Prepared by: Layer8TechGroup · Framework: 10 Technology Fixes · Documents Ingested: 11
Assessment Scores — 8-Domain Profile
Buyer Discount Risk
EBITDA (most recent FY): $254,200 (AI-extracted) · Exit Readiness: 4.3/10 — Material Gaps
| Score | Band | Buyer Discount Risk |
|---|---|---|
| 8.0 – 10.0 | Institutional Ready | Minimal — few gaps for buyers to exploit |
| 6.5 – 7.9 | Market Ready | Low — some negotiating leverage for buyers |
| 5.0 – 6.4 | Needs Preparation | Moderate — expect re-trade attempts |
| 3.5 – 4.9 | Material Gaps | High — significant discount likely |
| Below 3.5 | Not Ready | Very High — consider delaying go-to-market |
Scores reflect readiness relative to what buyers examine in diligence — not a valuation guarantee. For a specific valuation range, share your Exit Readiness Score with your broker or M&A advisor.
↑ What strengthens your position
- High client retention >90%
- Engagement letters assignable
- Staff CPA capacity beyond owner
- Seasonal workflow documented
↓ What buyers will flag
- Owner performs all technical work
- Client relationships not transferable
- No engagement letter documentation
Top 3 Strengths
- No domain in this assessment reached the level this report will describe as a strength. That is a statement about where the scores sit today, not a judgement that the business has none — the Priority Fixes below are where the nearest ones are.
Top 3 Risks
- OROwner Risk at 2.8/10 (CRITICAL RISK) represents a deal-blocking exposure that will trigger substantial buyer discount and re-trade risk. Buyers conducting founder-dependency diligence will identify concentrated decision-making authority, client relationships, or operational knowledge locked within the ownership structure, creating immediate concerns about post-close continuity and management stability. This critical gap requires remediation before listing and will likely prompt buyers to demand earnout structures, founder retention agreements, or material price concessions to offset transition and retention risk.
- DRDiligence Risk at 3.7/10 (NEEDS WORK) indicates material gaps in financial documentation, process transparency, or operational records that will surface during buyer due diligence and create a material liability. Accounting firms face heightened scrutiny around revenue recognition, client engagement quality, and compliance file hygiene; gaps here will trigger buyer requests for extensive remediation schedules and raise concerns about hidden compliance or engagement risk. Buyers will apply a haircut to account for the cost and timeline of closing diligence gaps and will likely demand extended representations and warranties to protect against post-close discovery.
- HCHuman Capital at 3.5/10 (NEEDS WORK) reflects gaps in recruitment, retention, skill documentation, or succession planning that will create a deal-risk factor during buyer integration planning. Accounting firms depend on technical talent and client relationship managers; buyers will flag this needs-work posture as a source of post-close attrition and revenue leakage risk, particularly in a tight labor market. This critical gap will likely result in a buyer discount tied to expected turnover costs, backfill hiring, and transition disruption, and may require an earnout tied to employee retention metrics.
Recommended Priority Fixes
The five highest-priority actions for the next 90 days, ranked by deal impact. For the complete domain-by-domain remediation plan and cost estimates, see the Value Recovery Roadmap below.
Domain Detail & Findings
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| dr_01 | Tier A Document Set Completeness Document evidence GPA_Customer_Contract_Harrington.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_Employee_Roster.csv · GPA_CIM.txt · GPA_GL_Export.csv Garrison Professional Advisors has provided an employee roster with hire dates and compensation, one customer engagement letter (Harrington Real Estate Holdings), and financial statements covering FY 2023–2025 with a general ledger export for Q1 2025. However, the data room is missing tax returns, corporate formation records, a complete customer contract set (only one engagement letter is present), and insurance certificates. The customer onboarding documentation indicates engagement letters exist in Outlook drafts as templates rather than as a formalized, signed contract set, and no evidence of comprehensive financial statements or tax filings is included in the retrieved excerpts. | 4/10 | NEEDS WORK | |
| dr_02 | Evidence Currency Document evidence GPA_Customer_Contract_Harrington.txt · GPA_Employee_Roster.csv · GPA_Customer_Onboarding_SOP.txt · GPA_CIM.txt · GPA_HC_Profile.txt The company's dated artifacts are largely current for an exit evaluation as of April 2026. The Human Capital Profile is dated April 2026, the Employee Roster contains current hire dates through June 2023, and the customer engagement letter is dated January 15, 2025 for the 2025 tax year with ongoing services. However, the Confidential Information Memorandum (CIM) lacks an explicit preparation date, creating minor visibility gaps on the recency of the $640K annualized revenue figure and risk factor assessment. | 7/10 | ADEQUATE | |
