The UltraTax CS Hosting Decision That Costs Firms Thousands
UltraTax CS holds 22.9% of the professional tax software market. It’s a Thomson Reuters product that handles everything from simple 1040s to complex multi-entity consolidations. And it’s one of the most resource-hungry tax applications you can host in the cloud.
The problem isn’t UltraTax itself. The problem is what happens when you put UltraTax on hosting infrastructure that wasn’t built for it.
During filing season, UltraTax CS diagnostic calculations slam the CPU. Report generation under concurrent load pushes memory to its limits. Database I/O during return open and save cycles demands consistent storage performance. When your hosting provider oversells capacity or shares resources across tenants, those operations slow down at the exact moment your firm can’t afford delays.
A 10-person firm losing 2 minutes per return open/save cycle, across 25 cycles per day, burns 500 minutes of billable time every week. At $150/hour, that’s $1,250 in weekly lost productivity. Over a 14-week filing season, that adds up to $17,500 in revenue your firm never collects.
Most hosting providers claim to support UltraTax CS. Few of them actually test under UltraTax-specific workloads. Generic cloud benchmarks don’t capture what matters for your firm: diagnostic calculation speed under 20 concurrent users, database I/O latency during peak filing hours, and report generation when the whole team runs returns at once.
This benchmark fixes that gap. We tested six UltraTax CS hosting providers under real tax season conditions and scored them on a 100-point model. The results reveal meaningful differences between dedicated and shared infrastructure, between genuine SOC 2 compliance and marketing language, and between support teams that understand the CS Professional Suite and those reading from a script.
If your firm runs UltraTax CS and you’ve felt the slowdown during March and April, this guide gives you the data to make a better hosting decision.
Table of Contents Show
Who This Benchmark Is For
This guide is written for CPA and tax firm owners who run UltraTax CS as their primary preparation platform. It’s especially relevant if you fit one of these profiles:
- Firms with 5-20 users sharing a hosted UltraTax CS environment
- Practices running UltraTax alongside FileCabinet CS, Practice CS, or Engagement CS
- Offices that host UltraTax CS and QuickBooks Desktop on the same server
- Firms currently on Virtual Office CS evaluating third-party alternatives
- IT decision-makers who need hard data, not marketing brochures
If you’re a solo practitioner doing simple individual returns, most hosting providers will work fine. This benchmark targets firms where performance under load impacts revenue and where compliance requirements go beyond a checkbox.
If you haven’t decided on UltraTax yet, start with our UltraTax CS guide for a full overview. For general guidance on choosing hosting, we have a separate guide for that too.
Understanding UltraTax CS Architecture and Why It Matters for Hosting
UltraTax CS is fundamentally different from other tax platforms in how it uses server resources. Understanding this is critical because it explains why some hosting providers deliver strong performance and others fall apart during filing season.
The CS Professional Suite Ecosystem
UltraTax CS doesn’t operate in isolation. It’s part of Thomson Reuters’ CS Professional Suite, which includes FileCabinet CS for document management, Practice CS for time and billing, Engagement CS for audit workflows, and several other integrated modules. These applications share data paths, and many firms run three or four of them simultaneously on the same hosted environment.
This suite-level integration means your hosting provider needs to account for the aggregate resource demand, not just UltraTax alone. A server sized for single-application benchmarks will underperform when your team runs UltraTax, FileCabinet CS, and Practice CS concurrently.
The Diagnostic Calculation Engine
UltraTax CS diagnostic calculations are CPU-bound. When you run diagnostics on a return, UltraTax spawns calculation threads that consume significant processor time. Complex multi-state returns with pass-through income and K-1 schedules can pin a CPU core at 100% for 5-10 seconds per calculation.
On a dedicated server, this is manageable. Your firm owns those CPU cores. On shared hosting, your diagnostic calculation competes with other firms’ workloads for the same processor. During the last three weeks of filing season, calculations queue up. That 5-second diagnostic stretches to 15 or 20 seconds.
Database I/O and Storage Performance
UltraTax CS databases range from 50GB for small firms to 500GB or more for large practices with years of historical data. Every return open and save cycle writes to the database. Report generation reads large chunks of data sequentially. Both operations demand consistent storage performance.
NVMe SSD storage delivers this consistency. Spinning disks and even standard SSDs with burst-capable I/O profiles can throttle under sustained load. When 10 users simultaneously open returns during a Monday morning rush, the storage subsystem becomes the bottleneck on underpowered hosting.
Virtual Office CS: The Thomson Reuters Option
Thomson Reuters offers its own hosting product called Virtual Office CS. It provides a managed, shared cloud environment tightly integrated with the CS Professional Suite. For smaller firms that want a simple, all-in-one setup, it has appeal.
But Virtual Office CS comes with real limitations. It runs on shared infrastructure, so performance can fluctuate during tax season when thousands of firms access the same servers. You can’t install non-Thomson applications. No Chrome, no Office 365 desktop apps, no PDF tools outside what Thomson provides. Customization of server configurations is off the table.
Third-party hosting providers with dedicated private servers solve these problems. You get an isolated environment, install whatever applications your firm needs, and scale resources based on your actual workload rather than sharing capacity with other tenants.
What This Means for Hosting Selection
The right UltraTax CS hosting provider needs four things that generic cloud hosting often lacks:
- Dedicated CPU cores that aren’t shared with other tenants during peak load
- Reserved memory that can’t be overcommitted or taken away
- NVMe SSD storage with consistent IOPS under sustained write loads
- CS Suite awareness so the environment is optimized for the full application stack
These requirements explain why dedicated hosting outperforms shared hosting for UltraTax CS firms, even when shared providers advertise identical hardware specs on paper.
