Document management for accounting firms
Collect client documents without chasing them by email. One permissioned place to request, receive, store and share everything an engagement needs.
Accounting firms handle more sensitive documents than almost any other professional service: prior-year returns, W-2s and 1099s, bank and brokerage statements, identity records, entity documents, signed authorisations. Most of it still arrives as email attachments, which means it lives in inboxes, sent folders and backups that nobody is auditing. Document management software for accounting firms replaces that with permissioned access per client, tracked requests, encryption in transit and at rest, and an in-product activity log. SafeVault is built by AmitaSoft, LLC, which completed a SOC 2 Type 2 examination covering Security, Availability, Processing Integrity and Confidentiality.
The document problem is a process problem
Every firm has a version of the same conversation in March. Someone asks the client for a missing statement. The client says they already sent it. Both are right: it was sent, to a different person, in a thread from six weeks ago, attached to an email about something else.
The cost is not the search. It is that nobody can see the state of the work. A preparer does not know what is outstanding without opening their inbox. A reviewer does not know whether the file is complete. A partner cannot see which engagements are stuck without asking. And the client, who has done everything asked of them, has no way to know that.
Software does not fix that by storing files better. It fixes it by making the request itself the unit of work, with a status attached.
Secure file sharing for accountants, without the email thread
Use a secure client portal to keep every request, document and permission attached to the engagement.
- Tracked document requests
- Ask a client for what you need as a request with a status, not an email. See what has arrived, what is outstanding, and how long it has been waiting, without opening a mailbox.
- A client portal per engagement
- Each client sees only their own documents. Access is granted to named people and revoked when the work closes. Nothing is shared by link to whoever happens to have it.
- Encrypted storage and transfer
- Documents are encrypted in transit using TLS and at rest using AES-256, applied to both stored databases and stored documents.
- Automatic classification
- Uploaded documents are classified and key fields extracted, so a client's upload arrives sorted rather than as eleven files named scan_001 through scan_011.
- Activity log
- Uploads, shares and changes to a document are recorded and visible in the product.
- Role-based access for your team
- Add and remove team members, and share individual documents with named people. Multi-factor authentication is required for access to critical systems.
What your clients see
Clients get a list of what you have asked for and a place to upload it. No software to install, no shared drive to navigate, no attachment size limits.
Because the request carries a status, the client can see what they have completed and what is still outstanding without emailing to ask. Most of the follow-up traffic in a busy season is clients seeking reassurance rather than clients being slow. Showing them the state of the work removes it.
Security and independent examination
AmitaSoft, LLC completed a SOC 2 Type 2 examination of the platform behind SafeVault, performed by an independent licensed CPA firm, covering Security, Availability, Processing Integrity and Confidentiality across an observation period from 15 May to 28 August 2026.
A Type 2 report examines whether controls were suitably designed and whether they operated effectively across the period, rather than at a single point in time. The full report is available to prospective and existing clients under a non-disclosure agreement.
Access runs through role-based permissions with multi-factor authentication on critical systems. Documents are encrypted in transit and at rest. For firms carrying their own security obligations to clients, the detail matters, so it is set out in full.
TaxFlo
Firms doing tax preparation work can use TaxFlo, a dedicated tax workflow delivered through the same provider workspace. It handles client engagements, tax profiles, document requests and guided questionnaires, with billing built in.
Getting started
1. Apply
Submit your firm onboarding request through the application form.
2. Review and approval
Our team reviews your credentials and verifies your firm details.
3. Set your password
Receive a secure email invitation to create your provider account password.
4. Start managing clients
Log in to your provider dashboard and begin managing client engagements.
Already approved? Use Provider Login to access your dashboard.
Questions
How is this different from a shared drive or Dropbox?
A shared drive stores files. This governs them. The difference is permissioned access per client, requests with a status, revocable sharing and an in-product activity log, none of which a folder provides.
Do clients need to install anything?
No. Clients upload through a browser using the permissioned access you grant them.
Can I control which staff see which clients?
SafeVault uses fixed owner and staff roles. Individual documents are shared with named people rather than by link.
What happens to documents after an engagement closes?
Access permissions can be revoked independently of storage, so a closed engagement does not mean deleted records.
Is the platform independently examined?
AmitaSoft, LLC completed a SOC 2 Type 2 examination covering Security, Availability, Processing Integrity and Confidentiality. The report is available under a non-disclosure agreement.
Can it handle protected health information?
No. SafeVault is not HIPAA compliant and does not offer a Business Associate Agreement. Do not use it to store protected health information.