Since May 2024, a tax firm that loses unencrypted data on 500 or more clients has 30 days to tell the FTC. The Safeguards Rule counts preparers as financial institutions, whatever their size.
Twenty-one firms market managed IT in Pasadena and 13 have an office here. Only a few mention tax software, a written information security plan or extra help during filing season.
Below are the five providers we’d shortlist for a Pasadena CPA or tax firm, the public data behind each, and what to confirm before you sign.
How we narrowed the field for accounting firms
We’re the team at Managed IT Services Santa Clarita, an independent IT provider based in Santa Clarita, and we produced this report. We work with businesses all over California and care about how well they’re supported, which is why we ranked Pasadena providers instead of adding our own name.
Out of 21 providers, we kept the 13 with a Pasadena office and searched each website for an accounting page or for CPA and tax firms listed among its clients. All data comes from public sources checked in November 2026: Google Business Profiles, Clutch, company databases such as Built In and DesignRush, and the providers’ own websites.
| Criterion | What we looked for |
|---|---|
| Pricing transparency | Per-user pricing published on the provider’s site |
| Contract terms | Month-to-month or a minimum term, with onboarding fees disclosed up front |
| Reputation | Google rating and review volume, plus verified Clutch reviews |
| Local presence | A Pasadena office, and offices in more than one location |
| Security operations | An in-house security team, SOC or 24/7 detection and response |
| Accounting fit | An accounting page, named tax software or FTC Safeguards Rule support |
| Track record | Years in business and a verifiable team size |
| Strategic consulting | A vCIO or IT roadmap service |
| AI services | A dedicated AI service, not just a blog post |
The order is our editorial judgment, with the heaviest weight on published pricing, contract flexibility and coverage across several locations. The comparison table shows the data behind it, so you can reorder the five by what matters to your firm.
Top 5 IT providers for Pasadena accounting firms
- Tech Kooks
- Managed IT Services Pasadena (MITSP)
- Xantrion
- Netready IT
- Intelligent Technical Solutions (ITS)
How the accounting shortlist compares
| Tech Kooks | MITSP | Xantrion | Netready IT | ITS | |
|---|---|---|---|---|---|
| Accounting experience | Not listed on its site | Named on homepage (no dedicated page) | Accounting page; hosts CCH, Lacerte, UltraTax and QuickBooks | Named on industries page | CPAs covered by its financial services page |
| Google rating (reviews) | 5.0 (5) | 5.0 (4) | 4.8 (26) | 5.0 (71) | 5.0 (8) |
| Clutch reviews | None | None | 14 | None | Not verified |
| Founded | 2022 | ~2015 | 2000 | 1995 | 2003 |
| Team size | ~30 | 20+ technicians | ~80 | 10–49 | 150+ (company-wide) |
| Pasadena office | Google listing only (site lists San Pedro) | Headquarters | Branch (HQ Bay Area) | Headquarters | Branch (HQ Las Vegas) |
| Locations | 5 | 1 | 4 | 2 | 14 |
| Published pricing | $39.99–$59.99 per user/mo | $39.99–$59.99 per user/mo | Quote only | Quote only | $125–$300 per user/mo |
| Contract terms | Month-to-month, no minimums | Month-to-month, no onboarding fees | Not published | Not published | Not published |
| Compliance named | None named | HIPAA | Own SOC 2 certification | HIPAA, FINRA | HIPAA, CMMC, SOC 2, PCI DSS, FINRA, NIST 800-171, ISO 27001 |
| Security operations | 24/7 MDR (top tier) | 24/7 MDR (top tier) | 24/7 US-based detection and response | In-house NOC/SOC manager | In-house 24/7 SOC |
| vCIO / strategy | IT roadmaps and budgets | IT roadmap | Dedicated vCIO per client | vCSO and IT consulting | vCIO and vCISO |
| AI services | None listed | None listed | AI Enablement Sprint | None listed | SecureAI |
The five providers, one by one
1. Tech Kooks
Snapshot: Founded 2022 · Pasadena listing at 150 E Colorado Blvd · 5.0 stars from 5 Google reviews
- Three set prices, $39.99, $49.99 and $59.99 per user each month, so adding a preparer never brings a surprise on the invoice
- Month-to-month with no user minimums, so seat counts can rise for filing season and fall afterward
- 24/7 managed detection and response on the top plan, with security awareness training included
Worth knowing: No accounting page and no named compliance frameworks, so ask directly about WISP and Safeguards Rule support.
