TaxFolder gives you and your clients peace of mind by ensuring your clients’ confidential information is secure and protected. Whether requesting signatures and uploading documents from TaxCycle desktop software or accessing your client information through a browser, your client data is protected using industry-standard security and encryption methods.
Uploaded documents are encrypted using 256-bit AES encryption.
TaxFolder uses SSL encryption to protect any data sent to or from your clients over the internet. These are the same transfer encryption protocols required by the Canada Revenue Agency (CRA) when filing returns from TaxCycle desktop software.
Web browsers handle this encryption automatically for you when accessing a website through "https." When your communication is encrypted in transit, most web browsers will show you a visible "lock" of some sort to reassure you that this is happening.
TaxCycle Accounts for signing into TaxFolder include an extra layer of protection for you and your clients via two-factor authentication. Once enabled, you can choose to sign in with an authenticator app or request a verification code via text message.
Creating an account when signing a document is optional for your clients. Regardless, their documents are still protected by two-factor authentication and optional additional knowledge-based authentication questions. They must verify their identity before they can view, sign or retrieve a copy of their signed document.
Client documents are never attached to emails, and links in emails always require this verification step.
Administrators of your TaxFolder account can control the level of access of employees in your firm. You can designate specific individuals to see all client records or limit them only to the engagements assigned to them.
Each signed document includes a certificate that provides evidence of the date, time and IP address of when and where the document was signed.
Workflow and tracking features in TaxFolder and TaxCycle log the date and time when signatures were requested, signed and downloaded.
We monitor TaxFolder operations and security. Intrusion attempts are logged, and our operations team is alerted immediately if an issue is discovered.
We regularly perform vulnerability scans and conduct security reviews of TaxFolder. If those tasks uncover any weaknesses, we remedy them in a timeframe based on their severity and risk.
We also periodically engage external security experts to perform security audits of TaxFolder.
Your client information stays confidential, including from staff at TaxCycle. Client documents and data are private and access from our staff is restricted to designated staff strictly for the purpose of development and maintenance of TaxFolder.
The TaxCycle and TaxFolder teams at Trilogy Software are committed to staying up to date on industry trends and CRA security requirements. We work to continuously improve the security that protects your data.