Designed to help firms meet IRS Publication 4557, FTC Safeguards Rule, and GLBA requirements.
Your firm's data is private to your firm. Not even VaultLines staff can view your clients' documents.
AES-256 encryption at rest and TLS encryption in transit, provided by our cloud infrastructure provider.
Authenticator-app (TOTP) 2FA for firm staff, with prompts to enable it.
Owner, admin and staff roles for firms; clients only ever see their own household's files.
Choose which folders clients can see or upload to — internal workpapers stay internal.
Every view, upload, download, delete and signature is logged with who and when.
Every file keeps its prior versions, which you can restore at any time.
Files are stored privately and only served through short-lived signed links.
Sessions expire and tokens refresh automatically, so idle devices don't stay signed in forever.
Every firm gets its own private workspace. Database-level row security separates every firm's data from every other firm's — and staff only see the clients they're allowed to.
VaultLines is not yet independently certified. A SOC 2 Type II audit is on our roadmap. We don't claim certifications we don't hold — and you shouldn't trust a vendor that does.
Every paid preparer needs a Written Information Security Plan. Start with ours — fill in the blanks and print.
Get the WISP template