Family Office Excel and Email: Modernise Without a Big Team

This guide is for a family with €20M–€150M whose family office still runs on Excel and email: accounts at four banks, a holding company in Portugal, a company in Dubai, a property entity in Spain, one founder, one assistant and a part-time bookkeeper. Reporting lives in a workbook only one person can update. The filings calendar lives in someone’s head. Deeds and bank mandates sit as PDFs in three inboxes, and payments are approved by replying “ok”. The conclusion: the family office Excel files are not the problem, and how to manage a family office (the private structure that holds a family’s entities, reporting, advisors and governance together) at this size is rarely a software question. Below: what to keep in Excel, what to move, what to outsource, and in what order.

Our family office still runs on Excel and email: how do we modernise without hiring a large team?

Do not start with software. Name who owns each recurring task, then move four things in order: one register of entities, accounts and owners; a filings calendar with a named owner per deadline; a document store that replaces the inbox; and payment approvals with two people and a call-back. Buy specialist work by the hour. Choose a platform last.

The rest of this guide expands those steps:

1. Write down who does what. One page, every recurring task, one name against each.
2. Build one register of entities, accounts, owners and signatories, in Excel, with a source document behind every row.
3. Put every filing and renewal in a calendar with a named owner and an evidence link.
4. Move documents and approvals out of email. Documents go into one store with permissions; approvals go into the bank’s dual-authorisation settings.
5. Buy specialist work by the hour (bookkeeping, tax, legal secretarial, IT security) and decide on a reporting platform last, once the register is clean.

A family office operating model at €20M–€150M

A family office operating model has four layers. Most families at this size have pieces of each and no owner for any of them.

• Data. One register of what exists: entities, accounts, ownership percentages, signatories, the document that proves each line. Everything else reads from it.
• Reporting. A fixed cadence (quarterly is enough for most families) and one valuation date across all banks, so the numbers add up to a balance sheet rather than a pile of statements.
• Controls. Who can approve a payment, who can see which documents, and which deadline falls on whom.
• Roles. Who does each recurring task, who signs it off, who must be consulted and who only needs to know.

The institutional version of this model is built for a much larger balance sheet. The Family Office Operational Excellence Report 2025, published by Campden Wealth and AlTi Tiedemann Global in June 2025, surveyed 146 single-family offices between November 2024 and March 2025: 56% in North America, 29% in Europe and 15% in Asia-Pacific. Its “small” band is offices with assets under management below US$250M, already larger than many families reading this.

The arithmetic is plain. For a family with €20M–€150M, a cost base of that size is hard to justify, and most of it is salaries. Copying the institutional model means hiring before the operating layer exists, and the new hires spend their first months building the register nobody wrote down. If the family has not yet decided whether it needs an office at all, start with do I need a family office, which compares the models by cost. This guide assumes that decision is made and the question is how to run what exists.

Where Excel and email break first

Spreadsheets and inboxes rarely fail in one dramatic event. They fail one process at a time, usually the process that depends on a single person remembering something. Campden’s 2025 report finds that about one in three family offices need more than 50% manual effort to produce reports, and that reliance on manual work tracks the age of the systems: offices on technology older than five years fare worst.

The table below is a diagnostic. Each row has a test that takes about ten minutes. A failed test is not a crisis; it is the next item on the list.

The reporting row is where most families notice the problem first, because it is the one the founder sees. Getting to consolidated reporting, one regular report of everything the family owns valued on one date, is a separate piece of work with its own mechanics; the bank-statement side is covered in consolidated reporting across multiple banks. The key-person row is the one that hurts most when it fails. The composite case of a property developer with nine SPVs and no balance sheet shows what happens when the register only exists in one head, and the case of a founder with wealth spread across multiple banks shows the reporting version of the same problem.

What to keep in Excel, what to move, what to outsource

Most vendor guides say software should replace spreadsheets. For a family of this size, that is the wrong first move. Excel is good at lists and analysis. It is bad at permissions, audit trails, two-person approval and being an archive. The split follows from that.

Everything in the second column is a generic tool category that most families already pay for in some form. The change is not the purchase; it is the rule that a document is not filed until it is in the store, and a payment is not approved until two people have approved it in the bank. This is the work of family office administration: setting the rules, then keeping them.

The four sheets worth keeping (a family office Excel template)

A family office Excel template does not need to be clever. It needs four sheets with fixed columns, one owner per sheet, and a link from every row to the document that proves it. Column specifications, not a download:

(a) Entity and account register. Entity · jurisdiction · ownership % and owner · bank or custodian · account number (last four digits) · signatories and their limits · link to the source document (statutes, mandate, account-opening pack). One row per account, so an entity with three accounts has three rows.