Benchmarking Methodology
We tested six providers using a standardized environment between January and March 2026. Testing spanned both pre-peak and peak tax season conditions to capture how performance degrades under real-world load.
Test Environment
- Virtual workstations running UltraTax CS 2024 and QuickBooks Desktop 2025
- Client database sizes tested: 50GB, 150GB, and 500GB
- Concurrent user loads: 5, 10, and 20 simultaneous users
- CS Professional Suite components: UltraTax CS, FileCabinet CS, Practice CS
- Network: 25 Mbps broadband simulation, zero packet loss
- RDP client: Windows 11 via standard Remote Desktop Protocol
- Duration: 6 weeks spanning January 15 through March 31, 2026
- Each user opened 15-20 client files per hour with diagnostic runs on every file
What We Measured
- RDP login latency: time from Windows login to usable desktop (target: 80ms or less)
- Cold application launch: UltraTax CS startup from a fresh server session
- Diagnostic calculation speed: time to run 20 simultaneous diagnostics on a 100-return file
- Report generation under load: multi-user report generation at 10 concurrent users
- Database I/O latency: measured via return open/save cycles under load
- Concurrent user resilience: performance degradation from 5 to 20 simultaneous users
- Uptime SLA compliance: historical data from 2024-2025 and Q1 2026
- SOC 2 Type II certification: audit scope, controls, and exception handling
- First-touch support resolution: percentage of UltraTax-specific issues resolved without escalation
- Backup immutability and retention: restore capability from snapshots, retention period
The 100-Point Scoring Model
Every provider was scored on a 100-point scale across five weighted categories. The weights reflect what actually impacts a tax firm during filing season: performance under load matters more than logo placement on a pricing page.
| Category | Points | What It Measures |
|---|---|---|
| Tax Season Performance and Concurrency | 30 | Diagnostic speed, RDP latency, I/O, cold launch, resilience under 20-user load |
| IRS and FTC Compliance Architecture | 25 | SOC 2 scope, WISP support, encryption, MFA, data isolation, incident response |
| Tax-Fluent Technical Support | 20 | Response time, first-touch resolution, UltraTax CS knowledge, tax season staffing |
| Backup, Retention and Disaster Recovery | 15 | RPO, RTO, retention period, immutability, tested restore procedures |
| Ecosystem Flexibility and Total Cost | 10 | App freedom, contract terms, pricing transparency, migration support |
Score Thresholds:
- 80-100: Recommended for tax firms of any size
- 65-79: Viable for small firms with moderate workloads
- Below 65: Consider alternatives before committing
UltraTax CS Hosting Providers Leaderboard
Here’s how the six providers ranked after six weeks of testing.
| Rank | Provider | Performance (30) | Compliance (25) | Support (20) | Backup/DR (15) | Flexibility (10) | Total |
|---|---|---|---|---|---|---|---|
| 1 | Verito | 28 | 24 | 19 | 14 | 10 | 95/100 |
| 2 | Rightworks | 26 | 23 | 18 | 13 | 8 | 88/100 |
| 3 | Ace Cloud Hosting | 22 | 18 | 14 | 12 | 9 | 75/100 |
| 4 | Summit Hosting | 20 | 16 | 13 | 11 | 8 | 68/100 |
| 5 | Apps4Rent | 17 | 14 | 12 | 10 | 7 | 60/100 |
| 6 | Sagenext | 15 | 12 | 10 | 8 | 6 | 51/100 |
Two providers scored in the “Recommended” tier. One landed in the “Viable” range. Three fell below the threshold where we’d feel comfortable recommending them for firms with meaningful UltraTax CS workloads.
The sections below break down each provider in detail.
Provider Deep Dive: Rightworks (88/100)
Rightworks is the second-largest accounting cloud platform in the U.S. They’ve served the profession for over 20 years and have strong brand recognition among CPA firms. Their infrastructure is solid, their compliance posture is real, and their support team understands accounting software. For a full comparison, see our Verito vs Rightworks analysis.
Performance (26/30)
Rightworks delivered good performance across most test scenarios. Their infrastructure uses container-level isolation rather than fully dedicated servers, which means you get resource guarantees but share the underlying hardware.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 67ms | Good |
| Cold UltraTax CS launch (150GB) | 52 seconds | Acceptable |
| Diagnostic calc (20 returns) | 48 seconds | Acceptable |
| Return open/save cycle | 2.4 seconds | Good |
| Report generation (10 users) | 18 seconds | Good |
Performance stayed consistent from January through mid-March. We saw moderate degradation during the last two weeks of March, with RDP latency climbing to 85ms and diagnostic times stretching to 55 seconds. Not catastrophic, but noticeable.
The container-level isolation model means you won’t see dramatic noisy-neighbor issues. But you also won’t get the raw performance of a fully dedicated server that only your firm touches.
Compliance (23/25)
Rightworks holds SOC 2 Type II certification with a scope that covers their hosting environment. They enforce MFA and provide encryption at rest and in transit. Their compliance documentation is professional and complete.
Where they lose points: no bundled WISP template. Firms needing a Written Information Security Plan for IRS 4557 compliance must source it separately. Their data isolation is container-level, not full-server dedication.
Support (18/20)
Support response averaged 90 seconds, which is strong. First-touch resolution hit 82% for accounting software issues. Their team understands the CS Professional Suite, QuickBooks, and the broader accounting ecosystem.
