Insights · Report
AI and Tax Risk Frameworks — 2026
Revenue authorities no longer sample returns. They reconcile them. This report sets out where automated matching bites first, the documentation gaps that trigger inquiry, and a 90-day sequence to close them.
What actually changed
The shift is not that tax authorities bought AI. It is that the data they receive became structured, complete and comparable — and the comparison now happens before a human ever looks at your file.
Three developments did the work. E-invoicing moved transaction data from your ledger into a government portal at the moment of invoice. GST and VAT return matching became continuous rather than annual. And beneficial-ownership and banking data started to be exchanged automatically between jurisdictions under common reporting standards.
The practical consequence: your return is no longer the first statement you make about a transaction. It is the third or fourth. The first statements were the invoice, the customs declaration and the bank entry. If those disagree, the system flags it, and the burden of explaining the difference sits with you.
Where matching bites first
In our work with inbound and outbound groups, three areas produce most of the avoidable exposure.
1. Invoicing versus return
Mismatch between the invoice register and the filed return is the single most common trigger — usually caused by timing, credit notes raised late, or invoices issued from the wrong entity. The tax is rarely the problem; the reconciliation is.
2. Related-party pricing
Transfer pricing positions that were reasonable when set are rarely re-tested when the business changes. A new entity, a changed service flow or a shift in profit split creates a mismatch between the intercompany agreement and what the numbers actually show.
3. People and permanent establishment
Travel, secondments and remote senior staff create permanent-establishment and payroll exposure that appears in immigration and banking data long before it appears in the tax return. This is the gap most likely to surface in the GCC and the UK at the same time.
The five documentation gaps
When a query arrives, the answer is judged on documentation, not on intent. These are the five gaps we find most often.
- No contemporaneous file. The policy exists in someone’s head, or was written after the transaction closed.
- Inconsistent entity names and addresses. Small differences between invoice, contract, bank and filing read as different parties to a matching engine.
- Credit notes outside the period. Commercial adjustments raised in the following month, with no note explaining the timing.
- Intercompany agreements that do not match the flow. Services invoiced as management fees with no evidence of what was delivered, by whom.
- No audit trail for judgements. Revenue recognition, lease classification or a migration decision with no memo recording the basis.
A 90-day readiness sequence
| Window | Action | Owner |
|---|---|---|
| Days 1–30 | Reconcile the invoice register to filings for the last four quarters; list every difference with a reason | Finance controller |
| Days 1–30 | Pull the intercompany agreement set and check each against the actual service flow | Tax lead |
| Days 31–60 | Write or refresh the transfer pricing file, including the entity-by-entity profit story | Tax lead and partner |
| Days 31–60 | Map travel and secondments by jurisdiction and test permanent-establishment thresholds | HR and tax |
| Days 61–90 | Standardise entity names, addresses and tax IDs across invoice, contract and bank master data | Finance systems |
| Days 61–90 | Introduce a judgement log: one memo per material position, written when the decision is made | CFO |
What good looks like
The test is simple. If a query arrived on Monday for any transaction in the last two years, could your team produce — within a week — the contract, the invoice, the bank evidence and a one-page explanation of the position? If the answer is yes for most transactions, your framework is working.
That is a documentation project, not a technology project, and it usually takes one quarter rather than one year. Firms that do it early stop treating tax as a source of surprises and start treating it as part of the operating model.
This report is general guidance. Positions must be tested against your specific facts and the law in force at the time.