Skip to content

Your Privacy and Security

Safeguarding Your Data During Upload and Download

We use Citrix ShareFile to manage your Secure Tax Folder for exchanging and storing your sensitive documents. As experts in tax law, we rely on this globally trusted product to maintain high data security standards.


Client-side encryption

Encryption is a technique used to secure data during transmission or storage by converting it into a format that requires authorization for access. This transformation employs an algorithm to produce a decryption key essential for unlocking the data.

Secure uploads and downloads

Files are transferred between the end user and storage tier via a Secure Socket Layer (SSL) or Transport Layer Security (TLS) encrypted connection, employing robust encryption. ShareFile supports TLS 1.0, 1.1, and 1.2, which are the identical encryption protocols and algorithms utilized by e-commerce services and online banking.

Secure user access

A unique username and password are assigned to each user on an account for logging in. Passwords are hashed to ensure that ShareFile employees cannot access them. After five consecutive incorrect password attempts, the system locks the user account for five minutes before allowing another login attempt.

Servers and storage

ShareFile accounts are hosted on servers operated by Amazon Web Services across several global sites. Account data is usually stored at the server location nearest to the administrator’s geographic location.


Network and connections used by ShareFile

ShareFile divides application traffic from file uploads and downloads. ShareFile client applications need access to both the SaaS application and their account’s storage location. The SaaS application, hosted by Citrix, is accessed via a customer-specific URL such as or User account settings, business logic, and file metadata are controlled by the SaaS application, while actual files are not stored within the SaaS application tier.

ShareFile authentication

Accessing the Citrix ShareFile web application requires entering your email address and password on the account landing page. If your session remains inactive for a set period, you will need to log in again. ShareFile Enterprise clients can choose to integrate with Active Directory to manage this login process.


Data Storage

Working with your data. When our EAs, CPAs and their support teams are working with your confidential information all the work that is conducted is done within the industry leading security software.

Secure log in

Admins have the authority to manage permissions and define user access to features and files. Secure user logins, audit trails, and storage mechanisms are utilized to protect practice and client information.

Military grade encryption

To ensure peace of mind, CCH employs the strongest available 256-bit Advanced Encryption Standard, comparable to military-grade encryption. Additionally, we implement security protocols similar to those used by internet banks, indicated by the secure https website address and familiar closed padlock icon.

Document locking

Viewing checked-out documents is possible, but editing is restricted to prevent conflicting changes.


E-filing to the IRS

When your tax return is prepared for filing, it is securely transported between CCH and the IRS, with the connection fully encrypted from start to finish.

We’re PCI compliant, so your payments and data are safe.