Quick Summary
- Virtual Office CS provides a standardized Thomson Reuters-managed environment for CS Professional Suite applications and selected Microsoft products.
- Managed private cloud provides a dedicated environment for one organization with greater control over applications, resources, access, and configuration.
- Virtual Office CS has documented limits involving some add-ins, local integrations, devices, and application configurations.
- The better option depends on operational fit, including application compatibility, performance requirements, security responsibilities, scalability, and the level of technical control the firm needs.
Introduction
Virtual Office CS and managed private cloud hosting represent two different ways to deliver accounting and tax applications. Virtual Office CS provides a Thomson Reuters-managed cloud environment for licensed CS Professional Suite applications and selected Microsoft products. Thomson Reuters manages the hosted environment, application maintenance, and data backups, while firms access applications remotely through its supported platform.
Managed private cloud hosting takes a different approach. It provides an environment dedicated to one organization and allows the hosting provider to design the application stack, resource allocation, access controls, backup architecture, and support model around the firm’s requirements. However, a private cloud does not automatically mean that the firm receives an entire physical server; AWS defines private cloud around resources dedicated to one organization and separately defines a Dedicated Host as a physical server dedicated to one customer.
The better model depends on operational fit—not on which provider uses stronger marketing language. CPA firms should compare application compatibility, add-ins, local-device requirements, concurrent workloads, resource visibility, security responsibilities, Microsoft 365 administration, recovery objectives, scalability, and vendor-support coordination.
This guide focuses exclusively on those technical and operational differences. For billing, user costs, licensing expenses, migration budgets, and three-year TCO, use our Virtual Office CS bundled pricing vs dedicated hosting costs guide.
Key Takeaways
- Begin with an application and workflow inventory. Document every application, version, database, add-in, scanner, printer, local integration, and prior-year tax program before choosing an architecture.
- Define what “private” means. Ask whether the proposed design uses dedicated virtual machines, reserved resources, a dedicated host, bare-metal hardware, or another isolation model.
- Choose Virtual Office CS for standardized Thomson Reuters-centered workflows. It may fit firms whose applications, integrations, devices, and administration needs remain within the platform’s documented boundaries.
- Consider managed private cloud for broader application environments. It may fit firms that need to combine properly licensed Thomson Reuters, QuickBooks, Sage, Drake, CCH, Microsoft, document-management, and workflow applications in one managed workspace.
- Validate every add-in and integration. Virtual Office CS restricts several local integrations and plugins, while private-cloud compatibility still depends on software licensing, operating-system support, database requirements, and vendor approval.
- Evaluate performance through measurable inputs. Compare processor capacity, memory, storage latency, IOPS, user concurrency, internet latency, monitoring, and resource-expansion procedures.
- Do not equate private cloud with automatic security. Greater configuration control only creates value when the provider correctly implements access controls, MFA, EDR, firewalls, logging, segmentation, backups, and incident-response procedures.
- Define the shared-responsibility model. The agreement should identify who manages infrastructure, operating systems, application updates, user access, Microsoft 365, endpoints, backups, security alerts, and vendor escalations.
- Treat backup and disaster recovery as separate capabilities. Confirm backup frequency, retention, storage locations, restore testing, RPO, RTO, and full-environment recovery.
- Select the architecture that fits the firm’s complete operating model. Application compatibility, filing-season workloads, integrations, recovery needs, internal IT capacity, and growth plans matter more than the hosting label.
What Is Virtual Office CS?
Virtual Office CS is Thomson Reuters’ cloud-based environment for accessing CS Professional Suite programs and selected Microsoft products remotely. Thomson Reuters manages the hosting environment, application maintenance, and data backups.
Users currently access Virtual Office CS applications through Microsoft’s Azure Virtual Desktop experience and Windows App. The firm retains administrative responsibilities for users, permissions, and parts of its Microsoft 365 environment.
Virtual Office CS works best as a standardized environment centered on supported Thomson Reuters workflows. The firm does not design the underlying server architecture or freely install every desired application and plugin.
What Is Managed Private Cloud Hosting?
Managed private cloud hosting gives one organization an isolated cloud environment while a provider manages the servers, operating systems, monitoring, security tools, backups, and technical support.
A private cloud does not always mean one physical machine. IBM defines private cloud around single-tenant use, while AWS distinguishes private cloud from a Dedicated Host, which reserves a physical server for one customer.
Before evaluating a provider, ask which layer remains dedicated:
- Private cloud: An environment dedicated to one organization
- Dedicated virtual environment: Virtual servers and allocated resources isolated for one customer
- Dedicated host: A physical virtualization host reserved for one customer
- Bare-metal server: Physical hardware assigned directly to one customer
- VPS: A virtual server that may share physical hardware with other customers
The provider should define the design contractually. “Private” should never remain an undefined marketing term.
