Encrypted credential vault
Client portal logins are stored with AES-256-GCM encryption. Viewing them requires your PIN, and the vault re-locks automatically after a timer.
Security
Client data deserves careful handling.
You hold sensitive information for your clients. TaxOnPad is designed to limit who can see it and to record who did.
Role-based access
Admin, preparer, viewer and client roles control which pages and actions each person can use.
Firm-level isolation
Each firm's data is separated from every other firm's at the database level, not just in the interface.
Controlled sharing
Share only selected clients with partner firms, with per-item permissions you can change or revoke.
Sensitive fields redacted
Identity numbers such as SSN and ITIN are hidden from users who are not permitted to see them.
Audit trail
Changes to clients, filings and settings are logged so you can review who did what and when.
Secure sign-in
Password sign-in with optional Google sign-in, and rate limiting on login attempts.
How does the credential vault work?
Client portal logins are encrypted before they are stored. To view one, a team member unlocks the vault with a personal PIN. The vault then re-locks by itself after a timer, so a login is never left visible on an unattended screen.
How is one firm's data kept apart from another's?
Every record belongs to a firm, and the database enforces that boundary itself rather than relying only on the application. Sharing between firms is opt-in: you choose which clients to share, with which permissions, and you can revoke access at any time.
Who can see and change what?
Admin, preparer, viewer and client roles map to specific pages and actions. Client users only see their own filings. Important changes are written to an audit log per client and per filing.
Questions about security?
We're happy to walk through how data is stored and protected before you commit to anything. Get in touch.