SaveIf tax season means a hundred email attachments, three versions of the same bank statement and a client who swears they sent it, a client portal for accountants fixes most of that. This guide covers what a portal should do, the security rules it has to meet, and a four-week plan to get clients using it before January.
It names the main portals, then gives you one checklist to judge any of them. There’s also a short section written for your clients that you can send them.
What a client portal for accountants does
A client portal for accountants is a secure website where clients upload documents, see what you still need, sign forms and message the firm. It replaces email attachments with encrypted storage, sends automatic reminders for missing items, and keeps a record of who sent what and when.
The core jobs:
- Upload. Clients add documents from a computer or a phone camera.
- Document requests with reminders. You send a list of what’s needed, and the portal reminds the client until it’s done.
- Status view. Clients and staff see what’s received, what’s missing and what’s waiting for review.
- E-signature. Engagement letters, consent forms and returns signed in the same place.
- Secure messages. Questions about a document stay next to the document, not in someone’s inbox.
- Past documents on demand. Last year’s return is there when the client asks for it.
Email vs client portal
| Email attachments | Shared drive links | Client portal | |
|---|---|---|---|
| Security | Weak: files sit in inboxes indefinitely | Depends on how links are shared | Encrypted, behind a login |
| Tracking | None | Little | Shows what’s received and missing |
| Reminders | Manual | Manual | Automatic |
| Client effort | Low, but messy | Medium | Low once set up |
| Audit trail | Scattered | Partial | Full record of uploads and downloads |
Email is still fine for general messages and appointment details. Returns, identity documents and bank statements belong in a portal.
Security baseline your portal must meet
Check every item before you choose a portal, and ask the provider to confirm them in writing.
- Two-step verification for staff and for clients. The UK’s NCSC explains why two-step verification matters in plain terms you can share.
- Encryption in transit and at rest, so files are protected while uploading and while stored.
- Access roles, so staff only see the clients they work on.
- An audit log of who uploaded, viewed and downloaded each file.
- A known data location, and whether data leaves your country.
- Export on exit, so you can take every document with you if you change portal.
- A breach process: how the provider tells you, and how fast.
The rules behind the checklist:
- US. IRS Publication 4557 sets out how tax professionals should protect taxpayer data, and Publication 5708 is a template for the written information security plan tax preparers need. The FTC’s Safeguards Rule (16 CFR Part 314) applies to tax preparers, and the IRS collects related resources under protect your clients, protect yourself.
- UK. The ICO’s guide to data security explains what UK GDPR expects.
- Canada. PIPEDA covers how private-sector firms handle personal information.
- Australia. The OAIC’s notifiable data breaches scheme sets out when you must report a breach.
Features that matter (and ones you can skip)
| Feature | Must-have or nice-to-have | Why |
|---|---|---|
| Document request lists | Must-have | Tells each client exactly what to send |
| Automatic reminders | Must-have | Replaces chasing by hand |
| Mobile upload with the phone camera | Must-have | The main reason clients use a portal at all |
| E-signature | Must-have | Letters and consents in the same place |
| A checklist built from last year’s documents | Nice-to-have, big time saver | Returning clients get the right list without you rebuilding it |
| Secure links that don’t need a login | Nice-to-have | Helpful for one-off uploads and clients who won’t create an account |
| Your branding | Nice-to-have | Builds trust and reduces “is this a scam?” questions |
| Payments | Nice-to-have | Useful if you want invoices paid in the same place |
| Integrations with your tax and accounting software | Depends on your setup | Saves moving files by hand |
Client portals to compare
Checked on each vendor’s own site in October 2026. Prices change, so the table shows how each one charges.
| Portal | What it is | How it charges |
|---|---|---|
| TaxDome | Client portal built into a practice management platform | Per active client, billed yearly (from 150 clients, 20 seats included). Rechecked November 2026. |
| Canopy | Client portal inside practice management | Per user |
| SmartVault | Document storage with a branded client portal | Per user, two-user minimum |
| Liscio | Client messaging, files and requests in one app | Per user |
| ShareFile (part of Progress) | Secure file sharing with e-signatures | Tiered plans |
| Content Snare | Document and information collection with automatic reminders | Flat monthly plans |
| Suralink | Request-to-review portal for tax and audit work | Quote |
If you already use practice management software, check its built-in portal first: one login is easier for clients than two. Tools that stop at intake, rather than the whole portal, are compared in the client onboarding software guide.
Questions to ask a portal provider
Ask each provider the same questions before you choose:
- Is two-step verification available for clients, not only staff, and can you make it compulsory?
- Where is client data stored, and does any of it leave your country?
- What happens to your data if you leave? You want a full export of every document, in folders by client, at no extra cost.
- How are you charged? Per user, per client or a flat fee, and what happens to the price when your client list grows.