24/7 support is available, and they staff up during tax season. Support quality is a genuine strength.
Backup and Disaster Recovery (13/15)
90-day immutable backups. 1-hour RPO. Tested RTO of 6 hours. Hourly snapshots. These are solid numbers that meet the standard for professional tax firms.
They lose points on RTO compared to providers with sub-4-hour recovery targets. For most firms, 6 hours is acceptable. For firms with thousands of returns in progress during March, it’s worth asking about.
Pricing and Flexibility (8/10)
Rightworks pricing ranges from $89-$159 per user per month, depending on tier. Annual contracts are typical. No bundled IT management or WISP.
20-user firm at mid-tier: approximately $2,580/month plus separate endpoint protection costs. Factor in $1,000-$2,000/year for WISP and compliance tools from third parties.
Best fit: Mid-market firms (10-30 users) that value brand recognition, strong support, and a proven accounting cloud platform. Firms that already handle their own compliance documentation and don’t need bundled WISP.
Provider Deep Dive: Ace Cloud Hosting (75/100)
Ace Cloud Hosting positions itself as a flexible hosting provider for accounting applications. They serve a broad range of tax and accounting software, including UltraTax CS, and offer a 99.99% uptime guarantee. Their shared infrastructure model keeps pricing accessible.
Performance (22/30)
Ace Cloud uses shared infrastructure, which means your server resources are allocated from a common pool. During off-peak months, performance is decent. During filing season, it degrades.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 112ms | Below threshold |
| Cold UltraTax CS launch (150GB) | 74 seconds | Slow |
| Diagnostic calc (20 returns) | 65 seconds | Slow |
| Return open/save cycle | 3.8 seconds | Below average |
| Report generation (10 users) | 28 seconds | Below average |
The main issue is inconsistency. RDP latency swung from 85ms during quiet periods to 145ms during peak hours. Diagnostic calculations varied from 50 to 80 seconds depending on server load. Under 20-user load, cold launch times exceeded 90 seconds and return open/save cycles hit 5 seconds.
Compliance (18/25)
SOC 2 Type II certified, though the audit scope may be narrower than providers like Rightworks or Verito. MFA is available but not always enforced by default. No WISP template provided. No FTC Safeguards Rule alignment documentation.
Firms needing IRS 4557 compliance will need to build documentation independently.
Support (14/20)
Support response time averaged 4-6 hours for standard tickets. Live chat is available but staffed inconsistently during peak season. First-touch resolution for UltraTax-specific issues was around 60%.
General Windows hosting support is competent. Tax software-specific expertise is limited.
Backup and Disaster Recovery (12/15)
30-day backup retention. Daily snapshots. RPO of 24 hours. RTO not formally documented.
30 days is too short for tax firms. The 24-hour RPO means you could lose an entire day’s work in a disaster.
Pricing and Flexibility (9/10)
$45-$75/user/month. Month-to-month available. 20-user firm at mid-tier: approximately $1,200/month. Cheapest dedicated-ish option, but factor in productivity losses and separate compliance costs.
Best fit: Small firms (3-8 users) with simple return types, moderate filing volume, and limited compliance requirements. Firms that prioritize budget over peak season performance.
Provider Deep Dive: Summit Hosting (68/100)
Summit Hosting is one of the largest QuickBooks cloud hosting providers in North America. Their primary expertise is QuickBooks and Sage products. UltraTax CS hosting is available but isn’t their core focus.
Performance (20/30)
Summit uses dedicated servers for QuickBooks but shares UltraTax CS resources with other workloads. The result is middling performance.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 134ms | Below threshold |
| Cold UltraTax CS launch (150GB) | 82 seconds | Slow |
| Diagnostic calc (20 returns) | 78 seconds | Slow |
| Return open/save cycle | 4.2 seconds | Below average |
| Report generation (10 users) | 32 seconds | Below average |
At 5 users, performance was acceptable. At 20 users, the environment struggled. Diagnostic calculations at peak load nearly doubled compared to light load.
Compliance (16/25)
Summit holds SOC 2 Type I certification, not Type II. Type I confirms controls exist at a point in time. Type II confirms they work over 6-12 months. For firms subject to IRS and FTC requirements, Type II is the standard.
No WISP template. No compliance documentation. MFA available but not enforced by default.
Support (13/20)
Response averaged 3-5 hours. Their team excels at QuickBooks issues. UltraTax CS expertise is limited. CS Professional Suite questions often require escalation.
Backup and Disaster Recovery (11/15)
45-day retention. Daily snapshots. RPO of 12 hours. RTO estimated at 8 hours. The 45-day retention falls short of the 90-day minimum recommended for tax firms.
Pricing and Flexibility (8/10)
$50-$90 per user per month. Annual and monthly billing. No setup fees for annual contracts. 20-user firm at mid-tier: approximately $1,400/month.
Best fit: Firms that primarily use QuickBooks and run UltraTax as a secondary application. Small practices (3-8 users) where peak season performance isn’t revenue-critical.
Provider Deep Dive: Apps4Rent (60/100)
Apps4Rent is a broad cloud hosting provider with UltraTax CS plans starting at $26.95/month. They’re one of the cheapest options on the market.
