Supergood | AICPA DAS API
Programmatically access AICPA Dynamic Audit Solution (DAS) engagement data, trial balances, PBC request workflows, and workpapers with a stable REST API. Supergood builds and operates production-grade, unofficial AICPA DAS integrations so your team can automate audit planning, fieldwork, and wrap-up without heavy custom engineering.
Plain English: AICPA DAS is cloud-based audit software for CPA firms that centralizes engagement management, risk assessment, workpapers, trial balance ingestion, sampling/testing, client requests (PBC), and sign-offs—aligned with AICPA auditing standards. An unofficial API lets you pull engagement lists, clients, trial balances, risks/controls, PBC requests, testing results, and workpaper metadata—and push new records, evidence, and status updates back into DAS.
For a tech company integrating with AICPA DAS, this means you can ingest real-time engagement and client data to power dashboards, automate PBC requests and intake from your portal, sync trial balances from accounting systems (e.g., QuickBooks, Xero, NetSuite), orchestrate sampling/testing from your analytics engine, attach evidence from external repositories, and enrich your platform with audit status, issues, and sign-offs. You can also trigger client-facing updates, run AI anomaly detection on journal entries, auto-summarize workpapers, and keep stakeholder systems (ERP, analytics, practice management, document storage) in lockstep.
What is AICPA DAS?
AICPA DAS (https://www.cpa.com/das) is a cloud platform designed to modernize audit delivery for CPA firms. It centralizes planning, risk assessment, trial balance ingestion, procedures and testing, PBC request management, documentation, and review/sign-off workflows across engagement teams and clients. Firms use DAS to standardize methodology, streamline audit fieldwork, improve transparency and collaboration with clients, and produce high-quality audit documentation and reports.
Core product areas include:
- Engagement Management (Engagements, Teams, Milestones, Status, Sign-Offs)
- Risk & Controls (Risk Assessment, Control Documentation, Linkage to Procedures)
- Financial Data (Trial Balance Import, Account Mapping, Lead Schedules)
- Testing & Sampling (Sampling Methods, Test Procedures, Exceptions Tracking)
- Client Collaboration (PBC Request Lists, Secure Document Exchange, Comments)
- Workpapers & Evidence (Workpaper Indexing, Attachments, Versioning, Review Notes)
Common data entities:
- Firms, Users, Roles/Permissions (Partner, Manager, Senior, Staff, Client Contact)
- Engagements (client, fiscal year, industry, materiality, milestones, status)
- Clients (contact info, accounting system, fiscal calendar)
- Trial Balances (accounts, debits/credits, mappings, currency)
- Risks & Controls (risk ratings, assertions, control descriptions, operating effectiveness)
- Procedures & Tests (test objectives, populations, samples, conclusions)
- PBC Requests (categories, due dates, assignees, statuses, file uploads)
- Workpapers (index, references, attachments, review notes, sign-offs)
- Issues & Findings (severity, impacted accounts/assertions, remediation)
The AICPA DAS Integration Challenge
Audit teams rely on DAS daily, but turning portal-based workflows into API-driven automation is non-trivial:
- Role-aware portals: Partners, managers, staff, and clients see different data, permissions, and approval states
- Methodology rigor: Risk/control linkages, materiality thresholds, and sampling/conclusions demand careful handling
- Financial integrity: Trial balance imports require balancing, mapping, and reconciliation safeguards
- Client collaboration: PBC requests, document exchange, and comment threads are optimized for front-end flows
- Authentication complexity: SSO/MFA and session lifecycles complicate headless automation for firm tenants
- Data spread: Key objects span engagements, risks/controls, trial balances, workpapers, tests, and PBC workflows
How Supergood Creates AICPA DAS APIs
Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your DAS tenant.
- Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
- Maintains session continuity with automated refresh and change detection
- Normalizes responses so you can integrate once and rely on consistent objects across modules
- Aligns with firm entitlements and role-based permissions to ensure compliant access
Use Cases
Audit Data & Engagement Sync
- Mirror engagements, clients, and teams into your practice management or analytics tools
- Keep engagement metadata current for portfolio oversight and reporting
- Normalize fiscal calendars, statuses, and materiality for multi-tenant operations
PBC Request Automation
- Create PBC request lists from your client portal and push into DAS
- Track receipt, approvals, and comments; notify client contacts automatically
- Route delivered artifacts to the right workpapers with audit trail
Trial Balance & Account Mapping
- Import trial balances from ERP/accounting systems (e.g., QuickBooks, Xero, NetSuite)
- Validate control totals, currency, and mappings to lead schedules
- Trigger alerts on imbalances, unmapped accounts, and material variances
Testing & Evidence Handling
- Drive sampling and test execution from your analytics engine
- Attach evidence (documents, exports) directly to workpapers
- Track exceptions, conclusions, review notes, and sign-offs programmatically
AI-Assisted Review
- Flag anomalous accounts or journal entries using AI
- Suggest risk updates and procedure coverage based on evidence
- Auto-summarize workpapers and generate draft review notes for manager sign-off
Available Endpoints
Authentication
POST /sessions: Establish a session using credentials. Supergood manages MFA (SMS, email, TOTP) and SSO/OAuth when enabled. Returns a short-lived auth token maintained by the platform.
curl --request POST \
--url https://api.supergood.ai/integrations/<integration_id>/sessions \
--header 'Authorization: Basic <Base64 encoded token>' \
--header 'Content-Type: application/json' \
--data '{
"username": "[email protected]",
"password": "<password>",
"mfa": { "type": "totp", "code": "123456" }
}'
Example response
{
"authToken": "eyJhbGciOi...",
"expiresIn": 3600,
"user": {
"id": "u_das_729c10",
"name": "Audit Manager",
"entitlements": ["engagements", "trial_balance", "pbc_requests", "workpapers", "testing"]
}
}
POST /sessions/refresh: Refresh an existing token to keep sessions uninterrupted.
Engagements
GET /engagements: List engagements with filters and summary details.
Query parameters
- clientId: string
- fiscalYear: string (e.g., 2025)
- status: planning | fieldwork | wrap_up | archived | closed
- updatedFrom, updatedTo: ISO 8601 timestamps
- page, pageSize: integers for pagination
Example response
{
"items": [
{
"engagementId": "eng_2a91f0",
"name": "ABC Manufacturing FY2025 Audit",
"clientId": "cli_88b32e",
"clientName": "ABC Manufacturing, Inc.",
"industry": "Manufacturing",
"fiscalYear": "2025",
"status": "fieldwork",
"materiality": {
"overall": 450000.00,
"performance": 315000.00,
"trivial": 22500.00
},
"riskScore": 0.62,
"milestones": {
"planningComplete": "2026-01-10",
"fieldworkTarget": "2026-02-15",
"wrapUpTarget": "2026-03-05"
},
"team": [
{"userId": "u_das_mgr_01", "role": "manager"},
{"userId": "u_das_stf_14", "role": "staff"}
],
"updatedAt": "2026-01-20T13:45:00Z"
}
],
"page": 1,
"pageSize": 50,
"total": 1
}
PBC Requests
POST /engagements/{engagementId}/pbc-requests: Create a PBC (Prepared by Client) request with due dates, categories, and assignees.
curl --request POST \
--url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_2a91f0/pbc-requests \
--header 'Authorization: Bearer <authToken>' \
--header 'Content-Type: application/json' \
--data '{
"title": "Bank Reconciliations and Statements",
"category": "cash",
"description": "Provide monthly bank statements and reconciliations for all accounts for FY2025.",
"dueDate": "2026-02-01",
"requesterUserId": "u_das_mgr_01",
"assigneeUserId": "cli_cnt_jdoe",
"required": true,
"requestItems": [
{"type": "document", "name": "Bank Statements", "months": ["2025-01", "2025-12"]},
{"type": "document", "name": "Reconciliation Reports", "months": ["2025-01", "2025-12"]}
],
"notifyClient": true
}'
Example response
{
"requestId": "pbc_90e412",
"status": "requested",
"assignedTo": "cli_cnt_jdoe",
"dueDate": "2026-02-01",
"createdAt": "2026-01-21T10:03:11Z"
}
Trial Balance
PUT /engagements/{engagementId}/trial-balance: Import or replace a trial balance, with account mappings and control totals.
