Secure portals for accountants exist to solve a problem every practice recognises and few have actually fixed: a client's financial records have to get from them to you and back again, and email is a bad way to do it. The attachments are too big, the thread forks across three people, and six weeks later nobody can say which version of the bank summary the accounts were built from. A portal is not a security product bolted onto that mess. It replaces the mess with a single place where every arrival has a date, a sender and a client record it belongs to. The IRS is explicit that tax professionals are responsible for safeguarding the taxpayer data they hold, and a portal is the most ordinary way a small practice discharges that. This guide is the four jobs a portal must do, in the order they matter to a practice of one to twenty people, and how to tell a real one from a file-drop with a login on it.
One: every arrival gets a date and a sender
The single most valuable thing a portal produces is not encryption, it is the timestamp. When a client says they sent the corrected payroll file in February, the record either shows it or it does not, and neither of you has to reconstruct an inbox to find out. A portal that accepts uploads but does not attribute them to a person and a moment has skipped the job that pays for itself.
Two: the file lands on a client, not in a mailbox
Documents that arrive into one person's inbox are hostage to that person being at work. A portal should file the upload against the client and the engagement it belongs to, so anyone in the practice can find it and nothing important depends on who was covering that week. This is the difference between a portal and a shared drive with a password: the drive stores files, the portal stores records.
Three: the client can see what is still outstanding
Most of the chasing a practice does in January is a symptom of the client not knowing what is left. A portal that shows a request list, with items marked outstanding or received, does more collecting than three reminder emails and does it without anyone writing them. If a portal only accepts files and never asks for them, half the value is missing.
Four: finished work goes back the same way
Accounts, returns and letters sent as attachments create a second copy that immediately starts drifting from yours. Sending them through the portal means there is one document with one date, and you can see whether it was opened. That last part matters more than it sounds when a client later says they never received the return.
Questions people ask about secure portals for accountants
Is a secure portal a legal requirement for an accounting practice?
Not as a named product. What is required is that you safeguard the client data you hold, and the IRS sets out that duty for tax professionals in Publication 4557. A portal is the ordinary way a small practice meets it, but the obligation is on you and not on the software, so check what your own regulator and your professional body require rather than assuming a purchase settles it.
Do clients have to pay or install anything?
They should not. A portal a client has to buy or install will not be used, and an unused portal pushes everything back to email. Tickmarko's portal is included in the $79 a month practice price, clients are not counted or charged, and they need nothing but a browser and an email address.
What is the difference between a portal and secure file sharing?
Direction and memory. File sharing moves a document from one place to another; a portal is a standing place the client returns to, with their request list, their history and everything you have sent them. Most practices need the portal and get told they need file sharing.