(b) Filings and renewals calendar. Obligation · entity · jurisdiction · deadline rule (as written in the law or the bank’s letter) · next date · owner (a person, not a firm) · provider · status · link to the evidence of filing. The deadline rule matters more than the date: dates move, rules rarely do.

(c) Approvals log. Date · payee · amount · purpose · approver 1 · approver 2 · call-back done (yes/no, number used) · link to the invoice or instruction. If the bank’s e-banking already records the approvals, this sheet records the call-back and the reason, which the bank does not.

(d) 12-month cash forecast. Inflows and outflows by entity and month: dividends, rents, capital calls, tax payments, staff, school fees. The point is to see a liquidity gap three months before it arrives.

The positions and valuations sheet is the fifth one families usually ask about. It has its own limits and tests, set out in “The spreadsheet stage and its limits” in consolidated reporting across multiple banks; it is not restated here.

A filings calendar for a family across Portugal, Spain and the UAE

A common spread for families at this size is a Portuguese holding or company, Spanish tax residence or Spanish assets, and a UAE company. Each jurisdiction has its own register and its own deadline rules, and each provider tends to see only its own. The calendar is where they meet.

The rows below are deadline rules, checked on the official sites on 20 October 2026. They are not a tax opinion. Whether a rule applies to a given entity or person is for the family’s accountant or lawyer to confirm each year.

Three rules make the calendar work. Each row has one named owner, a person rather than a firm. Each row has one evidence link, to the filed return or the submission receipt, stored in the document store. And the calendar is reviewed once a month by someone who is not the owner of every row. The bank rows are the ones families forget, because the bank drives them; they belong in the calendar anyway, since a lapsed KYC pack can freeze an account.

The division of labour is fixed. The accountant or lawyer files; PWA keeps the calendar and chases the owners. PWA does not manage money, hold mandates, take commissions or give regulated investment, tax or legal advice. Where the calendar touches the structure itself (which entity should hold what, in which jurisdiction), that is wealth planning and structuring work, coordinated with the family’s licensed advisors.

Family office document management without a document team

Family office document management at this size does not need a document team. It needs five decisions, written down once.

1. One store. A shared drive with permissions, chosen once. Email is a channel for receiving documents, not an archive for keeping them. A document received by email is saved to the store the same day, and the email can then be deleted.
2. One folder taxonomy. Entity / year / document type. A family with eight entities has eight top-level folders, plus one for the family members’ personal documents.
3. One naming convention. YYYY-MM-DD_entity_type_counterparty, for example 2026-03-31_HoldingPT_statutes_notary.pdf. Dates first, so files sort in time order.
4. One owner. One person files, renames and checks. Others may upload to an inbox folder; only the owner moves files into the taxonomy.
5. Access by role, and a retention rule. The founder sees everything; the bookkeeper sees the accounting folders; the next generation sees what the family has decided they should see. Each document type has a retention period, and the owner deletes on schedule.

Passports, tax identification numbers, medical letters and school records of family members and staff are personal data. When an EU entity holds them, the EU’s General Data Protection Regulation (GDPR) applies. The practical minimum: collect only what a process needs, restrict access by role, keep a record of who can see what, and delete on schedule. What the family’s specific obligations are is a question for its lawyer; the folder structure is how the answer is kept.

Approvals and payments: getting them out of the inbox

An email reply is not an approval. It has no second approver, no record that ties it to the payment, and it can be forged. Four controls replace it, and all of them are settings or habits rather than purchases.

• Dual authorisation above a threshold. Set it in each bank’s e-banking: below the threshold one signatory, above it two. This is the four-eyes principle, and the bank enforces it, not the family.
• Call-back to a number held on file. Any new payee, and any payment above the threshold, is confirmed by phone on a number already in the register. Never the number in the email that asked for the payment.
• No bank-detail changes by email alone. A supplier, lawyer or advisor who “has changed banks” is called back on the number on file before the register is updated.
• Multi-factor authentication everywhere. Email, e-banking, the document store and the password manager. Access rights are reviewed when someone joins or leaves, and the approvals log keeps the audit trail.

Segregation of duties follows from these: the person who sets up a payment is not the person who approves it.

Family office cybersecurity on a small budget

Family office cybersecurity is mostly about email, because email is where the money moves. Deloitte Private’s Family Office Cybersecurity Report 2024 found that 43% of family offices globally had experienced a cyberattack in the previous 12–24 months (57% in North America, 41% in Europe, 24% in Asia-Pacific), and that phishing was the most common form, experienced by 93% of victims.

