All articlesclient portal

Client Onboarding Checklist: 12 Steps From Lead to Active

A 12-step client onboarding checklist grounded in AICPA, ABA, and IRS rules. From conflict check to first deliverable—what service firms must collect.

AT

Arthur Teboul

Founder, DokuTrak

July 28, 202611 min read
On this page

A new client calls. They're qualified, the conflict check is clean, and you're ready to start. Then comes the waiting: the documents don't arrive on their own, and neither does the signed agreement, the payment setup, or clarity on next steps.

That's the onboarding problem every professional faces—the gap between "I'm ready to work with this client" and "I have everything I need and they know what happens next." Most firms run this stage informally, and things slip.

This checklist closes that gap. It's grounded in compliance rules (AICPA standards, ABA Model Rules, IRS guidance) and built on one idea: better process beats better follow-up. The 12 steps below are the sequence, and skipping any one breaks something downstream—a claim risk for accountants, an ethical exposure for lawyers, a delayed closing for brokers.


TL;DR: A proper onboarding checklist starts with conflict/acceptance (step 1–2), moves to the signed engagement letter (step 3), collects documents (steps 4–6), validates what arrives (step 8), and confirms expectations before the kickoff call (steps 9–12). Tax services account for 77% of CPA-firm liability claims, and only around half involved a signed engagement letter—the written agreement closes the expectation gap and is non-optional.

If your firm is still chasing documents via email and phone calls, start with steps 1–4 this week—they take a day or two and eliminate most of the downstream friction.


The 12-Step Onboarding Checklist

The full sequence follows. Some steps overlap (billing and document request can run in parallel), but the order matters—each step is a checkpoint for the next, and each one below has an owner, completion criteria, and the compliance or operational reason it matters.

1. Qualify and Run a Conflict Check

Owner: You (partner/intake manager) · Done when: Written record created, conflict database cleared

This is the go/no-go gate. Under the AICPA's Statement on Quality Management Standards No. 1 (SQMS No. 1), effective December 15, 2025, firms must formally accept only engagements they have the skills and experience to perform, and they must weigh client integrity, ethics, and regulatory risk before saying yes.1 SQMS No. 1 is scoped to CPA firms with an attest practice; for bookkeeping and tax-only firms it's strong best practice, not a legal mandate. Either way, don't let financial pressure drive the decision.

For lawyers, it's non-negotiable under ABA Model Rules 1.7 (current clients) and 1.9 (former clients)—run the check before any substantive discussion of the matter.

Checklist item: ☐ Client runs through your conflict database / past-client list. Red flag reviewed and documented. No conflicts or conflicts reviewed and waived in writing.

2. Confirm Client Acceptance (Policies & Procedures)

Owner: You · Done when: Written decision created

This is the documented "yes": create a short written record confirming acceptance. A one-line summary in your engagement file ("Accepted XYZ Corp on 2026-07-15; conflict check clear; scope: tax return prep") is enough. When a dispute surfaces later, you'll want to know when the relationship formally began.

Checklist item: ☐ Written acceptance documented (date, client name, engagement scope, any conflicts noted as waived).

3. Send the Signed Engagement Letter

Owner: You · Done when: Signed document returned and filed

The engagement letter is the most important document on this list—the difference between a claim and no claim. According to AICPA research, tax services account for 77% of claims asserted against CPA firms in 2024, and across all CPA-firm claims, only around half involved a signed engagement letter.2 The letter sets expectations. Without it, disputes become disasters.

For law firms, ABA Model Rule 1.5(b) requires that the basis or rate of the fee be communicated in writing. For contingent fees, the rule is stricter: Rule 1.5(c) requires a written fee agreement signed by the client.