| dr_03 | Substantiation of Stated Figures Document evidence GPA_Cybersecurity_Assessment.txt · GPA_GL_Export.csv · GPA_IT_Asset_Inventory.csv · GPA_Customer_Contract_Harrington.txt · GPA_Customer_Onboarding_SOP.txt Garrison Professional Advisors has not provided substantiation documents for most headline figures typical in an exit process—revenue, EBITDA, headcount, customer count, and retention rates do not appear as explicit summary statements in any of the retrieved documents. While the GL Export (GPA_GL_Export.csv) contains individual transaction line items showing bookkeeping and tax revenue invoices and labor costs, there is no consolidated financial statement, annual summary, or management report presenting aggregate revenue or EBITDA figures. The IT Asset Inventory and Customer Contract documents reference individual assets and one named client respectively, but no document presents total headcount, customer count, or retention metrics as stated figures. | 3/10 | CRITICAL RISK | |
| dr_04 | Corporate Records Completeness Document evidence GPA_Customer_Contract_Harrington.txt · GPA_CIM.txt · GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors has a formation document (LLC entity established in Georgia) and basic ownership structure evident from the CIM, but critical corporate governance and capitalization documentation is absent from the retrieved records. The documents provide no evidence of a current operating agreement, shareholder/member agreement, capitalization table, or formal governance records such as minutes or resolutions; the only governance-related note is that "no succession plan or buy-sell agreement in place" exists, underscoring the gaps in foundational corporate documentation required for a professional exit process. | 3/10 | CRITICAL RISK | |
| dr_05 | Contract File Completeness Document evidence GPA_Customer_Contract_Harrington.txt · GPA_CIM.txt · GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors lacks a systematic contract management process, with evidence limited to a single executed engagement letter with Harrington Real Estate Holdings and informal onboarding notes referencing email-based templates and unsigned drafts in Outlook. The new client onboarding SOP describes engagement letters as templates sent via email for manual signing rather than centrally filed and tracked, and there is no evidence of organized repositories, retrieval systems, or executed copies of material vendor or lease agreements on file. | 3/10 | CRITICAL RISK | |
| dr_06 | Employment File Completeness Document evidence GPA_Customer_Onboarding_SOP.txt · GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt · GPA_Employee_Roster.csv Garrison Professional Advisors maintains an employee roster identifying 6 full-time staff with hire dates, roles, and compensation, and a Human Capital Profile documents organizational structure with tenure and retention metrics. However, no offer letters or employment agreements, employee handbook, formal organizational chart, or eligibility records are evident in the filed documents; the onboarding process notes indicate engagement letters are "needs to be formalized" and exist only as "template in Outlook drafts," and the profile explicitly states "no formal handoff process is documented" for new hire orientations. | 3/10 | CRITICAL RISK | |
| dr_07 | Data Room Organisation & Access Document evidence GPA_Cybersecurity_Assessment.txt · GPA_Employee_Roster.csv · GPA_Customer_Onboarding_SOP.txt · GPA_IT_Asset_Inventory.csv · GPA_HC_Profile.txt Garrison Professional Advisors lacks a structured data room with organized filing, indexing, or consistent naming conventions. The retrieved documents consist of scattered internal assessments, employee rosters, procedure notes described as needing formalization, and IT asset lists—none of which demonstrate a cohesive, produceable collection with clear organization or access protocols. The cybersecurity assessment itself notes that client onboarding procedures exist only as informal notes from individual staff members rather than as formally documented, indexed processes, indicating that underlying business documentation is similarly dispersed and would require significant reassembly for buyer access. | 3/10 | CRITICAL RISK |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| owr_01 | Succession Readiness Document evidence GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_Employee_Roster.csv Garrison Professional Advisors has no documented succession plan, no cross-training program, and no buy-sell agreement in place. The owner holds all 67 client relationships and is the only CPA licensed to sign returns, creating a single-point-of-failure dependency; the firm has not operated without this key employee for more than one week in the past 3 years, and a senior bookkeeper manages 41 clients independently with no identified backup, meaning client relationship continuity would be at risk if either departed unexpectedly. | 2/10 | CRITICAL RISK | |
| owr_02 | Institutional Knowledge Capture Document evidence GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_AR_Aging.csv · GPA_IT_Asset_Inventory.csv Garrison Professional Advisors has minimal formal documentation of critical processes and institutional knowledge. The customer onboarding SOP exists only as informal notes from a key employee describing ad-hoc practices, with the author acknowledging "nothing formal" exists and recommending a checklist be created. The company lacks documented succession planning, cross-training programs, and formal handoff processes—a key employee holds direct relationships with 48 of 67 clients (72% of revenue) and has onboarded associates with no documented process, while the owner must be involved in all new hire orientations, creating pervasive single-person dependency. | 3/10 | CRITICAL RISK | |
