How we protect your information
Your SIN and tax documents are some of the most sensitive information you have. Here's exactly how we keep them safe.
- Storage
- Private and encrypted
- Sign-in
- One-time code every time
- Access
- Logged, every time
Questions about privacy?
Message us any time, or call. We're happy to explain how your information is handled.
How your documents are protected
- Files are kept in private storage, never behind a public link.
- Links to open a file last 5 minutes and work only after we check you're allowed to see it.
- Your SIN is encrypted. We only ever show the last three digits.
- Each sign-in needs your password and a one-time code we email you.
- You're signed out automatically after 30 minutes of inactivity, and you can sign out of all devices.
- Every view, download, upload and signature is recorded in an access log that can't be edited.
- Spouses and partners can't see each other's documents unless each person chooses to share.
Where your information is stored
Your information is stored and processed with reputable service providers bound by confidentiality and security obligations. Some processing may take place outside Canada. Our privacy policy lists the providers we use.
How long we keep it
We keep records for seven years, which covers CRA's requirements, then review them for secure deletion. You can download a complete copy of your file from your portal at any time.
Protect yourself from scams
- We never ask for your CRA or online banking passwords.
- We will never ask you to pay your taxes to us. Tax payments go to CRA.
- We will never change our payment details by email.
- Every official request from us comes through your portal.
Got a message that seems off? Don't click any links. Sign in to your portal directly or call us at 1 (800) 587-9722.