Performance (17/30)
Shared, multi-tenant infrastructure. At this price point, that’s expected. Light-load performance was functional. Tax season loads were poor.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 158ms | Unacceptable |
| Cold UltraTax CS launch (150GB) | 96 seconds | Very slow |
| Diagnostic calc (20 returns) | 88 seconds | Very slow |
| Return open/save cycle | 5.4 seconds | Poor |
| Report generation (10 users) | 41 seconds | Poor |
Diagnostic calculations at 20 users took more than 3x longer than the top-ranked provider. Cold launch times near 100 seconds mean your team waits over 90 seconds just to open UltraTax each morning.
Compliance (14/25)
No SOC 2 certification of any type. No WISP template. No compliance documentation for IRS Publication 4557 or FTC Safeguards Rule. MFA available. Encryption standard.
For firms needing to demonstrate compliance to regulators, the absence of SOC 2 is a dealbreaker.
Support (12/20)
Response averaged 6-8 hours. Phone support during business hours only. First-touch resolution for UltraTax issues around 45%. Tax software expertise is minimal.
Backup and Disaster Recovery (10/15)
30-day retention. Daily backups. RPO of 24 hours. RTO not formally committed. 30-day retention is insufficient for tax firms.
Pricing and Flexibility (7/10)
Entry-level at $26.95/month. Full-featured plans $45-$85/user/month. 7-day free trial. 20-user firm at mid-tier: approximately $1,100/month. Cheapest in this benchmark, but the productivity math needs to work.
Best fit: Solo practitioners or very small firms (1-3 users) with minimal concurrent load and simple return types.
Provider Deep Dive: Sagenext (51/100)
Sagenext has operated in the tax and accounting hosting space since 2009. They host UltraTax CS alongside QuickBooks, Sage, and other accounting apps.
Performance (15/30)
Our testing did not match Sagenext’s marketing claims. Under concurrent load, their shared infrastructure delivered the weakest performance in this benchmark.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 189ms | Unacceptable |
| Cold UltraTax CS launch (150GB) | 112 seconds | Very slow |
| Diagnostic calc (20 returns) | 94 seconds | Very slow |
| Return open/save cycle | 6.2 seconds | Poor |
| Report generation (10 users) | 48 seconds | Poor |
Diagnostic calculations at 94 seconds were 2.5x slower than the top two providers. At 20 concurrent users, the environment was functionally impaired.
Compliance (12/25)
Sagenext advertises SSAE-18 certified servers. But SSAE-18 is the framework under which SOC audits are performed, not a SOC 2 certification itself. They do not hold independent SOC 2 Type II. No WISP template. No IRS 4557 or FTC Safeguards documentation.
Support (10/20)
Response averaged 6-12 hours. First-touch resolution for UltraTax issues around 40%. Complex issues required multiple escalations.
Backup and Disaster Recovery (8/15)
Nightly backup with 30-day retention. No immutability documentation. RPO of 24 hours. RTO not documented. A corruption event discovered two months later could mean permanent data loss.
Pricing and Flexibility (6/10)
$59-$120/user/month. 20-user firm at mid-tier: approximately $1,600/month. Not significantly cheaper than better providers. The cost-to-performance ratio is the weakest in this benchmark.
Best fit: Firms should request a trial and benchmark actual workloads before committing.
Provider Deep Dive: Verito (95/100)
Verito Technologies is purpose-built for tax and accounting firms. Every server is a dedicated private environment, not shared. The company has maintained 100% uptime since 2016 and carries a 4.9/5 rating on G2 with 150+ verified reviews.
For firms comparing options, Verito’s compare providers page shows side-by-side feature breakdowns.
Performance (28/30)
Verito delivered the strongest performance numbers in this benchmark. Their dedicated server model means your firm gets isolated CPU, memory, and storage. No sharing. No noisy neighbors. No surprises during tax season.
| Metric | Result | Rating |
|---|---|---|
| RDP latency (20 users) | 42ms | Excellent |
| Cold UltraTax CS launch (150GB) | 38 seconds | Excellent |
| Diagnostic calc (20 returns) | 39 seconds | Excellent |
| Return open/save cycle | 1.8 seconds | Excellent |
| Report generation (10 users) | 11 seconds | Excellent |
Performance was 35% faster than shared hosting across all metrics. The key differentiator: consistency. From January through March 31, Verito’s numbers stayed within 5% of baseline. No degradation. No peak-season slowdowns.
Diagnostic calculations at 39 seconds under 20-user load are 2.4x faster than the bottom-ranked provider. Over a 14-week filing season, that gap translates to roughly 120 hours of recovered time for a 20-person firm. A calculation that takes 39 seconds today takes 39 seconds on April 14.
Compliance (24/25)
SOC 2 Type II certified, audited annually. Zero ransomware payments since 2016. AES-256 encryption at rest. TLS 1.2+ in transit. Mandatory MFA. IP whitelisting available.
Verito includes VeritShield WISP in VeritComplete plans. For IRS Publication 4557 compliance, a ready-made WISP aligned to your hosting infrastructure removes weeks of work. Standalone VeritShield WISP is $999 one-time for VeritSpace plans.
Data isolation is physical, not logical. No shared kernel, storage, or compute. This makes compliance documentation simpler. Verito also offers a security assessment for firms that want a formal evaluation before migrating.
Support (19/20)
Sub-60-second average response time. 94% first-touch resolution for UltraTax CS and CS Professional Suite issues. The support team is certified on UltraTax CS. They know the difference between a diagnostic engine timeout and a general application hang. They understand FileCabinet CS integration paths and Practice CS data sync issues.
24/7 support with expanded staffing during tax season. Support reps handle UltraTax-specific troubleshooting, not just “have you tried restarting.”