Here are the 10 elements AICPA and state CPA societies require in an engagement letter:3

  1. Identification of the parties (who is the client, who is not)
  2. Scope of services (what you'll do and what you won't)
  3. Professional standards applied (GAAP, GAS, internal revenue code)
  4. Firm and client responsibilities (client must provide info; you must work competently)
  5. Deliverables and use limitations (what they get; how it can be used)
  6. Timing (when the engagement begins and ends—sets the statute-of-limitations clock)
  7. Termination and withdrawal (you can withdraw if they don't cooperate)
  8. Billing, fees, and payment terms (rate, estimate, how you bill, late-payment consequences)
  9. Dated signatures (wet or electronic)
  10. Terms & conditions addendum (governing law, liability caps, confidentiality, dispute resolution)

Checklist item: ☐ Signed engagement letter on file, dated and signed by both parties, containing the 10 required elements above.

4. Set Up Payment and Collect W-9 (Where Applicable)

Owner: Finance/billing · Done when: Payment method confirmed and W-9 collected/filed

If you pay this client money (contractors, vendors, referral partners), you'll need their IRS Form W-9. Collect it before the first payment so your year-end 1099 filing is clean.4

For professional services, agree on billing terms now—milestone invoicing, monthly retainer, or time-and-materials with a cap—and whether a deposit is due upfront. Get it in writing, ideally in the engagement letter.

For lawyers handling client funds, ABA Model Rule 1.15 requires advance/retainer fees go into a client trust account with records retained—set it up before funds arrive.

Checklist item: ☐ W-9 collected (if you'll pay them), payment method confirmed, billing terms agreed in writing, and for lawyers: retainer deposited in client trust with records created.

5. Build the Document Checklist by Vertical

Owner: You (service lead) · Done when: Document list tailored to engagement type and ready to send

The documents you need vary by profession. Here's what authorities and first-party research show:

  • Bookkeeping / tax: approximately 20 distinct documents (W-2s, 1099s, bank statements, prior-year returns, receipts). These map to IRS forms and schedules.5
  • Law firm / legal intake: approximately 41 documents across 6 practice areas (engagement letter, conflict check, client ID, plus case-specific items like deeds or marriage licenses depending on the matter).6
  • Lending / mortgage: approximately 12 borrower documents (application, pay stubs, tax returns, ID verification, proof of assets) collected in stages under Regulation Z.7

Don't send everything upfront. Request what you need to begin—conflict data, ID, engagement-letter signature, and anything your vertical's rules require—then collect the rest progressively. This reduces abandonment.

Checklist item: ☐ Document checklist built for this engagement type, ordered by priority (conflict data / ID first, case-specific documents second), with examples of what's needed and why.

Owner: Finance/intake · Done when: Client receives link and confirms receipt

This is the mechanics. Don't send a list. Send a link. No account creation. No password. No portal sign-up wall.

Clients don't ignore documents because they're lazy—they ignore friction. Require account creation and many stall or forget; send a direct link with a 30-second upload and more get done.

For each document, specify format, date range, why it matters, and deadline. "Please send your bank statements" gets vague submissions; "your most recent 3 months of bank statements as PDFs, per account" gets the right files.

Checklist item: ☐ Document request sent to client via direct upload link (no login required), with specific instructions per item (format, date range, deadline, why needed).

7. Set Up Automated Tracking and Reminders

Owner: Finance/automation lead · Done when: Reminders scheduled and dashboard live

Don't track documents manually. Use a dashboard that shows at a glance which items are submitted, missing, or due—and triggers a follow-up the moment a deadline passes.

Automate the reminders: day 2 if nothing arrives, day 5 if still incomplete, day 9 before deadline. Timed, specific, short reminders outperform manual follow-up emails.

Checklist item: ☐ Automated tracking dashboard created (which client / which documents / which status). Reminder schedule set and live.

8. Validate Documents (AI Flags, You Decide)

Owner: You / document reviewer · Done when: Correct documents accepted, wrong ones rejected with re-request

When a file arrives, someone needs to check it. Is it the right document? Right date range? Readable? Complete?

