Define the release decision
An accountant needs the year-end packet to prepare a return but does not need unrelated business records, personal correspondence or permanent access to the archive.
Verify the preparer and transfer only the required tax evidence through an approved, auditable route.
Run the control sequence
- 01Verify the preparer’s identity, engagement, requested records and authorized delivery channel.
- 02Create a minimized recipient packet instead of sharing the broad working archive.
- 03Send the encrypted packet and its credential through separate approved channels.
- 04Record manifest, sender, recipient, transfer time and acknowledgement without logging tax values.
- 05Revoke temporary access and reconcile local copies when the engagement ends.
Preserve enough evidence
Record the tax packet identifier, tax year, source device or system, export date, manifest, responsible custodian, authorized preparers, key location, encryption environment, recovery result, retention rule and next review date. Do not put passwords, recovery secrets or unnecessary taxpayer values in the decision record.
Keep the manifest, custodian, approved recipient, key-separation decision, restore result and retention owner together without copying taxpayer values into the record.
Keep surrounding controls visible
File encryption does not authorize the preparer, validate tax advice, confirm e-file acceptance or control copies created after decryption.
Tax preparation can create extra copies on tablets, laptops, removable media, synchronization folders and recipient devices. The archive owner must address those copies separately and verify the current software release before relying on product behavior.
Questions to ask
Should the archive password travel with the tax packet?
No. Send the archive and its credential through separate approved channels, and verify the preparer before release.
Does encryption make the tax packet accurate?
No. Encryption restricts file access; it does not validate amounts, deductions, classifications or filing eligibility.
Primary references
References support specific controls and do not imply endorsement.