Virtual Office CS vs Private Cloud Architecture
| Architecture factor | Virtual Office CS | Managed private cloud | What the firm should verify |
|---|---|---|---|
| Platform management | Thomson Reuters | Hosting provider | Exact management scope |
| Application focus | CS Professional Suite and supported products | Multiple properly licensed applications | Compatibility testing |
| Environment design | Standardized | Configurable | Dedicated physical or virtual resources |
| Application installation | Controlled by platform support | Broader, subject to licensing and compatibility | Approval and update process |
| Add-ins | Platform restrictions apply | Provider can test compatible add-ins | Vendor support status |
| User access | Azure Virtual Desktop | Citrix, RDP, or another managed desktop model | MFA and device support |
| Computing resources | Platform-managed | Defined or allocated in the design | CPU, RAM, storage, concurrency |
| Security controls | Platform-defined | Contractually configurable | Logging, EDR, firewall, segmentation |
| Backup architecture | Thomson Reuters-defined | Provider-defined | Copies, retention, RPO, RTO |
| Microsoft 365 | Firm-managed tenant requirements | Firm or provider-managed | Administration boundaries |
| Scaling | Platform process | Resource and contract-based | Capacity planning |
| Operational control | Limited | Greater | Change-management process |
Application and Integration Flexibility
Application fit often decides whether a standardized environment remains suitable.
Thomson Reuters documents several Virtual Office CS and SaaS limitations:
- Additional Microsoft Office plugins and add-ins cannot be installed.
- Hosted applications do not directly integrate with locally installed applications.
- Adobe Acrobat is unavailable, although Adobe Reader supports PDF viewing.
- Audio and some local-device integrations are unavailable.
- Local scanners cannot integrate directly with Outlook.
- Credit-card swipers are not supported.
- FileCabinet CS uses flat-file data locations rather than SQL in this environment.
These limitations do not make Virtual Office CS ineffective. Instead, they define the environment’s supported operating boundary.
A private cloud may fit better when the firm needs to run a broader combination of properly licensed applications, such as:
- UltraTax CS
- Accounting CS
- Practice CS
- FileCabinet CS
- Fixed Assets CS
- QuickBooks Desktop or Enterprise
- Sage applications
- Drake Tax
- CCH applications
- Document-management tools
- Workflow tools
- Supported add-ins and utilities
However, the provider must test every version, database, licensing service, print driver, scanner, and integration. “We can host any application” is not an acceptable technical assessment.
Application Readiness Inventory
Before selecting an architecture, document:
- Application name and version
- Vendor and license type
- Database or data location
- Add-ins and extensions
- Integration dependencies
- Prior-year tax versions
- Printers and scanners
- Local-drive requirements
- User groups
- Concurrent-user peak
- Update schedule
- Vendor-support requirements
This inventory should drive the design. The hosting label should not drive the inventory.
Which Architecture Provides Better Performance?
Neither Virtual Office CS nor private cloud guarantees faster performance by name alone.
Thomson Reuters states that Virtual Office CS performance depends substantially on connection latency, bandwidth, firewall settings, antivirus interference, and a persistent connection to the hosted environment.
Private cloud performance depends on:
- Processor generation and clock speed
- Available memory
- Storage latency
- Disk IOPS
- Database design
- User concurrency
- Application placement
- Profile configuration
- Internet connectivity
- Monitoring and capacity management
Dedicated or isolated resources can reduce resource contention. However, an undersized private environment can perform worse than a properly managed standardized platform.
Performance Evaluation Checklist
Require documented answers for:
- What processor generation supports the environment?
- How much RAM does the firm receive?
- Is RAM dedicated, reserved, or shared?
- What storage technology supports application data?
- How does the provider monitor IOPS and latency?
- How many concurrent users does the design support?
- What happens when filing-season usage increases?
- How quickly can resources be expanded?
- Who investigates application-level slowness?
- Does the provider coordinate with Thomson Reuters support?
- Can the firm test a representative workload before migration?
OneUp Networks describes private environments using NVMe storage, DDR5 memory, 3 GHz-or-higher processors, and dedicated resources for accounting workloads. Final specifications should still appear in the firm’s approved architecture and service agreement.
Security Responsibilities by Hosting Model
Private cloud provides more control over specific security settings, but private infrastructure does not automatically make a firm secure or compliant.
The FTC Safeguards Rule includes tax preparation firms among covered financial institutions. It requires an appropriate written information-security program and controls such as access reviews, encryption, application assessment, multifactor authentication, risk assessment, monitoring, and service-provider oversight.