2. Managed IT Services Pasadena (MITSP)
Snapshot: About 11 years in business · Office at 1055 E Colorado Blvd · 5.0 stars from 4 Google reviews
- Lists finance and accounting among its industries, with a focus on dependable systems and stronger security
- Posts its pricing openly, $39.99 to $59.99 a user monthly, and charges no onboarding fee on its month-to-month agreements
- Reports 20+ locally based technicians, and its top plan includes 24/7 managed detection and response
Worth knowing: No WISP or Safeguards Rule service is named, and it has only four Google reviews.
3. Xantrion
Snapshot: Founded 2000 · Office at 177 E Colorado Blvd · 4.8 stars from 26 Google reviews
- Hosts several tax platforms in the cloud, and its accounting page names QuickBooks, Drake, UltraTax, Lacerte, ProSeries and CCH Axcess
- Claims more than two decades of work with accounting firms, and its page covers the WISP that tax preparers must keep
- 24/7 US-based detection and response with a 15-minute response time; AICPA SOC 2 certified, with a dedicated vCIO for every client
Worth knowing: Its headquarters is in the Bay Area, and you’ll need a quote to learn the price.
4. Netready IT
Snapshot: Founded 1995 · HQ at 251 S Lake Ave · 5.0 stars from 71 Google reviews
- The deepest review base in this report, at 5.0 from 71 Google reviews
- Names accounting among its industries, citing deadline-driven tax work and sensitive client data
- A live-answered help desk and an in-house NOC/SOC manager, plus FINRA and HIPAA support
Worth knowing: It has no accounting page, doesn’t publish plan prices and lists no AI service.
5. Intelligent Technical Solutions (ITS)
Snapshot: Founded 2003 · Office at 489 E Colorado Blvd, one of 14 US offices · 5.0 stars from 8 Google reviews
- Its financial services page covers CPAs and the IT side of the FTC Safeguards Rule
- Its own 24/7 SOC with red, blue and compliance teams, a SOC 2 Type II report, and vCIO and vCISO services
- Three plans from $125 to $300 per user per month, plus an online pricing calculator
Worth knowing: Headquartered in Las Vegas, with eight Pasadena Google reviews and no page specific to accounting.
What to look for in accounting firm IT support
What CPA firms pay for managed IT
Four of the 13 local providers publish prices, from about $40 to $300 per user per month, and three of them made this list. Xantrion and Netready IT quote after a discovery call. For an 18-person firm, published rates work out to roughly $720 to $5,400 a month.
- Seasonal hires affect the invoice, so find out how temporary preparers get added in January and dropped after April.
- Base tiers cover the help desk, monitoring, patching, backup and core security tools.
- Upper tiers bring vCIO time, a 24/7 SOC and compliance programs, which is usually where Safeguards Rule work lives.
- Cloud hosting for tax software may carry its own price, and out-of-plan work usually bills at $150–$199 an hour.
What the agreement should include
- A WISP your provider helps write and keep current
- Multifactor authentication on email, remote access and tax software
- Help desk capacity and response times that hold up from January through April
- Support or hosting for CCH, UltraTax, Drake, Lacerte and QuickBooks
- A secure client portal for returns and source documents
- Encryption for laptops, file shares and email
- Tested restores of backups, including tax software databases
- Phishing training that covers tax-season scams
- Quick onboarding and offboarding for seasonal staff
- An incident response plan that includes FTC notification
Safeguards Rule and IRS checklist
Your IT provider should be able to explain each of these federal requirements. We checked the details against FTC and IRS sources in November 2026.
