Last updated Oct 9, 2026 (originally published May 31, 2025)
The best secure accountant portal or encrypted email tool for a tax practice is the one that meets the encryption, access and logging requirements of the FTC Safeguards Rule, the federal rule that covers paid tax preparers, and that clients will actually use. This guide compares PreVeil with three widely used client portals, TaxDome, SmartVault and ShareFile, using what each vendor states on its own public pages. The biggest difference between them is who can decrypt your clients’ files.
What should a tax preparer look for in a secure client portal or encrypted email?
A tax practice should look for four things: encryption of client data in transit and at rest (16 CFR 314.4(c)(3)), access controls and activity logs (314.4(c)(1), (c)(8)), a client experience clients will actually use, and clarity on who holds the encryption keys. The last point shapes service provider oversight under 314.4(f).
IRS Publication 4557 tells preparers to “encrypt all sensitive files/emails,” and Publication 5708 says PII will not be emailed in plain text “unless encryption or password protection is present.” Every paid preparer acknowledges the underlying requirement for a written information security plan (WISP) on Form W-12 line 11 when renewing a preparer tax identification number (PTIN), and IRS Publication 1345 states that “protecting taxpayer data is required by law” for e-file providers.
How do the leading options compare?
The portals differ from PreVeil most on who can read client data. TaxDome states that it controls the keys, and SmartVault and ShareFile describe staff access to customer data once the customer grants permission. With PreVeil, the keys stay on users’ devices, so PreVeil cannot decrypt client files. Prices are left out.
✓ the vendor’s own page confirms it · ◐ partly · ✗ the vendor’s own page shows otherwise · – not stated on the pages reviewed (October 2026)
Is a client portal more secure than encrypted email?
A client portal is not more secure than encrypted email by default. A portal keeps files off email servers, which helps, but the portal vendor typically holds the keys that decrypt what it stores. Encrypted email keeps the exchange in the inbox the firm already uses. For both, the security question is who, other than the firm and the client, can read the data.
Portal vendors argue that email is unsafe, and plain email is. The fix is encryption that holds inside the mailbox as well as in transit. With PreVeil, message contents and attachments stay encrypted in the inbox and on the server, and client replies stay encrypted too. That answers the most common portal objection, which is a client replying to an encrypted message in plain text.
Which option works for a solo tax preparer?
Solo preparers need a product sold for one person that still gives them encryption, activity logs and a client experience their clients will accept. PreVeil sells its Business plan as a single license, and TaxDome offers its Essentials plan for solo practices. SmartVault and ShareFile plans start at two and three users.
A solo preparer’s WISP still has to cover the Safeguards Rule. A firm that maintains customer information on fewer than 5,000 consumers is exempt under 16 CFR 314.6 from four requirements: a written risk assessment, continuous monitoring or annual penetration testing, a written incident response plan, and an annual report to a board. It still has to designate a Qualified Individual, encrypt customer information, use multi-factor authentication, control and log access, train staff, oversee service providers and notify the FTC of a notification event involving 500 or more consumers. For how a one-person plan comes together, see the guide to IRS Publication 4557, the WISP and e-file status listed under Related reading.
Can PreVeil read client tax documents?
No. PreVeil cannot access or decrypt customer data, because the encryption keys stay on users’ devices. Message contents, attachments and files are encrypted on the user’s device, so client tax documents reach PreVeil’s servers already encrypted. PreVeil’s cryptographic module holds FIPS 140-3 validation (CMVP certificate #5145), and PreVeil has a SOC 2 Type 2 report.
That design bears on two Safeguards Rule elements. Under 314.4(f), a provider that cannot read client data has less client data it can expose. Under 314.2(m), customer information counts as unencrypted “if the encryption key was accessed by an unauthorized person,” and PreVeil’s servers do not hold those keys.
How does PreVeil fit a tax practice’s day-to-day work?
PreVeil Mail works inside Outlook, Gmail and Apple Mail, and PreVeil Drive syncs encrypted folders to Windows Explorer and Mac Finder, with mobile apps for iOS and Android. Staff keep the inbox they already use, and clients read and reply for free from their browser.
On the Business plan, Trusted Community and approval-group protections limit who can reach client data, and the admin console and activity logs support the firm’s access and logging controls. Deployment is set up the firm’s way, with assistance or self-run.
For each Safeguards Rule requirement by section, see the FTC Safeguards Rule for tax and accounting firms, section by section.
Frequently asked questions about accountant portals
What is the best client portal for accountants?
The best client portal for accountants depends on the firm’s workflow. Practice management suites such as TaxDome and document management tools such as SmartVault bundle a portal with other features. Firms that want to keep client exchange in email use encrypted email such as PreVeil. On security, the deciding question is who can decrypt the data.
Does the FTC Safeguards Rule require a client portal?
No. 16 CFR 314.4(c)(3) requires encryption of customer information in transit over external networks and at rest. A portal and encrypted email can both meet that requirement; the firm documents its choice in its WISP.
Is Microsoft 365 encryption enough for a tax practice?
Microsoft Purview Message Encryption is included in several Microsoft 365 plans and uses Microsoft-managed keys by default, with a bring-your-own-key option. Whether it is enough is the firm’s determination under its WISP. For email specifically, see whether Outlook or Gmail encryption is enough for the FTC Safeguards Rule.
Do clients need to pay to receive encrypted email from PreVeil?
No. Clients who receive encrypted email from PreVeil read and reply for free from their browser, and their replies stay encrypted.
Can a solo preparer use PreVeil?
Yes. PreVeil offers the Business plan with a single license, so a solo practice does not need to buy seats for staff it does not have.
See how PreVeil fits your WISP
Whichever tool a firm chooses, its WISP has to describe it. A demo shows PreVeil working inside Outlook or Gmail and where it fits the Safeguards Rule.