| owr_03 | Management Team Depth Document evidence GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt Garrison Professional Advisors lacks a functional management layer, with a single key employee serving as primary contact for 72% of client relationships by revenue, sole resource for monthly bookkeeping, manager of all performance reviews, and required participant in all new hire orientations. The firm has not operated without this key employee for more than one week in the past 3 years, and no documented succession plan, cross-training program, or formal backup exists for any critical role; if this employee were absent for an extended period, client relationship continuity would be at risk despite another key employee holding independent relationships with 19 clients (28% of revenue). | 3/10 | CRITICAL RISK | |
| owr_04 | Key Person Concentration Beyond Owner Document evidence GPA_Employee_Roster.csv · GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_CRM_Pipeline.csv Garrison Professional Advisors has a single senior employee who holds direct relationships with 48 of 67 clients (72% of revenue) and is the primary contact for all new client onboarding, with no documented backup or formal introduction of alternatives to key accounts. The human capital profile explicitly states "No documented succession plan for any key role. No cross-training program" and notes that "if a key employee were absent for an extended period...client relationship continuity would be at risk," indicating that departure of this senior staff member would cause material revenue disruption despite the existence of a junior CPA with some independent client relationships. | 3/10 | CRITICAL RISK |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| cq_01 | Top Customer Concentration Document evidence GPA_Financials.csv · GPA_Customer_Contract_Harrington.txt · GPA_CIM.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors demonstrates excellent customer diversification with the largest customer (Harrington Real Estate Holdings) representing only 3.5% of total revenue and the top 5 customers representing approximately 12.5% of combined revenue ($28,800 + $24,000 + $21,600 + $19,200 + $18,000 = $111,600 out of $820,000). The company serves 67 active client relationships across multiple service verticals including tax preparation, bookkeeping, and CFO advisory, with 78% recurring revenue that substantially reduces customer concentration risk. | 9/10 | STRONG | |
| cq_02 | Revenue Predictability & Recurring Mix Document evidence GPA_CIM.txt · GPA_GL_Export.csv · GPA_Customer_Contract_Harrington.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors derives 78.0% of its FY 2025 revenue from recurring sources, with $640,000 in annualized recurring revenue primarily composed of monthly bookkeeping retainers ($53,333 MRR) and annual tax preparation engagements on auto-renewing calendar-year terms. The Harrington Real Estate engagement letter exemplifies the company's contract structure, featuring automatic renewal language with 30-day termination provisions and monthly invoicing for bookkeeping services, though the documents do not provide explicit renewal rate tracking or historical client retention data to fully validate 12-month predictability. | 8/10 | STRONG | |
| cq_03 | Contract Transferability Document evidence GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt · GPA_CRM_Pipeline.csv Garrison Professional Advisors' customer contracts include assignment language but require client consent; the Harrington engagement letter states "Services may be assumed by a successor firm in the event of sale or merger of Garrison Professional Advisors, subject to client consent which will not be unreasonably withheld." However, this consent requirement applies across the contract base, and no centralized contract repository or documentation of assignment clauses in other customer agreements is evident from the provided materials, creating uncertainty about uniform transferability across all 67 client relationships. | 5/10 | NEEDS WORK | |
| cq_04 | Churn Rate & Retention Metrics Document evidence GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_Financials.csv · GPA_HC_Profile.txt Garrison Professional Advisors does not track customer churn rate or retention metrics in its internal documentation. The company reports no formal churn analysis, root-cause investigation, or retention recovery programs. While recurring revenue has grown from $510,000 (FY2023) to $640,000 (FY2025) and represents 78% of total revenue, the documents provide no evidence of systematic monitoring of customer attrition, voluntary departures, or proactive retention initiatives beyond standard engagement letter auto-renewal language. | 3/10 | CRITICAL RISK |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| ops_01 | Process Documentation & Repeatability Document evidence GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_IT_Asset_Inventory.csv · GPA_HC_Profile.txt · GPA_AR_Aging.csv Garrison Professional Advisors lacks formal process documentation for its core workflows. The customer onboarding SOP exists only as informal notes from a key employee, with no checklist and heavy reliance on manual steps performed by specific individuals—including client meetings, Canopy setup, QuickBooks configuration, and book cleanup. The company acknowledges this gap explicitly ("We should have a checklist for new bookkeeping clients. I keep a personal list but nothing formal"), and the bench depth assessment confirms that a key employee holds direct relationships with 48 of 67 clients, making client execution dependent on individual knowledge rather than repeatable documented processes. | 3/10 | CRITICAL RISK | |
