+44 (0)1482 770583
hello@systechitsolutions.co.uk
IT & Microsoft cloud for accountancy
Hosted desktops, practice software, client data security and January-peak capacity for accountancy practices.
Accountancy
An accountancy practice runs on two things technology decides: whether the practice software behaves, and whether the firm can absorb January without everything slowing to a crawl. Most IT problems in accountancy are one of those two wearing a different hat.
Accountancy is one of the few sectors where demand is genuinely, predictably spiky. Self assessment in January, corporation tax and year ends clustered elsewhere, and a run-up where the same team works far longer hours on the same systems. That shape punishes infrastructure sized for the average and rewards infrastructure that can flex, which is exactly the opposite of how most practices have historically bought IT. On top of that sits the practice software itself: IRIS, CCH, Digita, Sage, Xero, TaxCalc and the rest, some of it modern and cloud-native, some of it a Windows application that expects a shared desktop, a mapped drive and a database it can see. Then there is the data. A practice holds more sensitive personal and financial information per head than almost any other kind of SME, under professional body rules, MTD obligations and clients who increasingly send a security questionnaire before they will engage. The firms that handle this well tend to have made one decision deliberately: where the desktop actually lives.
What we do for accountancy
Is a hosted desktop the right answer for an accountancy practice?
Often yes, and for a more specific reason than remote working. A hosted desktop puts the practice software, the data and the user in the same place, which removes the single most common cause of accountancy IT complaints: an application designed for a local network being used across a slow link to an office server. Where practice software is latency-sensitive, and much of it is, moving the desktop next to the data fixes performance problems that no amount of broadband upgrade at the user end will touch.
The honest caveat is that hosted desktop is a category, not a product, and the version you buy matters. A traditional hosted desktop provider puts you on infrastructure they own, on their refresh cycle and their terms. Windows 365 and Azure Virtual Desktop put the same desktop inside your own Microsoft tenant, under your identity and your Conditional Access policies. The desktop looks identical to the person using it. The difference shows up when you want to change provider, evidence something to a professional body, or connect it to the rest of your Microsoft estate.
It is also not automatically right. A practice already fully on cloud-native software, with staff on modern laptops and no shared Windows application left, is usually better served by well-managed endpoints than by a desktop in the cloud. We would rather establish which of those you are before selling either.
How do you handle the January self assessment peak without paying for it all year?
This is the strongest technical argument for Azure Virtual Desktop in accountancy specifically, and it is the one most practices have never had put to them. A pooled AVD host pool with a scaling plan grows capacity through January and shrinks it again in February, so the firm pays for peak capacity during the peak rather than for twelve months. Very few sectors have a demand curve that suits autoscaling as neatly as an accountancy practice does.
Windows 365 works differently and can still fit: the price is fixed per user per month, which suits a stable permanent team, and Windows 365 Frontline lets a pool of licences rotate across people who are not all working simultaneously. Where a practice takes on seasonal or contract staff for the run-up, that distinction usually decides the answer.
The mistake we see most often is sizing the whole estate to January. That guarantees a bill twelve months a year for capacity used for six weeks, and it is entirely avoidable. Our AVD vs Windows 365 comparison sets out where the crossover sits, and the sizing gets done from your real login data rather than headcount.
Will IRIS, CCH, Sage or TaxCalc run properly on a Cloud PC?
Generally yes, and the ones that do not usually fail for a reason worth knowing before you migrate rather than after. Practice software falls into three groups. Cloud-native products such as Xero, and the browser-based parts of the IRIS and Sage ranges, are indifferent to where the desktop is. Traditional Windows applications with a database backend, which covers a large part of what practices actually run day to day, work well on a hosted desktop provided the application and its database end up on the same side of the network rather than either side of a VPN.
The third group is the awkward one: applications with hardware dependencies, an old licensing dongle, a specific printer driver, or an installer nobody can find any more. Those need testing rather than assuming, and occasionally application packaging to get them onto a supported platform at all. We test the actual application set before anything moves, because discovering a compatibility problem in the last week of January is a different kind of problem to discovering it in June.
The other thing worth checking early is printing and document output. Accountancy generates an enormous amount of it, and printing is consistently the part of a hosted desktop rollout that gets tested last and causes the most complaints.
What does client data security actually require in an accountancy practice?