The IRS also states that tax professionals must maintain a Written Information Security Plan tailored to the size, complexity, and sensitivity of the data they handle.
Therefore, the CPA firm retains responsibility for governance even when a hosting provider manages the infrastructure.
Shared-Responsibility Matrix
| Responsibility | Virtual Office CS | Managed private cloud | CPA firm |
|---|---|---|---|
| Physical infrastructure | Thomson Reuters/platform | Hosting provider | Vendor due diligence |
| Operating system | Platform | Hosting provider | Review provider scope |
| Application licenses | Agreement-dependent | Firm-owned licenses | Purchase and maintain rights |
| Application updates | Platform-controlled | Provider and vendor coordination | Approve timing and testing |
| User permissions | Firm administrator | Firm with provider support | Approve and review access |
| Microsoft 365 tenant | Firm or CSP | Firm or managed provider | Governance and ownership |
| Hosted-server security | Platform | Hosting provider | Validate controls |
| User devices | Firm | Firm | Secure endpoints |
| WISP | Firm | Firm | Maintain and update |
| Incident response | Shared responsibilities | Shared responsibilities | Document escalation |
| Provider oversight | Firm | Firm | Review service provider |
| Staff training | Firm | Firm | Train and test users |
Security Questions for a Hosting Provider
Ask:
- Does every remote and privileged account use MFA?
- How does the provider isolate customer environments?
- Which EDR platform protects hosted servers?
- How are firewall changes reviewed?
- Does the provider encrypt data in transit and at rest?
- How long does it retain security logs?
- Who investigates alerts?
- How often does it review administrator access?
- How does it protect backups from production credentials?
- What incident-response obligations appear in the contract?
- Which data-center reports can the provider share?
- How does it support the firm’s vendor-risk assessment?
Do not accept “IRS compliant,” “FTC compliant,” or “AICPA compliant” without documented controls. A hosting provider can support the firm’s security program; it cannot replace it.
Backup and Disaster-Recovery Architecture
Backup architecture should answer five questions:
- How often does the system create a recoverable copy?
- Where are copies stored?
- How long does the provider retain them?
- How often does the provider test restoration?
- How quickly can the provider restore business operations?
Define:
- RPO: The maximum targeted period of data that could be lost
- RTO: The targeted period for restoring service
- Retention: How long recovery points remain available
- Disaster recovery: How the provider restores the complete operating environment
- Backup immutability: Controls intended to prevent unauthorized modification or deletion
OneUp Networks publishes a model using a primary environment, disaster-recovery environment, three backup copies, 120-day retention, an approximate two-to-four-hour RPO, and an approximate three-to-four-hour RTO for relevant Thomson Reuters hosting services. The signed agreement should confirm which terms apply to the firm’s final environment.
Microsoft 365 Administration
Virtual Office CS firms now need their own supported Microsoft 365 tenant and individual accounts for Microsoft Office access. Thomson Reuters states that it does not administer the customer’s Microsoft 365 tenant, mail routing, or Exchange Online configuration.
In either architecture, determine who manages:
- Tenant settings
- User accounts
- MFA
- Exchange Online
- Shared mailboxes
- DNS
- Email security
- Retention
- Outlook profiles
- License assignment
- Microsoft support cases
This section concerns operational ownership. For license and migration costs, use the companion Virtual Office CS bundled pricing vs dedicated hosting costs guide.
Scalability and Customization
Virtual Office CS scales within Thomson Reuters’ platform and supported administration model. That structure benefits firms that want a standardized environment and do not need to design server resources.
Managed private cloud allows a provider to adjust:
- Memory
- Processors
- Storage
- Application servers
- Database servers
- User groups
- Access policies
- Network segmentation
- Test environments
- Backup retention
- Disaster-recovery design
However, scalability requires planning. Adding users without measuring concurrency, memory, storage latency, and database workload can simply move the bottleneck.
Operational-Fit Decision Matrix
| Firm requirement | Virtual Office CS may fit | Managed private cloud may fit |
|---|---|---|
| Primarily supported CS applications | Strong | Strong |
| Standardized environment preferred | Strong | Moderate |
| Several software vendors | Limited to supported environment | Strong after testing |
| Specialized Office add-ins | Restricted | Potentially suitable |
| Custom database requirements | Limited | Configurable |
| Defined dedicated resources | Platform-managed | Strong |
| Custom network controls | Limited | Strong |
| Multiple acquired offices | Standardized access | Custom segmentation possible |
| Test environment required | Platform-dependent | Configurable |
| One managed multi-application desktop | Limited by support boundaries | Strong |
| Minimal infrastructure decisions | Strong | Provider must design |
| Detailed resource visibility | Limited | Contractually definable |
Choose Virtual Office CS When
Virtual Office CS may be the better operational fit when:
- CS Professional Suite drives most workflows.