| ops_02 | Technology & Systems Scalability Document evidence GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt Garrison Professional Advisors relies on a mix of cloud and legacy systems with significant security and scalability gaps. While the firm uses cloud-based QuickBooks Online, Canopy, and Gusto, critical client tax data is stored on unencrypted local drives with no cloud backup, all staff share a single QuickBooks admin login with no audit trail, and the cybersecurity assessment identifies multiple HIGH-risk access control gaps including MFA missing for 3 of 5 staff members. Scaling to 3x revenue would require material remediation of these system vulnerabilities and architectural improvements to support individual access controls, encryption, and proper audit logging across client data before the current infrastructure could handle meaningful growth. | 4/10 | NEEDS WORK | |
| ops_03 | Vendor & Supplier Concentration Document evidence GPA_CIM.txt · GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt · GPA_Customer_Onboarding_SOP.txt Garrison Professional Advisors exhibits critical single-source vendor dependencies that pose existential risk to operations. All client data resides in QuickBooks Online under the firm's master account with "all staff share one admin login," and the company's practice management platform (Canopy) and tax preparation software (Drake Tax) create additional vendor lock-in with no documented alternatives; moreover, the firm lacks formal SLAs, has no data portability plan, and client tax files are stored on unencrypted local drives with no cloud backup, meaning loss of access to these platforms or systems would immediately halt client service delivery and make client data recovery problematic. | 2/10 | CRITICAL RISK | |
| ops_04 | Financial Controls & Reporting Cadence Document evidence GPA_Customer_Contract_Harrington.txt · GPA_Cybersecurity_Assessment.txt · GPA_HC_Profile.txt · GPA_GL_Export.csv Garrison Professional Advisors produces monthly bookkeeping services for clients via QuickBooks Online as documented in the Harrington engagement letter, but no internal evidence exists of a formalized monthly financial close process, budget vs. actual review, or documented internal controls for the firm's own accounting. The cybersecurity assessment identifies that all staff share a single QuickBooks admin login with no audit trail of individual access, and the general ledger export shows transaction-level activity but no indication of a structured close cadence, formal reconciliation oversight, or a dedicated CFO or Controller role managing internal financial controls. | 5/10 | NEEDS WORK |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| fr_01 | Books Quality & CPA Relationship Document evidence GPA_Customer_Contract_Harrington.txt · GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt · GPA_GL_Export.csv Garrison Professional Advisors maintains a relationship with a Georgia CPA license holder who provides monthly bookkeeping services via QuickBooks Online and annual tax preparation for clients, as evidenced by the engagement letter with Harrington Real Estate Holdings dated January 15, 2025. However, the company's financial statements are compiled rather than reviewed or audited—the documents show internally prepared general ledger exports and financial summaries with add-backs totaling $43,800 in FY 2025, but provide no evidence of CPA review or audit engagement for the company's own financial statements. The firm demonstrates basic accounting infrastructure through cloud-based QuickBooks Online and monthly reconciliations for clients, but lacks third-party validation of its own financial records prior to exit. | 5/10 | NEEDS WORK | |
| fr_02 | Add-Back Documentation Document evidence GPA_CIM.txt · GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors has identified $43,800 in normalized EBITDA add-backs for 2025 ($32,000 owner compensation above market rate, $8,400 personal vehicle lease, $3,400 personal phone and home office), which are listed in the CIM but lack formal supporting schedules or independent CPA verification. The documents show owner-specific arrangements requiring cleanup—including vehicle lease, personal cell and meals, home office deduction, and owner's health insurance—are standard add-backs but no formal add-back documentation, supporting evidence schedules, or CPA review are referenced in the retrieved materials. A buyer's accountant would likely require additional support and formal documentation to independently verify the normalized EBITDA calculation and the market-rate benchmark used to support the $32,000 owner compensation adjustment. | 5/10 | NEEDS WORK | |
| fr_03 | Revenue Recognition & Consistency Document evidence GPA_Customer_Contract_Harrington.txt · GPA_GL_Export.csv · GPA_CIM.txt · GPA_HC_Profile.txt Garrison Professional Advisors recognizes revenue in two primary categories—Bookkeeping and Tax—with monthly retainers invoiced consistently (e.g., $48,000 in February, $52,000 in March for all monthly retainer clients) and tax work billed upon completion or as deposits/final balances. However, the GL export shows tax deposits recorded as revenue in the same period as invoicing without documented evidence of formal deferred revenue tracking or a written revenue recognition policy aligned with GAAP, and the engagement letter indicates tax fees are split 50% deposit/50% upon completion, yet the GL entries do not clearly distinguish between deposit liability and earned revenue recognition timing. The company's revenue recognition practices appear functionally consistent but lack formal documentation, audit trail clarity, and explicit GAAP policy statements necessary to demonstrate uniform application across all service types. | 5/10 | NEEDS WORK | |