curl --request PUT \
--url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_2a91f0/trial-balance \
--header 'Authorization: Bearer <authToken>' \
--header 'Content-Type: application/json' \
--data '{
"periodStart": "2025-01-01",
"periodEnd": "2025-12-31",
"currency": "USD",
"sourceSystem": "netsuite",
"accounts": [
{
"accountNumber": "1000",
"name": "Cash and Cash Equivalents",
"type": "asset",
"openingBalance": 1200000.00,
"debits": 4800000.00,
"credits": 4550000.00,
"endingBalance": 1450000.00,
"mapToLeadSchedule": "A-1",
"materialityBucket": "high"
},
{
"accountNumber": "2000",
"name": "Accounts Payable",
"type": "liability",
"openingBalance": 800000.00,
"debits": 3500000.00,
"credits": 3650000.00,
"endingBalance": 650000.00,
"mapToLeadSchedule": "L-2",
"materialityBucket": "medium"
}
],
"controlTotals": {
"debitsTotal": 8300000.00,
"creditsTotal": 8300000.00
}
}'
Example response
{
"trialBalanceId": "tb_51af80",
"accountCount": 2,
"debitsTotal": 8300000.00,
"creditsTotal": 8300000.00,
"balanced": true,
"warnings": []
}
Workpapers & Evidence
POST /engagements/{engagementId}/workpapers/{workpaperId}/evidence: Upload evidence and link it to a workpaper with audit metadata.
curl --request POST \
--url https://api.supergood.ai/integrations/<integration_id>/engagements/eng_2a91f0/workpapers/wp_A1/evidence \
--header 'Authorization: Bearer <authToken>' \
--header 'Content-Type: application/json' \
--data '{
"fileName": "bank_recon_dec2025.pdf",
"uploadToken": "upl_08ab73",
"description": "December 2025 bank reconciliation prepared by client.",
"source": "client_portal",
"assertionsCovered": ["existence", "completeness"],
"relatedAccounts": ["1000"],
"review": {
"preparedByUserId": "u_das_stf_14",
"preparedDate": "2026-01-22",
"reviewRequired": true
}
}'
Example response
{
"evidenceId": "ev_7fa223",
"workpaperId": "wp_A1",
"status": "attached",
"checksum": "sha256:1a2b3c...",
"createdAt": "2026-01-22T08:15:12Z"
}
Technical Specifications
- Authentication: Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or firm-managed credentials
- Response format: JSON with consistent resource schemas and pagination across modules
- Rate limits: Tuned for enterprise throughput while honoring firm entitlements and usage controls
- Session management: Automatic reauth and cookie/session rotation with health checks
- Data freshness: Near real-time retrieval of engagements, trial balances, PBC requests, workpapers, and testing objects
- Security: Encrypted transport, scoped tokens, and audit logging; respects DAS role-based permissions
- Webhooks: Optional asynchronous delivery for long-running workflows (e.g., client document submissions, sign-offs)
Performance Characteristics
- Latency: Sub-second responses for list/detail queries under normal load
- Throughput: Designed for high-volume trial balance imports and PBC/evidence processing
- Reliability: Retry logic, backoff, and idempotency keys minimize duplicate actions
- Adaptation: Continuous monitoring for UI/API changes with rapid adapter updates
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your modules, licensing, and authentication model.
- Supergood Builds and Validates Your API
We deliver a hardened AICPA DAS adapter tailored to your workflows and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as DAS evolves.
Frequently Asked Questions
Q: Which AICPA DAS modules can this integration cover?
Supergood supports workflows across commonly used modules such as Engagements (status, milestones, teams), Financial Data (Trial Balance, account mapping), Client Collaboration (PBC requests, comments, document exchange), and Workpapers/Evidence (attachments, review notes, sign-offs), subject to your licensing and entitlements. We scope coverage during integration assessment.
Q: How are MFA and SSO handled for automation?
We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling.
Q: Can you sync trial balances from our accounting system?
Yes. We can normalize trial balances and account mappings to match your audit schema and deliver updates via webhooks or polling while complying with rate and permission constraints. We commonly integrate with QuickBooks, Xero, and NetSuite.
Q: Are client PBC submissions and evidence uploads supported?
Yes. We support downloading submitted artifacts and uploading attachments via signed uploads, with checksum validation and time-limited URLs. Request statuses, comments, and audit trails are modeled explicitly in our normalized responses.
Q: Can AI be incorporated into the workflow?
We can surface AI-powered anomaly flags, risk suggestions, and draft workpaper summaries as structured objects alongside DAS records. Firms retain control over acceptance, documentation, and sign-offs to meet audit standards.
Related Integrations
Intralinks API - Programmatically access the Intralinks VDR with Supergood
Ready to automate your AICPA DAS workflows?
Supergood can have your AICPA DAS integration live in days with no ongoing engineering maintenance.
