plugs in around it: mailbox, document management, client portal, wherever the raw material arrives in disorder.
Start with chasing documents, on a single portfolio, over one full monthly cycle. You will measure three things: the reminders avoided, the agent's escalation rate, and the time now spent on control. If escalation exceeds what the staff member can absorb, the scope was too wide, not the tool bad. The same minimal-start logic runs through the story of an hour saved from Monday morning onwards.
The timeline of the e-invoicing bill, approved by the government on July 17, 2026 and not yet passed by Parliament, sets the pace: mandatory reception by January 1, 2028; issuance by July 1, 2028 for large and medium-sized businesses; January 1, 2029 for the others. The switch is under way. In Luxembourg, invoices sent over the Peppol network went from fewer than 100 in 2021 to nearly 1.4 million in 2024, according to the Luxembourg Chamber of Commerce. The structured document is becoming the standard input, and a firm that has fine-tuned its collection by then will enter 2028 without a jolt. Our AI agent offering for accountants and accounting firms starts from this very scope.
FAQ: your questions on accounting firm automation
1. Which back-office task should an accounting firm start with?
Collecting and chasing documents, on a single portfolio and over one full monthly cycle. It is one of the four tasks out of seven whose output is information, not a commitment: an error there is seen before it takes effect. It does not touch your production software.
2. Can an AI agent prepare a VAT return instead of the staff member?
It can prepare, not file. The agent assembles the file, flags discrepancies and lists missing documents; the chartered accountant reviews and signs. It is one of the three tasks out of seven that keep a human: a filed return becomes a position that can be held against the firm and its client alike.
3. What does a firm risk by letting an automaton decide on its own?
The precedent has a figure on it: €825 million imposed on Uber on August 21, 2026 by the Dutch data protection authority, for accounts deactivated automatically without effective human review. The complaint targeted Article 22 of the GDPR, not the technology. The test fits in one question: can someone actually reverse the decision?
4. Do client files leave the firm when you use an AI agent?
That depends on the contract, never on the sales demo. Three clauses settle it: no reuse for training by default, effective purge of conversations and working copies, reversibility in an open format. Article 458 of the Luxembourg Criminal Code covers the chartered accountant and the people in their service; a provider remains a processor within the meaning of Article 28 of the GDPR.
5. Do you need to change accounting software to automate your back office?
No. The agent plugs into the mailbox, the document management system and the client portal, not into the accounting engine. The trigger is on the calendar, under the bill approved by the government on July 17, 2026 and not yet passed by Parliament: mandatory reception of electronic invoices by January 1, 2028, issuance by July 1, 2028 for large and medium-sized businesses, January 1, 2029 for the others.
Decide by the task's output, not by the technology
Accounting firm automation is not decided provider by provider but task by task: when the output is information, it goes; when it commits the firm, a human keeps the final say. Four items out of seven pass the test, three do not, and where your documents end up is settled by contract, before the first demo.
Draw up your inventory, column by column, and bring it along: we check it against how your firm is organised and you leave with the order in which to start.