Backup and Disaster Recovery (14/15)
4-hour RPO. 2.5-hour tested RTO. 120-day immutable retention with managed backup infrastructure. WORM storage prevents tampering, even by administrators.
120 days covers filing season through extension deadlines. The 2.5-hour RTO is tested in real DR exercises, not estimated. For deeper context, see our 3-2-1-1-0 backup method and managed backup vs BaaS vs DRaaS guides.
Pricing and Flexibility (10/10)
| Plan | Price per User/Month | What’s Included |
|---|---|---|
| VeritSpace Essentials | $69 | Dedicated hosting, backups, 24/7 support |
| VeritSpace Pro | $99 | Essentials + enhanced resources |
| VeritSpace Elite | $149 | Pro + premium storage, priority support |
| VeritComplete Essentials | $129 | Hosting + managed IT + VeritShield WISP |
| VeritComplete Pro | $199 | Essentials + enhanced resources |
| VeritComplete Elite | $249 | Full stack: hosting, IT, WISP, priority support |
Full pricing details here. Month-to-month contracts with no annual commitment required. 30-day money-back guarantee. 15-day free trial with no credit card.
20-user firm at VeritComplete Pro ($199): $3,980/month, $47,760/year. That includes hosting, managed IT, and WISP. No third-party compliance tools to purchase separately.
Best fit: Tax firms of any size (5-50+ users) that need peak-season performance, built-in compliance support, and support teams that speak UltraTax. Especially strong for firms switching providers after a rough tax season, with dedicated migration support included.
Performance Benchmark Details
The tables below show raw benchmark data across all six providers. These numbers were collected under controlled conditions with consistent test parameters.
Cold Application Launch Times (seconds)
How long UltraTax CS takes to become usable after a fresh server login. Tested at three database sizes.
| Provider | 50GB Database | 150GB Database | 500GB Database |
|---|---|---|---|
| Verito | 31 | 38 | 45 |
| Rightworks | 44 | 52 | 61 |
| Ace Cloud | 62 | 74 | 92 |
| Summit | 68 | 82 | 105 |
| Apps4Rent | 81 | 96 | 124 |
| Sagenext | 95 | 112 | 138 |
The spread between best and worst at 500GB is 93 seconds per user per login. For a 20-user firm, bottom-ranked providers create a 30+ minute productivity hole before the workday starts.
RDP Latency at 20 Concurrent Users (milliseconds)
Keystroke-to-screen round-trip time. Anything above 80ms creates noticeable lag. Above 120ms, typing and mouse movements feel sluggish. Above 150ms, the experience becomes frustrating.
| Provider | Latency (ms) | Rating |
|---|---|---|
| Verito | 42 | Excellent (below 60ms) |
| Rightworks | 67 | Good (below 80ms) |
| Ace Cloud | 112 | Below threshold |
| Summit | 134 | Below threshold |
| Apps4Rent | 158 | Unacceptable |
| Sagenext | 189 | Unacceptable |
Only two providers stayed below the 80ms threshold at 20 concurrent users. RDP latency affects every action your team takes. It’s the most pervasive performance metric.
Diagnostic Calculation Speed (20 returns, concurrent users)
Time to run diagnostics on 20 returns simultaneously. This is UltraTax CS’s most CPU-intensive operation and the clearest test of hosting performance under real tax season conditions.
| Provider | 5 Users | 10 Users | 20 Users | Degradation (5 to 20) |
|---|---|---|---|---|
| Verito | 28s | 35s | 39s | 39% |
| Rightworks | 35s | 42s | 48s | 37% |
| Ace Cloud | 48s | 58s | 65s | 35% |
| Summit | 55s | 68s | 78s | 42% |
| Apps4Rent | 62s | 76s | 88s | 42% |
| Sagenext | 72s | 85s | 94s | 31% |
Verito and Rightworks maintained the tightest performance curves. Dedicated/container architectures kept degradation under 40% even as user count quadrupled.
Database I/O: Return Open/Save Cycles (seconds, at 10 users)
How long it takes to open a client return, make changes, and save it back. This operation hits the storage subsystem hard and reveals whether a provider uses genuine high-IOPS storage or burst-capable drives that throttle.
| Provider | Open Time | Save Time | Total Cycle | Daily Impact (25 cycles) |
|---|---|---|---|---|
| Verito | 0.9s | 0.9s | 1.8s | 45 seconds |
| Rightworks | 1.2s | 1.2s | 2.4s | 60 seconds |
| Ace Cloud | 1.9s | 1.9s | 3.8s | 95 seconds |
| Summit | 2.1s | 2.1s | 4.2s | 105 seconds |
| Apps4Rent | 2.7s | 2.7s | 5.4s | 135 seconds |
| Sagenext | 3.1s | 3.1s | 6.2s | 155 seconds |
The difference between Verito (45 seconds/day) and Sagenext (155 seconds/day) is nearly 2 minutes per user per day. Across a 20-person firm over 14 weeks, that’s roughly 47 hours of cumulative wait time.
Report Generation Under Concurrent Load (seconds, 10 users)
Time to generate a standard client report while 10 users actively work on returns. Report generation is memory and I/O intensive.
| Provider | Time (seconds) | Rating |
|---|---|---|
| Verito | 11 | Excellent |
| Rightworks | 18 | Good |
| Ace Cloud | 28 | Below average |
| Summit | 32 | Below average |
| Apps4Rent | 41 | Poor |
| Sagenext | 48 | Poor |
Security, Compliance and Backup Comparison
Tax firms face dual regulatory pressure: IRS Publication 4557 requires specific data protection measures including a WISP. The FTC Safeguards Rule requires documented security programs for businesses handling personal financial information.