- Can clients upload without installing an app? A browser upload with the phone camera is enough for most clients.
- How do reminders work? Can you set the timing, the wording and when they stop?
- Can you test it with real clients first? A trial that covers your pilot weeks is ideal.
- What support do clients get? Clients will ask you, not the provider, so check how fast the provider answers you.
- How do they tell you about a security incident, and how quickly?
Write the answers into one table and compare them alongside the security baseline above.
How to get clients to actually use it
A portal only works if clients use it. What works:
- Put it in the engagement letter. Say that documents are received through the portal. The engagement letter template has a line for it.
- Send a one-page welcome email. What the portal is, why you’re using it, how to log in, and who to call for help.
- Offer a five-minute phone walkthrough for clients who are less comfortable with technology. One call saves a season of emailed photos.
- Set a date after which you only take documents through the portal. Tell clients a month ahead, then stick to it.
- Let the reminders do the chasing. If a client still owes something, the portal reminds them, not your team. For the wider system, see how to stop chasing clients for documents.
Rollout plan before tax season
For the US, UK and Canada, start in November or December. For an Australian 30 June year-end, start in May.
- Week 1: set up and test. Add your branding, build the document request lists for each client type, set reminder timing, and test every step with the team.
- Week 2: pilot with ten friendly clients. Pick a mix: tech-comfortable, not so comfortable, a business and an individual. Fix whatever confuses them.
- Week 3: invite everyone. Send the welcome email with a clear date for the switch.
- Week 4: switch off email intake for documents. Reply to emailed documents with a short, polite note and the portal link.
The free document request checklist gives you a starting list of what to request from each client.
How to send tax documents to your accountant safely (for clients)
Firms: you can share this section with your clients.
- Use your accountant’s portal or secure upload link. It’s the safest way to send documents.
- Don’t email photos of identity documents or full tax returns unless your accountant has asked for it and the email is encrypted.
- Check the link came from your firm. If an upload request looks unusual, phone the firm using the number you already have before you click.
- Turn on two-step verification for your portal login.
- Ask if you’re not sure. A two-minute phone call is better than a document sent to the wrong place.
Alternatives to a dedicated portal
| Option | Best for | Effort | Main drawback |
|---|---|---|---|
| File-request links from a business cloud drive | Very small firms | Low | No document lists or reminders |
| Encrypted email | Occasional sensitive files | Low | Clients find it awkward, and there’s no tracking |
| Portal module inside practice management software | Firms already using one system | Low once set up | Tied to that system |
| Standalone client portal | Firms that want the best client experience | Medium | Another subscription to manage |
| Spreadsheet tracker plus secure links | Firms not ready for a portal | Medium | Tracking is manual |
| AI assistant on top of any of these | Reminders and status updates | Low | It doesn’t store documents itself |
The spreadsheet route is what the free client onboarding and document tracker is built for. The last row is how NeatlyReady works: Grok Bot runs the reminders and reports what has arrived, whatever tool holds the documents. If you’re comparing full systems, see the practice management software buyer’s guide, and for the busy months as a whole, the tax season checklist for accounting firms.
A client portal pays off in its first tax season if clients use it. Check the security baseline, start with a small pilot, and give clients a clear date to switch, and the inbox full of attachments becomes one list of what’s still missing.
Questions
What is the safest way to send tax documents to an accountant?
Upload them through your accountant’s client portal or a secure upload link they send you. Avoid emailing unencrypted copies of identity documents, full returns or bank statements, check that any link really came from your firm, and turn on two-step verification for the portal login.
How do I securely send tax documents via email?
If your firm has no portal, use encrypted email or a password-protected file and share the password a different way, such as by phone. Email is fine for general questions, but documents with identity or financial details belong in a portal.
How do I set up a client portal for my firm?
Choose a portal that meets the security baseline, set it up with your branding and document request lists, test it with your team and about ten friendly clients, then invite everyone with a welcome email and stop accepting documents by email from a set date.
Do accountants need a client portal?
Not every firm does, but most firms that handle tax returns, identity documents and bank statements benefit from one. It is more secure than email, tracks what each client still owes, and sends reminders so the team stops chasing by hand.
Is a client portal more secure than email?
Usually, yes. A good portal encrypts files, requires a login with two-step verification, controls who can see each document and keeps a record of every upload and download. Ordinary email attachments do none of these reliably.
What security does a client portal for accountants need?
At minimum: two-step verification for staff and clients, encryption in transit and at rest, access roles, an audit log, a known data location, a way to export your data if you leave, and a clear process if there is a breach.
Can clients upload documents from their phone?
Most portals let clients take a photo of a document or upload a file from their phone, which is one of the main reasons clients actually use them. Check that the mobile upload is simple before you choose.
This guide covers running the practice, not tax law. Rules differ by country and change often, so check anything technical with your local tax authority or professional body.