This is where DokuTrak's AI-first approach saves time: AI flags highlight wrong documents, unreadable scans, or expired versions before they hit your desk. You make the call (1 click: accept or reject), and a rejection sends the client specific re-request instructions automatically—no email thread, no ambiguity.

Without it, you find out documents are wrong three weeks into the engagement instead of three days before the deadline, when you could still fix them.

Checklist item: ☐ Each document reviewed and validated (1-click accept/reject). Incorrect or incomplete documents rejected with specific re-request instructions sent automatically.

9. Run a Kickoff Call

Owner: You (service lead) · Done when: Call held, client questions answered, next steps reviewed

This is a short call—30 minutes, not 2 hours. Confirm you have everything, walk the client through your process and their responsibilities (feedback timelines, comms channels), answer questions, and clarify anything fuzzy in the engagement letter.

This is also where you confirm systems access and deadlines.

Checklist item: ☐ Kickoff call held. Client confirmed receipt of engagement letter, timeline, and next steps. Any questions answered.

10. Set Up Systems and Access

Owner: Operations / tech lead · Done when: Client credentials provisioned, access confirmed, systems tested

Confirm they have access to the tools they need before the engagement starts, and test it: accounting software and bank connections for accountants (QuickBooks, Xero, Wave), the case management system and document repositories for lawyers, the loan management portal for brokers.

Checklist item: ☐ Client systems access confirmed. Tested and working. Backup credentials stored.

11. Send the Expectations Document (Comms, Turnaround, Escalation)

Owner: You · Done when: Document sent and acknowledged

This is a short one-pager that covers:

  • How you communicate (email, phone, Slack, client portal message)
  • Expected response time (24-hour turnaround, weekly check-in, etc.)
  • Escalation path if something breaks (who to contact if not getting a response)
  • What "complete" looks like on their end (all documents submitted by X date, all questions answered)

It doesn't replace the engagement letter—it clarifies it. Clients stall when expectations are fuzzy; this memo removes the fuzz.

Checklist item: ☐ Expectations document sent to client. Confirms comms channels, response times, what "done" means, escalation path.

12. Deliver the First Deliverable and Set Up Feedback Loop

Owner: You · Done when: First deliverable delivered, feedback requested

The first deliverable doesn't have to be final—it's a "here's what I'm seeing so far" check-in: a preliminary tax analysis, a legal-issue memo, or a pre-approval or rate-lock confirmation, depending on your work.

The point is: deliver something early, show progress, ask for feedback. This confirms the client is on the same page and gives you time to course-correct before the final deliverable.

Checklist item: ☐ First deliverable delivered. Feedback loop initiated (what's on track, what needs adjustment, what's the timeline to final).


Why This Checklist Matters

Broken onboarding isn't a follow-up problem—it's a missing-structure problem. Every profession that collects documents runs into the same three failure modes:

  1. No conflict/acceptance gate — you take clients you shouldn't, creating compliance and liability risk.
  2. No written agreement — expectations are fuzzy and disputes become expensive.
  3. No validation step — wrong documents arrive and you don't catch them until it's too late.

This checklist solves all three: each step has an owner, a completion criterion, and a downstream dependency. Start with the first four steps (conflict check, acceptance, engagement letter, payment setup)—a day or two of work that removes most downstream friction. To automate the document steps, see the client onboarding software buyer's guide and the client onboarding hub; for the full workflow, see the client intake complete guide.


Start Your 14-Day Trial

DokuTrak is built to make steps 6, 7, and 8 frictionless: send a no-account link, automate the reminders, and validate documents with AI. First client request free, no card, then no upfront charge.

Try your first onboarding workflow this week.