- Supported integrations meet the firm’s requirements.
- The firm prefers standardized administration.
- Current application performance remains acceptable.
- The firm does not need specialized add-ins.
- Existing device workflows operate correctly.
- The firm values direct alignment with the Thomson Reuters-hosted environment.
Consider Managed Private Cloud When
Managed private cloud may fit when:
- The firm runs applications from several vendors.
- QuickBooks and Thomson Reuters applications need one managed workspace.
- Specialized add-ins or integrations matter.
- Leadership wants defined infrastructure resources.
- Filing-season concurrency requires capacity planning.
- The firm needs customized access groups or segmentation.
- The firm wants one technical team to coordinate hosting and software-vendor issues.
- Growth, mergers, or additional offices require a configurable environment.
Technical Provider Scorecard
Score each area from one to five.
| Evaluation category | Weight |
|---|---|
| Application and integration fit | 20% |
| Security-control evidence | 20% |
| Performance and resource transparency | 15% |
| Backup and disaster recovery | 15% |
| Support and vendor coordination | 10% |
| Scalability and customization | 10% |
| Migration and rollback planning | 10% |
A high total score should not override a critical failure. Reject an architecture that cannot support a business-critical application, define recovery objectives, or demonstrate appropriate access controls.
Common Architecture Mistakes
- Assuming every private cloud uses dedicated physical hardware
- Treating private cloud and dedicated server as identical
- Selecting a provider before inventorying applications
- Ignoring scanners, printers, add-ins, and local integrations
- Comparing processor labels without storage and latency
- Accepting “unlimited resources” without defined allocation
- Treating backups as a substitute for disaster recovery
- Assuming hosting transfers compliance responsibility
- Moving without testing peak workflows
- Choosing architecture primarily from monthly price
Frequently Asked Questions
Virtual Office CS provides a standardized Thomson Reuters-managed environment. Managed private cloud gives one firm a more configurable environment for its licensed applications, users, integrations, and infrastructure requirements.
Thomson Reuters describes Virtual Office CS as a cloud-hosted environment but does not publicly define it as a dedicated physical server or contractually single-tenant private cloud. Firms should confirm the tenancy model directly in their agreement.
No. A private cloud is an environment dedicated to one organization, while a dedicated server refers to physical hardware reserved for one customer.
Managed private cloud generally provides greater configuration flexibility. Virtual Office CS supports approved applications but has documented limits involving some plugins, local integrations, devices, and Microsoft Office add-ins.
Virtual Office CS may suit firms with a standardized Thomson Reuters-focused workflow. Private cloud may suit firms that need multiple applications, greater configuration control, customized security settings, or defined infrastructure resources
Conclusion
Virtual Office CS and managed private cloud hosting serve different operational needs. Virtual Office CS provides a standardized Thomson Reuters-hosted environment for CS Professional Suite applications, while managed private cloud gives an accounting firm more control over its application mix, resource allocation, integrations, security settings, and recovery design. The right choice depends on application compatibility, concurrent workloads, device requirements, Microsoft 365 administration, scalability, and the level of technical control the firm requires.
CPA firms with straightforward Thomson Reuters-centered workflows may benefit from the consistency of Virtual Office CS. Firms that use multiple accounting and tax applications, specialized add-ins, custom integrations, or defined infrastructure resources may need a managed private cloud environment designed around their complete workflow. OneUp Networks can assess your applications, users, integrations, security responsibilities, backup objectives, and growth plans before recommending an appropriate hosting architecture.
Take the Next Step with OneUp Networks
Your accounting firm deserves technology that works as hard as you do. OneUp Networks empowers firms to modernize their IT infrastructure with secure, high-performance private cloud hosting designed exclusively for accounting professionals. Our platform delivers dedicated resources, advanced compliance tools, and 24/7 expert support so your team can focus on clients—not technology.
Therefore, if you want to lower costs, strengthen data security, and scale confidently, now is the perfect time to experience the OneUp Networks difference.
Start transforming your firm today:
- Contact Us – Speak directly with our cloud experts about your goals.
- Book a Demo – See how our private cloud streamlines accounting operations.
- Start a Free Trial – Experience our secure cloud platform risk-free.
- Chat with an Expert – Get real-time answers and personalized recommendations.
- Get a Quote – Receive a custom plan and pricing tailored to your firm.
With OneUp Networks, your firm gains more than hosting—it gains a trusted partner for growth, compliance, and long-term success.