The same Deloitte report found that 31% of family offices have no cyber incident response plan, 50% have no disaster recovery plan and 68% have not adopted “know your vendor” protocols. Campden’s 2025 report adds that over 60% of the offices it surveyed had suffered at least one cyberattack.

The wider picture is the same. The FBI’s Internet Crime Complaint Center (IC3) recorded 24,768 business email compromise complaints in 2025, with reported losses of US$3,046,598,558. Those are complaints filed with IC3 across all sectors, not family offices specifically, and reported losses understate the real total. The pattern is still the one that matters here: a convincing email, a changed IBAN, a payment approved by reply.

On a small budget, the order is: multi-factor authentication on every account; a password manager; dual authorisation and call-backs as above; a one-page incident plan that says who calls which bank, in which order, with which numbers; and backups of the document store that someone has actually restored once. IT security is then a natural function to buy by the hour, which is the next section.

Family office outsourcing: what to buy by the hour instead of hiring

Family office outsourcing is the norm, not the exception. In Campden’s 2025 report, legal, estate planning, tax, IT and cybersecurity are the most outsourced services, with between 86% and 96% of family offices using external providers for them to some degree. In small and midsize offices, outsourcing makes up about one-third of total costs, and the report notes that this “comes at a discount to hiring those staff in-house”.

For a family without an office, what to buy by the hour is the outsource column of the table above: bookkeeping by a local accountant per entity; tax filings by a licensed advisor in each jurisdiction, working from the calendar; legal secretarial work (minutes, shareholder registers, beneficial-owner filings); and IT security (device set-up, backups, access reviews, the incident plan).

The catch is in the same report. Only about a quarter of family offices (27%) say their outsourcing providers deliver consistently excellent service. The usual reason is not that the providers are bad. It is that each one sees its own piece, and nobody tells the Portuguese accountant what the UAE tax agent changed. Outsourcing moves the work. It does not move the coordination. Somebody still has to own the calendar, the register and the providers.

The virtual family office model, and the role it usually lacks

A virtual family office is a family office without in-house staff: the family buys accounting, tax, legal, investment and IT services from separate providers and coordinates them itself. It works well for families with a few entities in a few jurisdictions, a stable portfolio and a founder who has time to coordinate.

The piece it usually lacks is a single owner of the operating layer: one person or firm that keeps the register, runs the calendar, holds the document store in order, knows which provider is doing what, and reports to the family on all of it. Without that role, the virtual family office is a list of good specialists and an inbox.

That role is what PWA does. It designs and runs the operating layer around the family’s wealth: the register, the calendar, the controls, the provider map and the reporting cadence. The money stays with the banks and managers the family has chosen, and the filings stay with its licensed accountants and lawyers.

The order of work: a 90-day sequence

This is how we sequence the work for a family at this size. It is a working order, not a statistic, and the weeks stretch when a bank is slow or a document is missing.

The order matters more than the speed. A register built before the who-does-what page has no owner, and drifts. A platform bought before the register is clean imports the mess at a monthly fee. When the family wants this run as a service rather than a project, it is part of family office administration.

When a reporting platform is worth it

A platform earns its cost when three things are true. The register is clean and has an owner. There are more banks and entities than one person can reconcile in a day each quarter. And the portfolio holds private assets with capital calls and distributions that a spreadsheet tracks badly. Before that point, a platform automates a process that does not yet exist. Who should select and implement it, without selling it, is covered in family office technology.

For selection criteria and the European vendor landscape, see family office software. For what to check on data ownership and exit before signing, see build vs buy for family office reporting.

Get the diagnostic done for your family

The diagnostic table above is easy to read and slow to fill in honestly, because the family is too close to it. The fastest first step is a Wealth Operations Review: an independent written second opinion on how the family’s operations run today, row by row, with what to change first.

Questions we hear

Is Excel good enough for a family office?

Yes, for registers and analysis, as long as every row has a named owner and a link to its source document. No, as the archive, the approval channel or the only copy of the filings calendar. Excel fails at permissions, audit trails and two-person approval, so those belong in the bank’s e-banking, a document store and a shared calendar.

What should a family office Excel template include?

Four sheets. An entity and account register: entity, jurisdiction, ownership, bank, account, signatories, source document. A filings and renewals calendar: obligation, deadline rule, next date, owner, provider, status, evidence. An approvals log: date, payee, amount, two approvers, call-back done. And a 12-month cash forecast. Positions and valuations belong in a separate sheet fed by bank statements.

How do you manage a family office without a large team?