- Tax firms are covered. Under the Gramm-Leach-Bliley Act, the Safeguards Rule lists tax preparers among financial institutions, and the IRS has made clear that a small practice is no exception.
- A WISP. The IRS spells out the safeguards in Publication 4557 and offers a fill-in plan in Publication 5708. Preparers also confirm they know a WISP is required each time they apply for or renew a PTIN.
- A Qualified Individual. Someone has to oversee the security program. That person can work for your IT provider, but the responsibility stays with your firm.
- Baseline safeguards. Staff training, a written risk assessment, encryption of data both stored and moving, MFA for everyone who touches customer information, and supervision of your service providers.
- Testing and reporting. Either continuous monitoring, or a penetration test each year plus vulnerability scans twice a year. You also need an incident response plan on paper and an annual written report to the firm’s leadership.
- FTC breach notice. Since May 13, 2024, a breach of unencrypted customer information affecting 500 or more people must be reported to the FTC within 30 days of discovery.
- The small-firm exemption. If you hold data on fewer than 5,000 consumers, you can skip the written risk assessment, the incident response plan and the annual report. Everything else in the rule still applies.
8 questions to ask a CPA firm’s IT provider
- Will you help write and maintain our WISP, and can someone on your team serve as our Qualified Individual?
- Which tax and accounting platforms do your current clients run?
- How do you enforce MFA across email, remote access and tax software?
- Can we get extra help desk capacity from January to April without renegotiating the contract?
- What portal or file-transfer tool do you recommend for client documents?
- How often will you test-restore our tax software data, and do we get a copy of the results?
- Who watches our alerts overnight, and who files the FTC notice if a breach affects 500 or more clients?
- How long is the contract, and how does offboarding work?
Managed IT vs. an in-house hire for a CPA firm
A network and computer systems administrator in the Los Angeles metro earned a median $105,270 in May 2024, according to the Bureau of Labor Statistics, and benefits come on top. For that you get one person, with nobody covering vacations or a 2 a.m. alert during filing week.
An 18-person CPA firm paying published Pasadena rates would spend about $8,640 to $64,800 a year on managed IT. The top of that range is under two-thirds of one administrator’s salary, and it includes a security team and a help desk sized for tax-season volume.
Hiring in-house tends to make financial sense only at a much bigger firm. Mid-size practices often keep a single internal IT lead and lean on a co-managed provider for monitoring, compliance and busy-season overflow.
Accounting firm IT: your questions answered
Does the Safeguards Rule apply to a small tax practice?
Yes, if you prepare returns. Size doesn’t take a tax practice out of the rule, and holding data on fewer than 5,000 consumers only removes a handful of provisions. SEC-registered advisers work under a different set of rules, which we cover in our report on IT support for Pasadena financial services firms.
Can our IT provider act as our Qualified Individual?
Yes. The Safeguards Rule allows the Qualified Individual to work for a service provider, so someone at your IT company can oversee the program. Your firm keeps the responsibility, so put the arrangement in writing and ask for the annual report to leadership unless the small-firm exemption covers you.
What happens if client tax data is breached?
If unencrypted customer information on 500 or more people is involved, you have 30 days from discovery to notify the FTC. Your incident response plan should name who does what, and your IT provider should handle the forensics and the technical side of the report. Consulting firms that don’t hold tax data usually need less compliance work, as covered in our report on managed IT for Pasadena professional services firms.
Can an IT provider add support for tax season?
Some can. Xantrion, for example, says it gives peak periods such as tax season extra attention. Get the extra help desk capacity, faster response times and onboarding help written into the contract, so it’s a commitment rather than a promise.
