AI finance exception ownership: a named person signs
Who signs when an agent drafts the line
AI finance exception ownership means a named person, not the software, owns the exception queue, the reversal, and the audit trail when an agent proposes an invoice, a bill, or a journal line. The agent may draft. The bookkeeper and the owner still sign. Part 6 of the 2025 Compliance Supplement, written for recipients and subrecipients of federal awards, illustrates a split a small desk can copy: individuals who initiate transactions are different from those approving the transactions and those recording the transactions in the general ledger [1]. Where that split is not practical, management selects and develops alternative control activities [1].
Put three names on one sheet
We start with one sheet. The 2025 supplement says a recipient of federal awards must have effective internal control, and that the Uniform Guidance recommends the Green Book or the COSO framework without requiring prescriptive documentation in the style of either framework or of the supplement itself [1]. Those appendices are illustrations, which is the right weight for a private company that may never see a federal award. The SBA states that private companies are not required to follow GAAP, and that the Financial Accounting Standards Board maintains GAAP in the United States [8].
The exception queue holds every draft a person must accept, return, or refuse before it posts or before cash moves. Missing support, a new vendor, payroll, a payment, or an amount the bookkeeper will not sign all land there. The agent can fill the queue. It cannot clear it.
The reversal is the correcting entry a person signs when a posted line is wrong. Name that person even if they also own the queue. The audit trail records who or what drafted the line, the support behind it, who accepted or refused it, and, if it was reversed, the later entry and the signer. The bookkeeper keeps the log. The named owner is accountable for it after the month closes.
The 2023 NIST AI Risk Management Framework, which NIST says is being updated, says roles and lines of communication for mapping, measuring, and managing AI risks are documented and clear, and that executive leadership takes responsibility for decisions about risks associated with AI system development and deployment [6]. It also calls for policies that define and differentiate roles for human-AI configurations and oversight of AI systems [6]. On a small company, that leadership is the owner, and the agent does not sign.
The 2023 AI RMF Playbook, which NIST says will be updated after the framework is revised, says organizations can document who is ultimately responsible for the decisions of the AI and whether that person knows the intended uses and limitations [7]. It also suggests separating management of AI system development from AI system testing, so someone else can send the work back [7]. If the owner wrote the instructions the agent follows, cash, payroll, and new vendors get a second reader, the bookkeeper or the outside accountant, before they post. That second reader is the alternative control when the desk cannot staff three separate roles [1].
Keep the drafter off the post
OMB Circular A-123, revised on March 10, 2026, is written for federal agencies, not a private ledger, and a small team can still copy it [2]. Separation of duties divides key tasks among people. Preventive controls, that split included, aim to avoid unintended events before they happen. Detective controls, including log monitoring and accounting reconciliation, identify issues that do occur and alert managers so they can take corrective action [2]. Where preventive controls are not feasible, strengthening detective controls and monitoring becomes critical [2]. Approval means a higher-level endorsement of a decision, event, or transaction, and documentation means preserving evidence of a decision, event, transaction, or system [2].
An owner and one bookkeeper cannot staff three desks. The agent and the bookkeeper may prepare. The owner approves the posting batch and anything that moves cash, outside the session that drafted the line.
The SBA says a small business should make sure someone can manage accounts receivable, accounts payable, available cash, bank reconciliation, and payroll [8]. An agent can list open invoices or unmatched bank lines. It does not replace the person in those jobs. If you use free AI tools or software, the SBA says to have another person review all AI products so they are used ethically, securely, and in a manner that accurately represents the business [8]. We use that second review on every proposed bill and journal line, paid software included.
The accrual method puts a transaction on the books when the sale is completed. The cash method records it once payment has been received [8]. A draft on the wrong method is an exception, even when the amount is right. Changing the original date to slide a sale into another month is not a correction.
In Charlotte, the usual close is an owner and one bookkeeper. Preparation sits with the bookkeeper. The exception queue and the reversal sit with the owner, who has to accept a payment or a journal before it goes out.
Correct the file without rewriting history
When a posted line is wrong, we reverse it or we post a correcting entry in the same company file. We do not delete the original and type a cleaner story over it. That rule follows from how the IRS treats electronic books in an examination. It is not a journal template the IRS publishes for every shop.
The IRS says an accounting software backup file is an exact copy of the original books of entry, and that the copy lets an examiner review and test the integrity of the original electronic records [5]. That testing cannot adequately be performed on records that have already been converted into spreadsheets [5]. If someone creates a new company file by re-entering transactions for only the year under examination, the IRS says the new file does not meet the examination's needs, because the new or modified file is not a copy of the books and records of original entry [5]. Condensed data, old detail replaced by summary entries, is not acceptable for the tax year under audit [5]. Under Internal Revenue Code section 6001, taxpayers are responsible for maintaining sufficient books and records to support the income and deductions claimed on the return, and for presenting that information when the IRS requests it in an examination [5].