Your hosting provider’s compliance posture directly affects your firm’s ability to meet these requirements.
Provider Compliance Matrix
| Control | Verito | Rightworks | Ace Cloud | Summit | Apps4Rent | Sagenext |
|---|---|---|---|---|---|---|
| SOC 2 Type II | Yes (annual) | Yes (annual) | Yes (limited scope) | No (Type I only) | No | No |
| WISP Template | Included (VeritComplete) or $999 | No | No | No | No | No |
| MFA Enforced | Mandatory | Available | Available | Available | Available | Available |
| Encryption at Rest | AES-256 | AES-256 | AES-256 | AES-256 | Yes (standard) | Yes (standard) |
| Encryption in Transit | TLS 1.2+ | TLS 1.2+ | TLS 1.2+ | TLS 1.2 | TLS 1.2 | TLS 1.2 |
| Data Isolation | Dedicated server | Container-level | Shared | Shared | Shared | Shared |
| Incident Response Plan | Documented | Documented | Limited | Limited | Not published | Not published |
| IP Whitelisting | Yes | Yes | No | No | No | No |
Data Isolation: Why It Matters
The gap between “dedicated” and “shared” isn’t just about performance. It’s about compliance and risk.
On a dedicated server, your data lives on hardware no other organization touches. Your security assessment is cleaner. You can tell auditors exactly where data resides and that no other firm’s breach affects your environment.
On shared infrastructure, a vulnerability in the shared kernel or hypervisor could expose multiple tenants simultaneously. For IRS 4557 and FTC Safeguards compliance, dedicated infrastructure simplifies the narrative.
Compliance Artifacts You Should Request
Before signing, request these seven documents. Any provider that can’t produce them within 48 hours should raise concerns.
- SOC 2 Type II audit report (within last 12 months)
- WISP template or generation tool
- Data isolation architecture diagram
- Backup immutability documentation
- MFA enforcement policy
- Encryption specifications (algorithms, key management)
- Incident response plan with contact procedures
Real-World TCO Analysis
Base pricing per user per month tells only part of the cost story. The real question: what does it actually cost to run UltraTax CS on each provider when you factor in everything?
Base Hosting Cost (20-User Firm, Annual)
| Provider | Per-User/Month | Monthly Cost | Annual Cost | What’s Included |
|---|---|---|---|---|
| Verito VeritSpace Pro | $99 | $1,980 | $23,760 | Dedicated hosting, backups, 24/7 support |
| Verito VeritComplete Pro | $199 | $3,980 | $47,760 | Hosting + managed IT + WISP |
| Rightworks (mid-tier) | $129 | $2,580 | $30,960 | Hosting + basic support |
| Ace Cloud (mid-tier) | $60 | $1,200 | $14,400 | Shared hosting, backups |
| Summit (mid-tier) | $70 | $1,400 | $16,800 | Hosting, basic support |
| Apps4Rent (mid-tier) | $55 | $1,100 | $13,200 | Shared hosting |
| Sagenext (mid-tier) | $80 | $1,600 | $19,200 | Shared hosting |
Total Cost of Ownership (20-User Firm, Including Add-Ons)
This table adds the costs that aren’t on the hosting invoice: separate compliance tools, endpoint protection, productivity losses, and third-party IT management.
| Cost Component | Verito VeritComplete Pro | Rightworks | Ace Cloud | Summit |
|---|---|---|---|---|
| Hosting (annual) | $47,760 | $30,960 | $14,400 | $16,800 |
| WISP/Compliance tools | Included | $2,500 | $3,500 | $3,500 |
| Endpoint protection | Included | $4,800 | $4,800 | $4,800 |
| Managed IT | Included | $12,000 | $12,000 | $12,000 |
| Annual TCO | $47,760 | $50,260 | $34,700 | $37,100 |
With managed IT, compliance, and endpoint protection factored in, Verito’s VeritComplete plans are competitive with Rightworks.
Risk-Adjusted TCO (Including Productivity Impact)
This table adds estimated productivity losses from hosting performance during the 14-week filing season. Based on the benchmark data above, using $150/hour billing rate and measured time differences per user per day.
| Provider | Annual TCO | Est. Productivity Loss | Risk-Adjusted TCO |
|---|---|---|---|
| Verito VeritComplete Pro | $47,760 | $0 (baseline) | $47,760 |
| Rightworks | $50,260 | $4,200 | $54,460 |
| Ace Cloud | $34,700 | $14,700 | $49,400 |
| Summit | $37,100 | $17,500 | $54,600 |
| Apps4Rent | $29,200 | $21,000 | $50,200 |
| Sagenext | $32,400 | $24,500 | $56,900 |
The risk-adjusted view changes the ranking. Budget providers that look 40-50% cheaper on paper end up costing more when productivity losses are included.
Backup and Disaster Recovery Standards
Tax firms face a unique backup challenge. Returns created in January and February may need to be recovered through October extension deadlines and into the following year’s audit cycle. A 30-day backup window doesn’t cover this timeline. 90 days is the practical minimum. 120 days provides comfortable coverage.
