Security & Confidentiality

Your data stays in your systems.

I work inside the software you already use, with a seat you create, at the access level you choose, and you can remove it at any time. Here is exactly how I handle your data, and what I commit to in writing.

  • Two-factor sign-in on every account
  • NDA on request
  • Work done personally
Your accounting software › Users & roles
  • YYouOwnerFull access
  • TYour teamAdminCompany settings
  • KSKeyur Shah, CPAInvited accountantAccountant access 2-step verification onNo shared passwordRemove access
Illustration of the users screen in your own software. You stay the owner.

Access

How I access your data, from first day to last.

  1. 1

    You invite me

    You add me as a user in your QuickBooks, Xero, tax software or portal. Your passwords are never shared with me.

  2. 2

    Only the access needed

    I ask for the lowest access level the work requires, such as accountant or read-only, wherever your software allows it.

  3. 3

    Files through a secure portal

    Documents move through a secure portal or a restricted cloud folder, not as plain email attachments.

  4. 4

    You remove access

    You can revoke my access at any time. When an engagement ends, I confirm with you that it has been removed.

Your data

Safeguards

How your information is protected.

Three layers of practical controls on every account and device I use for client work.

  1. Two-factor sign-in everywhere

    Multi-factor authentication is on for my email, accounting software, portals and password manager.

  2. A password manager

    Every account has its own unique password, stored in a password manager rather than written down or reused.

  3. No client files on personal devices

    Your files stay in your systems or a secure cloud. Nothing is kept on personal devices or USB drives unless you permit it.

For Accounting Firms

Your clients stay your clients.

When I work as an extension of your team, the relationship with your client remains entirely yours.

Your client
Your firmYour name and review
KSKeyur Shah, CPAExtension of your team
  • Under your name and reviewI work inside your systems and to your review standards; your team keeps final review and sign off.
  • No direct client contactI never contact your clients directly unless you ask me to.
  • Confidential by defaultYour client information is kept confidential, with your NDA signed before any data is shared.

Keyur Shah, CPA

Licensed by the Guam State Board of Accountancy

Confidentiality

My undertaking to every client.

  1. Non-disclosure

    I will sign your non-disclosure agreement before I receive any of your data.

  2. Work done personally

    Your work is done by me, and is never passed to anyone else without your written consent.

  3. Tax return information

    Tax return information is handled under the IRS confidentiality rules for return preparers, and is never used or disclosed without the consent those rules require.

  4. Professional ethics

    As a licensed CPA, I am bound by professional standards of confidentiality and integrity in all client work.

Keyur Shah

Certified Public Accountant

A warm city-view financial workspace with a laptop and a KS mug

Let’s Talk

Questions about how your data is handled?

Ask me anything about access, security or confidentiality before we start. I’m happy to walk you through it.

Schedule a CallView FAQs