Data Protection
Tax returns, W-2s, bank statements, and Social Security numbers deserve the same care whether they're moving between a client and TPP, or sitting in storage.
TPP is designed to protect sensitive information during transmission and storage using appropriate security controls. Every connection to TPP — the staff dashboard, the client portal, and the mobile app — happens over HTTPS, the standard for protecting data in transit on the web.
For data at rest, encrypted, access-controlled storage for uploaded documents is part of TPP's infrastructure design and is being built out ahead of general production availability — see the status label on this page for exactly where that stands today.
Access to stored documents is always gated by an authenticated session and firm/client scoping — a document never has a public, unauthenticated link.
Interactive
Client Upload
A client selects a file in their portal — a W-2, a bank statement, a signed form.
What this covers
Current status
Every connection to TPP — staff dashboard, client portal, and mobile app — is made over HTTPS.
Encrypted, access-controlled storage for uploaded documents is part of the infrastructure design and is being built out ahead of general production availability.
Explore other security topics
Password, plus a second verification factor, equals meaningfully stronger protection against a stolen or guessed password alone.
Learn more →A solo preparer, a reviewer, a billing coordinator, and a client all need different views into the same firm — TPP's role model is built around that reality.
Learn more →Every upload, view, and status change tells part of the story of a client's engagement — and part of the story of who accessed their sensitive information.
Learn more →30-day free trial. Full access to every feature during your trial, subject to the applicable trial terms.