Backup Comparison
| Feature | Verito | Rightworks | Ace Cloud | Summit | Apps4Rent | Sagenext |
|---|---|---|---|---|---|---|
| RPO | 4 hours | 1 hour | 24 hours | 12 hours | 24 hours | 24 hours |
| RTO (tested) | 2.5 hours | 6 hours | Not documented | 8 hours (est.) | Not documented | Not documented |
| Retention | 120 days | 90 days | 30 days | 45 days | 30 days | 30 days |
| Immutability | Yes (WORM) | Yes | Not documented | No | No | No |
| Snapshot Frequency | Every 4 hours | Hourly | Daily | Daily | Daily | Nightly |
| Tested Restores | Yes (documented) | Yes | Not published | Not published | Not published | Not published |
What Immutability Means and Why It Matters
Immutable backups use WORM (Write Once Read Many) storage. Once written, they can’t be modified, encrypted, or deleted, even by administrators. This is your last defense against ransomware.
Without immutability, an attack can encrypt your backups alongside production data. No recovery path except paying the ransom. Only Verito and Rightworks implement backup immutability in this benchmark.
For a deeper look at backup architecture for tax firms, read our guide on managed backup vs BaaS vs DRaaS.
The 10-Point Buyer’s Audit Checklist
Before signing with any UltraTax CS hosting provider, walk through this checklist. Each item represents a real risk that firms have encountered.
1. Performance Under Peak Load
Ask for documented test results at 20 concurrent users on a 150GB+ database. If the provider can’t produce this, they haven’t tested under your conditions. Request a 15-day free trial to test with your own data.
2. Data Isolation Architecture
Is your environment a dedicated server or a shared tenant? If shared, what isolation mechanisms prevent noisy-neighbor performance degradation? Request an architecture diagram.
3. SOC 2 Type II Audit Report
Request the full SOC 2 Type II report, not a marketing badge. Check the audit scope. Confirm it covers the specific hosting environment you’ll use. Type I is not equivalent to Type II.
4. WISP and IRS 4557 Compliance
Does the provider offer a customizable WISP template? Is it aligned to IRS Publication 4557 requirements? Or will you need to build one from scratch?
5. Backup Immutability and Retention
Are backups immutable (WORM storage)? What’s the retention period? 30 days is insufficient for tax firms. Ask for restore test logs to confirm the RTO is real and not theoretical.
6. Sub-60-Second Support Response
What’s the average first-response time during tax season? Is it measured in seconds or hours? Ask for published response time data, not an SLA promise.
7. Tax-Fluent Support Staff
Can the support team troubleshoot UltraTax CS diagnostic failures? Do they understand FileCabinet CS integration? Or is support limited to “restart the server” guidance?
8. RTO and RPO Guarantees
What are the documented RPO and RTO commitments? Have they been tested in a real disaster scenario? Ask for evidence of DR testing.
9. Ecosystem Flexibility
Can you install Chrome, Office 365 desktop apps, PDF tools, and other software your firm needs? Or are you restricted to a walled garden of pre-approved applications?
10. Pricing Transparency
Are there hidden per-server, per-GB storage, per-backup, or per-migration fees? What does the contract term look like? Is there a cancellation penalty?
What UltraTax CS Firms Are Doing in 2026
The hosting market for UltraTax CS firms is shifting. Several trends are reshaping how firms evaluate and select providers.
Migration Away from Virtual Office CS
More firms are leaving Virtual Office CS for third-party dedicated hosting. The drivers: limited application flexibility, shared performance during peak season, and higher total cost when licensing and hosting are unbundled.
Compliance as a Selection Criterion
IRS enforcement of Publication 4557 and FTC Safeguards has made compliance a top-three criterion, up from “nice to have” two years ago. Firms now ask for SOC 2 reports before they ask about pricing.
Consolidation of IT and Hosting
Firms are moving away from managing separate hosting, IT, and compliance vendors. Multi-vendor coordination and finger-pointing during incidents drive firms toward bundled solutions.
VeritComplete-style plans represent this trend. The best cloud hosting for tax software now means more than a server. The broader cloud hosting for tax software market is moving toward all-in-one packages.
Dedicated Infrastructure Growth
The shared hosting model is losing ground. Firms that experienced peak-season degradation are willing to pay more for dedicated vs shared environments with consistent performance.
CS Professional Suite Integration Depth
Firms are looking beyond UltraTax-only hosting. They want providers who understand the full CS Professional Suite: FileCabinet CS, Practice CS, Engagement CS, and their integration points. Hosting providers that treat UltraTax as just another Windows application are losing ground to those with deep tax software hosting expertise and UltraTax hosting knowledge.
Summary and Recommendations
Six UltraTax CS hosting providers. Six weeks of testing. Here’s what matters.
Performance: Sub-80ms RDP latency and sub-60-second cold launches during peak season. Only two providers (Verito and Rightworks) hit these marks at 20 concurrent users. Dedicated and container-isolated architectures deliver this consistently. Shared infrastructure does not.
Compliance: SOC 2 Type II, WISP documentation, AES-256 encryption, mandatory MFA, immutable backups. These aren’t premium features. They’re the baseline for any firm handling taxpayer data. Only two providers meet the full compliance checklist.
Support: Tax-fluent, minutes not hours. Verito (sub-60-second, 94% first-touch) and Rightworks (90 seconds, 82% first-touch) lead. The gap between “our support team knows UltraTax CS” and “have you tried restarting” is enormous during filing season.
Backup and DR: 90+ day immutable retention, tested restore procedures, sub-6-hour RTO. Half the providers in this benchmark fall short.
Total Cost: Budget hosting looks 40-50% cheaper until you factor in productivity losses, separate compliance tools, and third-party IT management. Risk-adjusted TCO tells a very different story than per-user pricing.
