Tax firms can use AI if they control client data under §7216, review every draft as Circular 230 requires and vet AI vendors in their FTC Safeguards Rule security plan.