Give one person or firm ownership of the operating layer: the register, the calendar, the documents and the providers. Keep four disciplined sheets, move documents and payment approvals out of email, and buy bookkeeping, tax, legal secretarial and IT security by the hour. The specialists do the work; the owner makes sure nothing falls between them.

What is a virtual family office?

A virtual family office has no in-house staff. The family buys accounting, tax, legal, investment and IT services from separate providers and coordinates them. It works when one coordinator owns the register, the filings calendar and the provider list. Without that role, the family gets several good specialists and nobody responsible for the whole.

Which family office functions are usually outsourced?

Legal, estate planning, tax, IT and cybersecurity. In the Campden Wealth and AlTi Tiedemann Global Family Office Operational Excellence Report 2025, between 86% and 96% of the family offices surveyed use external providers for each of these, at least to some degree. Bookkeeping and legal secretarial work are natural additions for a small office without accounting staff.

How do we stop payment fraud that arrives by email?

Never approve a payment or a change of bank details by email alone. Set dual authorisation above a threshold in each bank’s e-banking, call back on a number held on file, and switch on multi-factor authentication everywhere. Deloitte’s 2024 family office cybersecurity report found that 93% of offices hit by an attack had experienced phishing.

How long does it take to move a family office off spreadsheets and email?

As we sequence the work, about one quarter: two weeks for who does what, a month for the register and the document store, three weeks for the filings calendar and dual approvals, and the rest for the first quarterly report. A platform, if one is needed, comes after that, once the register is clean.

Sources

All pages opened and checked on 20 October 2026.

• Campden Wealth and AlTi Tiedemann Global, “The Family Office Operational Excellence Report 2025”, June 2025. Supports: 146 single-family offices surveyed November 2024 to March 2025, 56% North America, 29% Europe, 15% Asia-Pacific; small = AUM under US$250M; about one in three need more than 50% manual effort to produce reports, worst on systems older than five years; 70% rank cybersecurity the top operational risk; over 60% had at least one cyberattack; 86%–96% use external providers for legal, estate planning, tax, IT and cybersecurity; outsourcing about one-third of total costs in small and midsize offices, “at a discount to hiring those staff in-house”; C-level compensation up to 72% of costs in small offices; 27% report consistently excellent provider service; North America average total cost US$1.2M (small); 61, 40 and about 20 basis points of AUM for small, midsize and large offices. campdenwealth.com (report page: campdenwealth.com)
• Deloitte Private, “The Family Office Cybersecurity Report 2024”, 2024. Supports: 43% of family offices attacked in the previous 12–24 months (North America 57%, Europe 41%, Asia-Pacific 24%); phishing experienced by 93% of victims; 31% without a cyber incident response plan; 50% without a disaster recovery plan; 68% without “know your vendor” protocols. deloitte.com
• Federal Bureau of Investigation, Internet Crime Complaint Center, “2025 IC3 Annual Report”, April 2026. Supports: business email compromise, 24,768 complaints and US$3,046,598,558 in reported losses in 2025. ic3.gov
• Justiça.gov.pt, “Guia do Registo Central do Beneficiário Efetivo (RCBE)”. Supports: annual confirmation by 31 December, possible with the IES for the previous calendar year; updates within 30 days of the change. justica.gov.pt
• Instituto dos Registos e do Notariado, “Prazo da confirmação anual da informação do RCBE: Esclarecimento”, 29 December 2022. Supports: entities subject to the IES may confirm by 15 July of the following calendar year. irn.justica.gov.pt
• Autoridade Tributária e Aduaneira, Portal das Finanças, “Obrigações declarativas” (fiscal calendar), updated October 2026. Supports: IES filed by 15 July for taxpayers whose tax period is the calendar year. info.portaldasfinancas.gov.pt
• Agencia Tributaria, Sede Electrónica, “Modelo 720: Plazos de presentación”. Supports: filing period 1 January to 31 March (2026 campaign for the 2025 year). sede.agenciatributaria.gob.es
• UAE Federal Tax Authority, “Federal Tax Authority urges submission of Corporate Tax returns and settlement of Corporate Tax liabilities within nine months from the end of the Tax Period”, 24 September 2025. Supports: return and payment within nine months of the end of the tax period; end of September for a 31 December year-end. tax.gov.ae

---

Pedro Souto is the founder of PWA — Private Wealth Advisory. He works with UHNW founders, families, and single-family offices to build an independent operating layer around complex wealth — combining markets, analytics, technology, and governance to turn fragmented advice into one coherent picture, and to make someone, finally, responsible for the whole of it.