Our Recommendations
- For firms with 10+ users and compliance requirements: Verito (95/100). Dedicated servers, built-in WISP, sub-60-second support, and month-to-month contracts. The performance and compliance advantages justify the price.
- For mid-market firms that value brand and ecosystem: Rightworks (88/100). Strong support, container isolation, proven platform. Budget for separate compliance tools.
- For cost-conscious small firms (3-8 users): Ace Cloud Hosting (75/100). Acceptable for moderate workloads. Test during peak season before committing long-term.
- For QuickBooks-primary firms with secondary UltraTax use: Summit (68/100). Their QuickBooks expertise is strong. UltraTax performance is secondary.
Frequently Asked Questions
35% faster on average across all metrics. Over 20-user concurrent load, the gap widens. Cold launch: 38 seconds (dedicated) vs 96 seconds (shared average). Diagnostic calculations: 39 seconds vs 82 seconds. Over a 14-week filing season, the productivity difference adds up to 100-150 hours per firm.
Can I move from Virtual Office CS to a third-party host without disrupting filing season?
Yes, but schedule the migration before October 1. Moving mid-season creates unnecessary risk. Verito offers a 15-day free trial so you can validate performance with your actual data before committing. Their migration support team handles the transition.
What’s the difference between FTC Safeguards Rule and IRS Publication 4557?
IRS Publication 4557 provides guidance specifically for tax professionals on protecting taxpayer data. It requires a Written Information Security Plan (WISP). The FTC Safeguards Rule is a regulation for any business handling personal financial information. Most tax firms fall under both. Your hosting provider’s compliance posture affects your ability to meet each.
Do I need 90-day backup retention or is 30 days enough?
30 days is not enough. Tax returns created in January and February may need recovery through October extensions and into next year’s audit season. A data corruption event discovered 45 days after it occurred is unrecoverable with 30-day retention. 90 days is the floor. 120 days is better. See our backup best practices for CPA firms.
Is SOC 2 Type II certification worth paying extra for?
You shouldn’t have to pay extra. SOC 2 Type II is standard among serious hosting providers. If your provider charges a premium for compliance certification, or doesn’t have one at all, that’s a signal. Type I (point-in-time) is not equivalent to Type II (operating effectiveness over time). Always request the full audit report and check the scope.
Can I run UltraTax CS and QuickBooks on the same hosted server?
Yes. Both fit on a properly sized environment. A 4vCPU, 16GB RAM instance handles the combination for small firms. Larger firms with 10+ users need 8vCPU and 32GB minimum. All six providers in this benchmark support running both applications. The performance difference shows up when both applications run under concurrent load.
What happens during a ransomware attack if my data is hosted?
With immutable backups and a tested DR plan, recovery happens in hours, not days. Verito’s 4-hour RPO and 2.5-hour RTO mean maximum downtime of approximately 6.5 hours with a maximum data loss of 4 hours of work. Without immutable backups, your provider’s backups could be encrypted alongside your production data, leaving no recovery path except paying the ransom.
How do I validate a provider’s performance claims before signing?
Request a free trial and test with your own data. Run your actual UltraTax CS workflows. Measure RDP latency using the Remote Desktop Connection experience indicator. Time your diagnostic calculations and return open/save cycles. Compare against the benchmarks in this guide. Any provider that refuses to offer a trial period should raise concerns.
Should I choose monthly or annual billing?
Month-to-month contracts give you flexibility and bargaining power. If performance degrades during tax season, you can leave without paying a cancellation penalty. Annual billing saves 10-15% with most providers. The trade-off depends on your confidence in the provider. If you haven’t experienced a full tax season with them yet, start monthly.
What’s the difference between Virtual Office CS and third-party UltraTax hosting?
Virtual Office CS is Thomson Reuters’ native hosting. It’s tightly integrated with the CS Professional Suite but runs on shared infrastructure and restricts you to Thomson-approved applications. Third-party hosting providers offer more flexibility: dedicated servers, open application installation, customizable configurations, and often faster support response times. The trade-off is that you manage the software licensing separately.
Is it worth switching hosting providers after a bad tax season?
Yes. The cost of one more bad tax season, in lost productivity, missed deadlines, and team frustration, typically exceeds the cost and effort of switching IT providers. Migrate during the post-season window (May through October) when filing pressure is low. Test thoroughly before the next January.
How does UltraTax CS hosting pricing compare across providers?
Entry-level shared hosting starts around $27-$60 per user per month. Dedicated hosting ranges from $69-$249 per user per month depending on plan tier and bundled services. For a full UltraTax hosting cost breakdown, see our pricing guide. Budget hosting saves $30-50/user/month but costs significantly more in productivity losses during peak season.
Start Your Evaluation Today
Hosting decisions made during the off-season determine your firm’s performance during the next filing season. Don’t wait until January to discover your provider can’t handle the load.
Verito offers a 15-day free trial with no credit card required and a 30-day money-back guarantee. Test with your actual UltraTax CS data and compare against the benchmarks in this guide.
1,000+ CPA firms run UltraTax CS on Verito’s dedicated private servers. 4.9/5 on G2 with 150+ reviews. SOC 2 Type II compliant. Zero ransomware incidents since 2016.
Get Started | View Pricing | Start Free Trial
Transparency Note: Verito Technologies developed this benchmark and is the top-ranked provider. This is disclosed openly. All providers were scored against the same objective criteria using the same test methodology.
