Security and data
Your clients' data
Account will hold tax records and client data, so it says what is protected today and promises no more.
01
Your clients' data
Account will hold tax records and client data. Where that data is held is stated below and in the sub-processor register; its retention and deletion commitments will be published before it takes any customer data.
This page will link to those terms when they are published.
Data commitments
- Where the data is heldIn the UK (London), as listed in the sub-processor register
- How long it is keptTo be published
- How it is deletedTo be published
02
How Account is protected
- Two-step sign-in
- Required for everyone in the practice. Clients sign in to the portal separately.
- Password again before a return is sealed
- If you have not confirmed your password recently, Account asks for it before the seal.
- Roles
- Each person sees and does only what their role allows.
- Practice-level separation
- Each practice's records are kept apart from every other practice's.
- A separate client login
- Clients sign in to the portal with a login that is separate from the practice's, and see only their own records.
- An audit trail
- An append-only record of who did what and when, chained so that any later change to it shows. Review points and sign-off are kept the same way.
- Export and erasure
- Personal data can be exported or erased on request, as UK data protection law requires.
03
Judgement stays with the professional
A return is prepared by one person and reviewed by another, and the client signs the declaration. Account does not file to HMRC today.
04
Where Account stands
Early access by invitation. Tell us about your practice and we will be in touch.