Footnotes

  1. AICPA, "Statement on Quality Management Standards No. 1 (SQMS No. 1)" — Acceptance and Continuance of Client Relationships and Specific Engagements is a required component of QMS, effective December 15, 2025. Journal of Accountancy, "AICPA unveils new QM resources to help firms meet Dec. 15 deadline" (2025), retrieved 2026-07-14. https://www.journalofaccountancy.com/news/2025/aug/aicpa-unveils-new-qm-resources-to-help-firms-meet-dec-15-deadline/

  2. AICPA & CIMA, "Say 'I do' to engagement letters" (citing CNA professional liability data for 2024), retrieved 2026-07-14. https://www.aicpa-cima.com/professional-insights/article/say-i-do-to-engagement-letters ; AICPA Member Insurance Programs / CNA, "Frequently Asked Engagement Letter Questions," retrieved 2026-07-14. https://www.cpai.com/Education-Resources/my-firm/Engagement-Letter/Frequently-asked-engagement-letter-questions

  3. AICPA Member Insurance Programs (CNA), "Frequently Asked Engagement Letter Questions," retrieved 2026-07-14. https://www.cpai.com/Education-Resources/my-firm/Engagement-Letter/Frequently-asked-engagement-letter-questions ; Virginia Society of CPAs, "8 critical elements of an effective engagement letter," retrieved 2026-07-14. https://www.vscpa.com/news/b68c1791-71bd-45b2-a73b-0062248efd1f:8-critical-elements-of-an-effective-engagement-letter

  4. IRS, "About Form W-9," retrieved 2026-07-14. https://www.irs.gov/forms-pubs/about-form-w-9

  5. DokuTrak compilation (irs-tax-checklist.md), retrieved 2026-07-13. ~20 distinct client documents mapped to IRS forms and taxpayer situations.

  6. DokuTrak compilation (aba-legal-intake.md), retrieved 2026-07-13. ~41 distinct intake documents across 6 practice areas, mapped to ABA Model Rules and judicial guidance.

  7. DokuTrak compilation (trid-mortgage-checklist.md), retrieved 2026-07-13. ~12 distinct borrower documents under Regulation Z and Fannie Mae guidance.

Frequently asked questions

What should be on a client onboarding checklist?

Start with a conflict and compliance check, then get the signed engagement letter. After that, collect documents, set up billing, and confirm expectations. The 12-step checklist in this guide covers the full sequence: from go/no-go decision to first deliverable. Most professionals skip the early steps (conflict check, written agreement) and pay for it later with liability claims.

What documents should you collect when onboarding a new client?

The documents depend on your profession. Accountants collect ~20 tax documents (W-2s, 1099s, bank statements). Lawyers collect ~41 documents across 6 practice areas (engagement letter, conflict check, client ID, then case-specific docs). Mortgage brokers collect ~12 borrower documents (application, pay stubs, tax returns). See the document checklists per vertical in the full guide; each maps to compliance rules.

Do you need a signed engagement letter for every client?

Yes. Tax services account for 77% of claims against CPA firms, and across all CPA-firm claims, only around half involved a signed engagement letter related to the underlying engagement. For lawyers, ABA Model Rule 1.5 requires fee agreements in writing. A signed engagement letter with scope, terms, and fees eliminates misunderstandings and protects you when disputes arise.

How do you get clients to actually complete the onboarding?

Remove friction and specify clearly. Don't require account creation—send a direct link. Give specific instructions for each document (format, date range, why it matters). Set a clear deadline. Automate the follow-up reminders so clients don't stall. Most professionals lose completion rates to vague requests and portal sign-up walls, not client negligence.

What's the difference between a client onboarding checklist and a client intake form?

A checklist is the process—who owns each step, when it's done, what gets verified. An intake form is one artifact within that process. The checklist tells you the entire sequence: conflict check first, then engagement letter, then document request, then kickoff call. The intake form is the blank you send for the document request step.

Can you automate client onboarding?

Yes, most of it. You can automate the document request, follow-up reminders, notifications when files arrive or are wrong, and archiving once intake is complete. What you can't automate is the judgment call on whether a document meets the requirement or the ethical compliance check (conflict check for lawyers). The best systems reduce that validation to a single click.