| fr_04 | Three-Year Financial Trend Document evidence GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt · GPA_Financials.csv Garrison Professional Advisors demonstrated consistent revenue growth over three years, with total revenue increasing from $680,000 (FY 2023) to $820,000 (FY 2025), representing year-over-year growth of 10.0% and 9.6% respectively, while EBITDA margins improved from 28.0% to 31.0% over the same period. Recurring revenue, which represents the most stable portion of the business, grew from $510,000 to $640,000 and increased as a percentage of total revenue from 75.0% to 78.0%, demonstrating improving business quality and predictability. | 7/10 | ADEQUATE |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| lc_01 | Business Licenses & Permits Document evidence GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_GL_Export.csv · GPA_Customer_Onboarding_SOP.txt Garrison Professional Advisors has documented that "a key employee holds a Georgia CPA license" and operates as a "Licensed CPA firm — Georgia State Board of Accountancy," but the documents provide no evidence of current license verification, renewal status, PTIN registration for tax preparers, peer review program enrollment, or EFIN authorization. The CIM identifies "Extreme owner dependency — a key employee holds all 67 client relationships; no other CPA on staff can sign returns" and notes "Single CPA license risk — firm cannot operate without Richard," indicating a critical gap in entity-level license independence and no documented transferability assessment with legal counsel for a change-of-control transaction. | 3/10 | CRITICAL RISK | |
| lc_02 | Contract Change-of-Control Provisions Document evidence GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Employee_Roster.csv · GPA_CIM.txt · GPA_CRM_Pipeline.csv Garrison Professional Advisors has engagement letters with change-of-control assignment language—the Harrington engagement letter explicitly permits services to be "assumed by a successor firm in the event of sale or merger" subject to client consent "which will not be unreasonably withheld"—but the firm lacks evidence of systematic legal review of all material contracts or documented procedures ensuring consistent assignment provisions across the 67 client relationships. The onboarding documentation shows engagement letters are managed informally through email templates and Outlook drafts rather than through a formalized, tracked process, creating risk that assignment language may be inconsistently applied or missing from some client files. | 6/10 | ADEQUATE | |
| lc_03 | Employment Law Compliance Document evidence GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_Customer_Contract_Harrington.txt · GPA_HC_Profile.txt Garrison Professional Advisors employs 6 full-time staff classified as W-2 employees with portable benefits, and the human capital profile confirms compensation has been "benchmarked against AICPA CPA Firm Compensation Survey and PASBA small firm benchmarks." However, critical employment compliance documentation gaps exist: the onboarding process is informal with "no formal handoff process documented," the owner's compensation structure ($195,000 in S-corp distributions) is "NOT on employee payroll and requires restructuring at close," and there is no documented PTO accrual policy despite informal practices in place. The documents contain no evidence of CPA non-solicitation agreements, formal I-9 verification processes, or license sponsorship continuation arrangements for the two CPAs on staff. | 5/10 | NEEDS WORK | |
| lc_04 | Intellectual Property Ownership Document evidence GPA_HC_Profile.txt · GPA_Customer_Contract_Harrington.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt Garrison Professional Advisors lacks formal IP ownership documentation and exhibits material ambiguity regarding client data and work product ownership. Client files, engagement letters, and tax preparation work are managed through platforms (Canopy, Drake Tax, QuickBooks Online) and stored on local unencrypted drives with shared credentials across all staff, creating no clear audit trail of entity-level ownership versus individual staff access. The onboarding process is documented only in informal notes by the managing partner with no formalized client file structure, engagement letter template, or documented procedures for transferring client relationships to successor staff or to an acquirer, and the firm's engagement letters reference successor firm assumption only "subject to client consent" without pre-established entity-level ownership of the underlying work product and client records. | 3/10 | CRITICAL RISK | |
| lc_05 | Litigation & Contingent Liability Document evidence GPA_Customer_Contract_Harrington.txt · GPA_GL_Export.csv · GPA_CIM.txt · GPA_HC_Profile.txt Garrison Professional Advisors maintains current professional liability insurance with $680/month in premiums documented in the general ledger as of January 2025, and the CIM confirms the firm holds a Georgia CPA license with no audit practice that would trigger additional regulatory scrutiny. However, the documents provide no evidence of claims-made versus occurrence-based policy structure, no tail coverage cost estimate, no review of state board disciplinary history for the licensed CPA, no documentation of AICPA Ethics Division or state board records, and no confirmation of absence of IRS Circular 230 violations or client indemnification claims from prior work—all standard due diligence items for an accounting firm exit. | 7/10 | ADEQUATE |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| tm_01 | Core Systems Documentation & Ownership Document evidence GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Customer_Contract_Harrington.txt Garrison Professional Advisors relies on undocumented, informal processes with significant personal account dependencies that create material risk for a sale. Core systems show critical gaps: all 67 client QuickBooks accounts are accessed via a single shared login with no audit trail of individual staff access; client tax files containing SSNs and EINs are stored on unencrypted local drives; Drake Tax data is backed up to an owner's personal iCloud account; and client onboarding is documented only in informal personal notes rather than formal procedures. The cybersecurity assessment identifies the firm as above acceptable threshold for a sale process, with estimated remediation costs under $2,000, but the underlying systems architecture requires substantial restructuring before ownership can be cleanly transferred. | 3/10 | CRITICAL RISK | |