A reversal leaves the original line in place. The new line is dated when a person found the error, and the memo names the signer. Keep any archive the software writes before older years are condensed.
Before a draft posts, the bookkeeper checks support. You may use any recordkeeping system that clearly shows income and expenses, and the books must show gross income, deductions, and credits [4]. For most small businesses the checking account is the main source of book entries [4]. Supporting documents include sales slips, paid bills, invoices, receipts, deposit slips, and canceled checks, and they support the books and the tax return [4]. An expense or purchase document should identify the payee, the amount, proof of payment, the date, and a description showing the amount was for the business, and a combination of documents may be needed [4]. Hard-copy requirements also apply to electronic records and to the software used to keep them [4]. A note with no payee, or a screenshot with no proof of payment, stays in the queue until a person supplies what is missing or refuses the draft. The line joins the books only when a person accepts it.
Keep the log as long as the return needs it
The log lives with the books. A chat thread that expires is not the file.
How long you keep a document depends on the action, expense, or event it records. Generally, keep records that support an item of income, deduction, or credit on the return until the period of limitations for that return runs out [3]. Keep records for 3 years if the longer situations do not apply, for 6 years if you omit income that is more than 25 percent of the gross income shown on the return, for 7 years if you claim a loss from worthless securities or a bad debt deduction, and indefinitely if you do not file a return or you file a fraudulent return [3]. Keep employment tax records for at least 4 years after the tax becomes due or is paid, whichever is later, and keep property records until the limitations period ends for the year you dispose of the property [3]. Returns filed before the due date are treated as filed on the due date [3]. When the tax period is over, check whether an insurer or a creditor needs the file longer before you discard it [3].
A reversal memo from a closed year is part of that support, including payroll the owner signed. The 2023 NIST framework notes that documentation can enhance transparency, improve human review, and bolster accountability in AI system teams [6]. The log is that record, and it is what you produce later instead of a cleaned export [5].
Run a close the owner will keep
During the week the agent may draft into a status called Proposed. Nothing in Proposed posts or gets paid. The bookkeeper checks payee, amount, proof, date, and business purpose [4]. Clean items wait in a batch the owner still releases. Everything else waits on the named owner, who signs, returns, or refuses. A refusal stays in the log with the reason.
After posting, a person reconciles the bank. The SBA lists that job among the work someone must be able to manage [8]. The agent may flag unmatched lines. A person owns the difference, and a posted error comes back as a reversal rather than a silent edit. Payroll, a new vendor, and cash stay on that path even when the draft looks tidy [8]. Once a month, read the log for a repeated vendor or instruction and narrow what the agent may draft. The 2023 framework places decisions about AI deployment risk on executive leadership, so changing those rules is the owner's job on a small set of books [6]. The name on the sheet has to be a person who can still refuse the draft when the return is filed.
Practical takeaways
- Name the exception owner, the reversal signer, and the log keeper before the first draft. If the owner built the agent, give cash and payroll a second reader.
- Let the agent propose. Do not let it post or pay. The illustration for federal award recipients separates the person who initiates a line from the person who approves it and the person who records it, and it calls for another control when that split is not practical [1].
- Reverse or correct a bad line in the same company file. Do not rebuild the year, overwrite the original, or treat a spreadsheet as the books of original entry [5].
- Keep the log with the return: 3 years if the longer situations do not apply, 6 years when omitted income is more than 25 percent of gross income shown on the return, 7 years for a worthless-securities or bad-debt claim, and at least 4 years for employment tax records [3].
- Keep a person on payables, cash, bank reconciliation, and payroll, even when an agent prepares the list [8].
How we can help
We help the owner and the bookkeeper write the ownership sheet, decide which drafts may sit in Proposed, and set the reversal habit before an agent is allowed near the ledger. You can see how we approach applied AI for operating work on our AI business tools page.
Have more questions or want to get in touch?
Visit our contact page, call (980) 322-4500, or email [email protected].
Citations
- Office of Management and Budget, 2025 Compliance Supplement, "Part 6 - Internal Control" (2025)
- Office of Management and Budget, "Circular A-123, Management's Responsibility for Internal Control" (2026)
- Internal Revenue Service, "How long should I keep records?" (2026)
- Internal Revenue Service, "What kind of records should I keep" (2026)
- Internal Revenue Service, "Use of electronic accounting software records: Frequently asked questions and answers" (2026)
- National Institute of Standards and Technology, "AI RMF Core" (2023)
- National Institute of Standards and Technology, "AI RMF Playbook: Govern" (2023)
- U.S. Small Business Administration, "Manage your business" (2026)