Three things, in this order. Identity first, because a practice login is the key to every client file the person can reach: MFA on everyone with no exceptions for partners, Conditional Access that treats an unmanaged device as untrusted, and administrative accounts separated from day-to-day ones. Almost every incident we are called to in professional services starts with a credential rather than a firewall.
Then access boundaries. A practice usually needs staff to reach many clients' data, which makes least-privilege harder than in a business with one dataset, and makes it more important rather than less. The workable version is structuring client folders so access is granted by team and engagement rather than by everybody having everything, and reviewing it when people change roles rather than only when they leave.
Then evidence. Increasingly the question is not whether you are secure but whether you can show it, because clients send security questionnaires and professional bodies expect a documented position. Cyber Essentials is usually the fastest way to answer both, and Cyber Essentials Plus where a client specifically requires the audited version.
What changes when a practice grows by acquisition?
The technology problem arrives before the integration plan does. A practice that acquires another inherits a second tenant, a second set of practice software, a second backup arrangement of unknown quality, and staff who expect their existing systems to keep working while the deal completes. Handled badly this produces two IT estates running in parallel indefinitely, which costs more than either did alone and leaves security policy inconsistent across the merged firm.
The pattern that works is deciding early which tenant survives, moving identity first so people are governed by one set of policies even while applications are still split, and treating the acquired practice's data as a migration with a defined end date rather than an archive that stays connected forever. Hosted desktops make this considerably easier, because staff can be moved onto the surviving estate's desktop without touching their hardware.
We would rather be involved before completion than after. The due diligence question nobody asks often enough is what the acquired firm's backup restore has actually been tested against, and the answer is frequently nothing.
Questions we hear a lot
Do you provide hosted desktops for accountants?
Yes, and we are deliberately platform-agnostic about which kind. For most practices that means Windows 365 Cloud PCs, where the price is fixed per user per month and nothing has to be sized, or Azure Virtual Desktop where a pooled, autoscaling host pool suits the January peak better. Both run inside your own Microsoft tenant rather than on infrastructure we own, so your identity, Conditional Access and data governance stay yours. We recommend which one fits after looking at your practice software and your real usage pattern, not before.
Can you support our practice management software?
We support the environment it runs in, and we work with the software vendor rather than around them. That covers IRIS, CCH, Digita, Sage, Xero, TaxCalc and the SQL or database backends behind them: making sure the application and its data sit together, that performance is right, that backups actually capture the database rather than just the files, and that upgrades are tested before they reach everyone. Where a vendor owns the application support itself, we handle the platform and coordinate with them rather than duplicating what you are already paying for.
How do you handle the January self assessment peak?
By sizing for it deliberately rather than accidentally. On Azure Virtual Desktop that means a scaling plan that adds capacity through the run-up and removes it in February, so peak capacity is paid for during the peak rather than all year. On Windows 365 it means reviewing licence assignment ahead of the season and using Frontline where seasonal staff do not all work at once. Either way the sizing comes from your actual login data from previous Januaries, which most practices have and almost none have looked at.
We hold a lot of client financial data. What do you put in place?
MFA on every account with no partner exceptions, Conditional Access so unmanaged devices are treated as untrusted, separated administrative accounts, and client folder access granted by team and engagement rather than everyone having everything. On top of that: email security and archiving, because a practice inbox is both a target and a record, and backup with a restore that has actually been tested. Where a client or professional body wants evidence, Cyber Essentials or Cyber Essentials Plus is usually the fastest way to provide it.
Do we need Cyber Essentials as an accountancy practice?
Not by law, but increasingly by commercial necessity. Larger clients, public sector work and a growing number of insurers ask for it, and the security questionnaires practices now receive map closely onto its five controls, so holding it turns a week of questionnaire archaeology into a certificate number. It also certifies in weeks rather than the months ISO 27001 takes. We would suggest Cyber Essentials first, Cyber Essentials Plus when a specific client requires the audited version, and ISO 27001 only when something concrete demands it.
IT support for accountancy is delivered UK-wide from our office in Brough, East Yorkshire, with on-site support across the county where it helps. We work with businesses in Leeds, Harrogate, Hull, York, Sheffield and Barnsley and 6 more Yorkshire towns and cities, and remotely with clients right across the UK.
Ready to talk about your accountancy IT?
Every engagement starts with a free assessment. No pressure, no cost, just a clear view of what's possible.