| tm_02 | Cybersecurity & Data Protection Posture Document evidence GPA_Cybersecurity_Assessment.txt · GPA_CRM_Pipeline.csv · GPA_GL_Export.csv · GPA_CIM.txt · GPA_HC_Profile.txt Garrison Professional Advisors operates with basic endpoint protection (Windows Defender only) and no EDR solution, despite handling sensitive financial data for 67 clients—a high-value ransomware target. The cybersecurity assessment identifies critical gaps including MFA not enabled for 3 of 5 staff members, client tax files stored on unencrypted local drives containing SSNs and EINs, and no documented incident response plan, formal data retention policy, or cyber insurance mentioned in any reviewed documents. While the assessment rates overall risk as "MEDIUM" and notes remediation costs under $2,000, the absence of EDR, data classification, tested IR procedures, and vendor security review processes places the company below exit-ready standards for a professional services firm handling client PII and financial data. | 4/10 | NEEDS WORK | |
| tm_03 | Data Integrity & Business Intelligence Document evidence GPA_Cybersecurity_Assessment.txt · GPA_Customer_Contract_Harrington.txt · GPA_CRM_Pipeline.csv · GPA_AR_Aging.csv · GPA_CIM.txt Garrison Professional Advisors operates with significant data integrity and accessibility challenges that create operational risk and individual dependencies. Critical client data—including SSNs, EINs, and tax files containing sensitive financial information for 67 clients—is stored on unencrypted local drives with no cloud backup, all staff share a single QuickBooks admin login with no individual audit trail, and Drake Tax data is backed up to the owner's personal iCloud account rather than a secure business system. While basic CRM and accounts receivable records exist (pipeline and aging reports are available), the firm lacks formal data governance, relies heavily on manual processes and individual staff knowledge, and has no reliable BI reporting or documented procedures to ensure data accessibility independent of key personnel. | 3/10 | CRITICAL RISK | |
| tm_04 | Technology Vendor & Subscription Management Document evidence GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt · GPA_GL_Export.csv · GPA_Customer_Onboarding_SOP.txt · GPA_HC_Profile.txt Garrison Professional Advisors uses QuickBooks Online for 41 client bookkeeping subscriptions and Canopy Practice Management, but vendor documentation is minimal and informal. The onboarding SOP notes indicate that engagement letters exist as email templates in Outlook drafts rather than formal tracked contracts, and there is no documented process for managing license transferability or renewal dates across these platforms. Additionally, the GL export shows a personal software license ($480 annually) allocated to "a key employee" with unclear entity ownership status, creating potential transfer risk at exit. | 4/10 | NEEDS WORK | |
| tm_05 | Technical Debt & Modernization Risk Document evidence GPA_Cybersecurity_Assessment.txt · GPA_HC_Profile.txt · GPA_AR_Aging.csv · GPA_Customer_Contract_Harrington.txt · GPA_Employee_Roster.csv · GPA_Customer_Onboarding_SOP.txt Garrison Professional Advisors operates on a dated technology stack with material security and infrastructure gaps requiring post-close investment. The cybersecurity assessment identifies five significant vulnerabilities including unencrypted tax files containing SSNs and EINs, shared QuickBooks credentials across 67 client accounts with no audit trail, absence of endpoint detection and response protection, and no cloud backup for critical tax data—with estimated remediation costs under $2,000 one-time plus ongoing monthly expenses of $60-95. While the identified gaps are documented with clear remediation paths, the presence of legacy local-only infrastructure, lack of modern security controls, and reliance on basic Windows Defender in a high-risk industry for a client services firm indicate meaningful technical debt that a buyer would need to address immediately post-close. | 4/10 | NEEDS WORK |
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| hc_01 | Workforce Retention & Tenure Document evidence GPA_HC_Profile.txt · GPA_CRM_Pipeline.csv · GPA_Employee_Roster.csv Garrison Professional Advisors maintains stable senior leadership with zero turnover among its 3 partner/senior staff over the rolling 24 months, including a 12-year founding partner and 8-year bookkeeper, but faces 40% annual associate-level turnover with a firm-wide average tenure of 3.8 years. The company's single-point-of-failure risk is significant: the managing partner holds direct relationships with 72% of client revenue and must be involved in all new hire orientations, while the senior bookkeeper serves as the sole resource for monthly bookkeeping with no identified backup. New-hire retention stands at 62% over 12 months, and associate compensation is noted as below market, which the firm acknowledges partially explains typical turnover in this cohort. | 5/10 | NEEDS WORK | |
