Stop chasing tax documents.

No — that's the point. Each client gets one secure link that works from any phone or computer. No password, no app to install. The link expires after 30 days and you can send a fresh one anytime.

Two different things, and it's worth being precise. Every document your client uploads is collected and organized for you — the checklist is built from 60+ IRS document types, so retirees, landlords, freelancers and S-corp owners all get the right forms. Separately, six of those forms are read field by field and come out as data you can export: W-2, 1099-NEC, 1099-INT, 1099-DIV, 1099-MISC and 1099-R. Every number carries a confidence score, and anything uncertain is highlighted for you to check. Six more — 1098, SSA-1099, 1099-G, 1098-E, 1098-T and 1095-A — are recognized and have their fields shown on screen, but aren't in the export yet. Everything else, K-1s and brokerage statements included, is collected and filed for you, not read. More forms move to automatic reading each season.

You're covered. The catalog spans 60+ IRS documents — K-1s, rental income, HSAs, student loans, foreign accounts and more are already in there. Anything rarer, you add in a tap, from the catalog or as free text, even after the link has gone out. And every new client is asked for last year's return, which lists almost everything to expect — so no form slips through.

VouchDoc is built around Drake: the export lays every figure out in the exact order of Drake's W-2 and 1099 data-entry screens, so you enter them straight down the screen instead of hunting across a document. To be precise about what that is — it's a file you enter from, not a one-click import into Drake. Drake has no open import for W-2 and 1099 fields from a third party; we're validating a direct path with real Drake preparers and we'll say so here plainly if it lands. If you're on Lacerte, UltraTax or ProSeries the verified figures are just as usable — the column order is the only Drake-specific part of it. Tell us which software you use when you sign up: it decides what we build next.

No — VouchDoc is built for 1040 work. The checklist covers everything an individual return needs, including the K-1s your client receives from a partnership or an S-corp, and the W-2 an S-corp owner takes from their own company. But a standalone business return — an 1120-S or a 1065 as its own filing — is out of scope, along with payroll, gift and estate returns. If most of your season is entity work, VouchDoc isn't the right fit yet.

You pay per client, per tax season (see pricing above) — it renews each season and you can cancel anytime. No per-user pricing, no contract: a 30-client practice pays for 30, not a 50-client bundle. Early members lock in launch pricing.

VouchDoc nudges them automatically on day 3, 7 and 14 — you pick the days and the wording, or turn reminders off per client. The dashboard always shows exactly who's stalled, so you only call the people who need it.

Under 30 minutes from signup to your first client link — most firms send it in the first five. No implementation calls, no training videos, no consultants.

Yes, and here is specifically how. Every upload travels over TLS and is encrypted at rest. Your account requires two-factor authentication — a code sent to your email, or an authenticator app. Each firm's data is isolated at the database level, so no other firm can reach your clients. Every meaningful action — a document uploaded, viewed, exported, an SSN revealed — is written to an audit trail you can read. The whole design is mapped to the FTC Safeguards Rule requirements that apply to you as a preparer.

No. Extraction runs on Microsoft Azure's prebuilt tax models. Microsoft does not use the data you send to those prebuilt models to train them, no human reviews your documents, and the analysis results are deleted within 24 hours. We train no models of our own, and we never sell or share your clients' data.

In the United States. Documents are stored in US-East, the application runs in US-East, and email goes out through a US provider. One exception we'd rather state than hide: during beta, extraction still points at a development resource hosted in Europe that has only ever seen synthetic test files — the US East production resource is in place before any real taxpayer document is extracted. The subprocessors we rely on — Supabase, Vercel, Microsoft Azure, Resend, Stripe — are each under a signed data processing agreement, and we publish the full list on our security page.

An SSN is never shown in full: you see XXX-XX-1234 unless you deliberately reveal it, and every reveal is decrypted server-side and logged with your name and the time. On top of the encryption covering the whole database, each SSN is encrypted individually with AES-256. SSNs never appear in our logs, error reports, analytics or emails. The only file that ever contains one in the clear is the export you download for Drake — that download link expires in 15 minutes, and the file is deleted from our storage after 7 days.

VouchDoc is document-collection infrastructure — like your tax software, your scanner or your cloud storage. It does not prepare the return and does not use your clients' information for any purpose of its own: it collects the documents, encrypts them, and hands them to you organized. On that basis it doesn't add a disclosure requirement, the same way storing a client's W-2 in a document portal doesn't. That said, §7216 is broad and readings differ: you remain responsible for your own obligations, so confirm your situation with your advisor or E&O carrier.

Yes — client document collection is one of the hardest lines to write in a Written Information Security Plan, and it's exactly the part VouchDoc makes easy. Here's a paragraph you can paste as is:

Client document collection (VouchDoc). Client tax documents are collected exclusively through VouchDoc, an encrypted client portal. Clients upload documents over TLS; files are encrypted at rest, Social Security Numbers are additionally encrypted at the field level, and access requires multi-factor authentication. No taxpayer documents or SSNs are exchanged over unencrypted email. Access is logged and data is retained only as long as needed and then securely purged.

Not yet — and we'd rather tell you than imply otherwise. The infrastructure underneath us is: our database and storage provider is SOC 2 Type II, as is Microsoft Azure. VouchDoc's own SOC 2 Type I is on the roadmap. What exists today is the architecture described above — mandatory two-factor authentication, encryption at rest and at the field level, per-firm isolation, full audit trail — plus cyber liability insurance in place before we open to paying firms.

As long as you need them, and no longer. By default, documents and extracted data are deleted 16 months after the end of the season they belong to; you can set anything between 3 and 36 months for your firm. Deletion runs automatically every night and is recorded in the audit trail. Exports are deleted after 7 days. If you close your account, you get a full ZIP of everything, then all of it is permanently deleted after a 30-day grace period.

Our security page, which is written for exactly that: what is encrypted and how, where data is processed, the full subprocessor list with their certifications, the retention and deletion schedule, our incident procedure, and the WISP paragraph above. It prints to a clean PDF you can attach. It also states plainly what we don't have yet. We won't claim anyone's approval on your behalf — we just make sure you have the facts to hand them.