| hc_02 | Compensation Competitiveness Self-reported GPA_HC_Profile.txt · GPA_CIM.txt Garrison Professional Advisors has benchmarked compensation against AICPA and PASBA surveys, but lacks a formal process to maintain market alignment and has no retention mechanisms in place. Associate CPA and staff accountant roles are positioned below market (associate at lower-quartile, staff accountant $4,000 below AICPA median), and raises are set discretionary by a key employee with no documented formula, contributing to typical 40% annual associate turnover. No retention bonuses exist for any staff, and the managing partner's $195,000 S-corp distribution structure requires restructuring at close, creating payroll cost uncertainty for an acquirer. | 4/10 | NEEDS WORK | |
| hc_03 | Recruiting & Training Capability Document evidence GPA_HC_Profile.txt · GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt Garrison Professional Advisors lacks formal hiring and training infrastructure, with owner approval required for all hires and onboarding managed primarily through informal "learning by doing" alongside the managing partner rather than a documented program. New-hire 12-month retention stands at 62% (3 of 8 hires over 4 years departed within the first year), and the documents note no formal onboarding checklist, milestone review process, or documented succession capability for recruiting and training functions. The company's internal client onboarding notes explicitly state "needs to be formalized" and reference only personal checklists kept by key staff, indicating that scaling hiring without owner involvement is not currently feasible. | 3/10 | CRITICAL RISK | |
| hc_04 | Bench Depth & Succession Beyond Owner Document evidence GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt Garrison Professional Advisors has critical single-points-of-failure across multiple key roles with no documented succession planning or cross-training program. A key employee holds direct relationships with 48 of 67 clients (72% by revenue) and is the sole resource for staff supervision and monthly bookkeeping, with no identified backup for bookkeeping and no formal introduction of other staff as backups for top accounts. The firm has not operated without this key employee for more than one week in the past three years, and the assessment explicitly states that "if a key employee were absent for an extended period...client relationship continuity would be at risk," with only routine returns able to be handled by the identified secondary CPA. | 2/10 | CRITICAL RISK | |
| hc_05 | Compensation/Benefits Structure Transferability Document evidence GPA_HC_Profile.txt · GPA_CIM.txt · GPA_Customer_Contract_Harrington.txt Garrison Professional Advisors has significant owner-specific compensation arrangements requiring cleanup at close: the owner draws $195,000 in S-corp distributions outside employee payroll and requires restructuring, while personal expenses ($850/month vehicle lease, $3,600/year personal cell and meals, $4,800/year home office deduction) are currently paid through the entity as add-backs. While all staff are on standard W-2 employment with portable benefits (Blue Cross group health plan, Solo 401(k) for owner, SEP-IRA for employees), the informal PTO accrual policy with no documented balance sheet liability and the owner's discretionary compensation structure create transition risk that an acquiring firm would need to address at close. | 4/10 | NEEDS WORK |
Complete remediation plan across all scored domains. The Priority Fixes section above highlights the five ranked starting points.
| Domain | Layer8 Service | Value at Risk | Est. Timeline | Typical Investment |
|---|---|---|---|---|
CQCustomer Quality | Contract Audit & CRM Implementation | $7,245 | ⏱ 6–8 wks | $5,000 – $9,000 |
DRDiligence Risk | Security Hardening & Data Room Preparation | $6,482 | ⏱ 6–8 wks | $4,500 – $7,500 |
OROwner Risk | Succession Planning & Knowledge Capture Sprint | $6,482 | ⏱ 8–10 wks | $6,000 – $10,000 |
HCHuman Capital | Workforce Retention & Bench Depth Sprint | $5,338 | ⏱ 10+ wks | $5,000 – $8,000 |
LCLegal & Regulatory Compliance | Legal Compliance Audit & Contract Review | $4,194 | ⏱ 6–8 wks | $3,500 – $6,500 |
FRFinancial Readiness | Books Cleanup & Add-Back Schedule | $3,813 | ⏱ 4–6 wks | $2,000 – $4,000 |
OSOperational Scalability | Process Documentation & Systems Audit | $2,669 | ⏱ 10+ wks | $6,500 – $11,000 |
TMTechnology & Systems Maturity | Technology Infrastructure Audit & Modernization Plan | $1,907 | ⏱ 8–12 wks | $5,000 – $9,000 |
| TOTAL | $38,130 | — | $37,500 – $65,000 | |
Typical investment ranges reflect market-rate remediation costs and are provided for prioritization purposes only. Actual engagement scope and pricing depend on business size, gap severity, and selected service provider. Layer8 Tech Group LLC provides formal engagement proposals following assessment delivery.
Layer8 Tech Group LLC delivers these services for businesses preparing for acquisition.Schedule a Discovery Call →
Layer8 Tech Group LLC delivers each of these services for businesses preparing for acquisition. Engagements are scoped to your timeline and deal target.Schedule a Discovery Call →
Accounting firm revenue infrastructure is driven by client retention, referral network quality, and seasonal workflow management rather than high-velocity lead automation.
Automation maturity is scored separately from the overall readiness score. The gaps below represent operational efficiency opportunities and post-close value creation for a buyer — not buyer discount risk.
| # | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| R01 | AI Voice / After-Hours Call Handling No evidence submitted · withheld from score GPA_Customer_Onboarding_SOP.txt · GPA_CIM.txt · GPA_HC_Profile.txt · GPA_Cybersecurity_Assessment.txt There is no evidence of AI voice agents or automated after-hours call handling in any of the retrieved documents; the company uses cloud-based practice management tools (Canopy, QuickBooks Online) but no mention is made of inbound call automation, and after-hours call handling appears to be absent entirely. | — | ||
| R02 | CRM Presence & Workflow Automation Document evidence GPA_CIM.txt · GPA_HC_Profile.txt · GPA_CRM_Pipeline.csv · GPA_Cybersecurity_Assessment.txt · GPA_Customer_Onboarding_SOP.txt The firm uses Canopy for client management and maintains a tracked pipeline in a CRM system, but workflow automation is minimal and heavily dependent on a single key employee who owns all 12 active pipeline deals and manually manages client onboarding with only informal checklists and personal notes rather than systematized workflows. | 1/2 | PARTIAL | |
| R03 | 24/7 Lead Capture No evidence submitted · withheld from score GPA_Employee_Roster.csv · GPA_CIM.txt · GPA_CRM_Pipeline.csv · GPA_Customer_Onboarding_SOP.txt · GPA_AR_Aging.csv There is no evidence of any after-hours or 24/7 lead capture mechanism in the retrieved documents; all client intake and pipeline management appears to be owner-dependent and manually driven by "a key employee" during business hours, with no chatbot, automated form routing, or evening/weekend lead capture system in place. | — | ||
| R04 | SMS Appointment Reminders & Confirmations No evidence submitted · withheld from score GPA_Cybersecurity_Assessment.txt · GPA_CIM.txt · GPA_Customer_Onboarding_SOP.txt · GPA_HC_Profile.txt · GPA_Customer_Contract_Harrington.txt · GPA_AR_Aging.csv The retrieved documents contain no evidence of any SMS appointment reminder or confirmation system; the company's onboarding and client communication processes rely entirely on email (engagement letters via Outlook, document exchange through Canopy's portal) with no mention of automated or manual SMS workflows for appointments. Client communication and appointment management appear to be ad-hoc and owner-dependent, with no documented systems for reminders or confirmations of any kind. | — | ||
| R05 | Automated Review Solicitation No evidence submitted · withheld from score GPA_Cybersecurity_Assessment.txt · GPA_HC_Profile.txt · GPA_AR_Aging.csv · GPA_CIM.txt · GPA_GL_Export.csv There is no evidence of any post-service review solicitation process in the retrieved documents; the firm shows no systematic, manual, or automated review request capability across any service lines. Review generation appears to be entirely organic with no documented follow-up mechanism. | — | ||
| R06 | Smart Follow-Up Sequences No evidence submitted · withheld from score GPA_Customer_Onboarding_SOP.txt · GPA_Cybersecurity_Assessment.txt · GPA_CRM_Pipeline.csv · GPA_AR_Aging.csv · GPA_Employee_Roster.csv There is no evidence of automated follow-up sequences in any of the retrieved documents; the CRM pipeline shows deals owned by individuals with no mention of automated drip campaigns, and the onboarding SOP describes entirely manual, key-employee-dependent processes with no automated re-engagement for unconverted leads or dormant clients. | — |
No automation maturity band is published for this company. 1 of 6 criteria were scored; 5 had no evidence in the material provided, and a band selected from the remainder would describe the criteria that happened to be answerable rather than the revenue infrastructure.
Vertical-specific operational automation gaps identified in Accounting Practice Operational Automation operations. These gaps represent immediate efficiency opportunities for the current owner and post-close value creation levers for a buyer.
Operational automation gaps identified below are framed as efficiency and revenue recovery opportunities. Dollar estimates reflect operational impact, not a valuation adjustment. Layer8 delivers these implementations directly.
| Automation Opportunity | Score | Status | Bar | Layer8 Opportunity |
|---|---|---|---|---|
| Client Document Collection | 1/2 | PARTIAL | Document collection automation compresses the tax season intake window by 2-3 weeks and eliminates the most common source of extension filing and client frustration. | |
| Engagement Letter & E-Signature | 1/2 | PARTIAL | Engagement letter automation ensures 100% signed engagement coverage — a critical diligence item for buyers assessing client relationship transferability and E&O exposure. | |
| Deadline & Filing Calendar | 0/2 | MANUAL | Deadline automation eliminates the most common source of penalty exposure and provides the workload visibility needed to staff engagements efficiently during peak season. | |
| Recurring Invoice & Billing Automation | 1/2 | PARTIAL | Billing automation converts the accounts receivable function from a partner time sink to a self-managing revenue stream — directly improving realization rates. | |
| Client Communication & Seasonal Outreach | 0/2 | MANUAL | Automated seasonal outreach surfaces advisory opportunities the client didn't know to ask about and drives year-round engagement beyond the annual return. |
Layer8 runs 90-day Automation Sprints that close AMI gaps and systematize vertical-specific workflows — on a defined scope and a fixed timeline.Schedule a Discovery Call →
Compliance Notes
PII was detected and redacted in 11 document(s) prior to ingestion:
GPA_AR_Aging.csv: PHONE_NUMBERGPA_CIM.txt: PERSONGPA_CRM_Pipeline.csv: PERSONGPA_Customer_Contract_Harrington.txt: PERSONGPA_Customer_Onboarding_SOP.txt: PERSONGPA_Cybersecurity_Assessment.txt: PERSONGPA_Employee_Roster.csv: PERSONGPA_Financials.csv: PHONE_NUMBERGPA_GL_Export.csv: PERSONGPA_HC_Profile.txt: PERSONGPA_IT_Asset_Inventory.csv: PERSON