Secure Client Portal | Erika Ramthun CPA

The security of your documents and online messages are of utmost importance. We use state-of-the-art processes and infrastructure to help ensure the security of your private information. As these controls are essential to our security posture, we refrain from describing all of them in detail on publicly available documents. We have developed this security overview to answer any open questions.

2FA - Two Factor Authentication
The IRS is requiring two-factor authentication (2FA) to enhance security and protect sensitive taxpayer information. With increasing instances of identity theft and cyberattacks, 2FA adds an extra layer of protection beyond just a password.
The client is required to verify their identity using a time-sensitive code sent via SMS or email. This adds a second layer of authentication beyond login credentials.
Before allowing signature on Form 8879, we confirm information that only the legitimate taxpayer would know, including:
- Prior-year AGI or refund amount
- Filing status
- Date of birth
- EIN or business info
- Secure onboarding data
This method meets IAL2’s requirement for verifying at least two independent identity attributes.
We use SSL Encryption
SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a client browser.
SSL allows private information such as tax returns, financial statements, and login credentials to be transmitted securely. Without SSL security, data sent between browsers and Web servers is sent in plain text, leaving you vulnerable to eavesdropping by third parties. If hackers are able to intercept all data being sent between a browser and a Web server they can see and use that information. That is why it is important not to send private documents or messages via unsecure email.
Strong Password Requirements and Brute Force Protection
The ClientHub requires strong passwords as a default. The most likely way a hacker gains access to your account is through a compromised password. Keeping your password secure and unique helps keep outsiders out. In addition, the ClientHub includes brute force protection by locking out users after three incorrect login attempts. This protects the ClientHub from a software attack with a random password attack.
Network environment updates and patches
Network software and firewalls are continuously updated to ensure the latest protection. This includes scheduled and hot patches to ensure network security.
Denial of Service Attacks
DoS or Distributed DoS (DDoS) attacks seek to bring systems or networks down by exhausting resources or exploiting vulnerabilities. These attacks tend to be sophisticated and complex. Our firewalls and load balancers provide a level of protection by analyzing network traffic; intrusion detection and prevention systems that can look for patterns in network traffic to detect and, in many cases, prevent an intrusion.
Detailed Audit Trails and Reporting
All verification and signature events are:
- Encrypted in transit and at rest
- Logged with IP address, timestamp, outcome, and session metadata
- Retained for at least three years in accordance with IRS audit guidelines
Back-ups and Uptime
Scheduled backups are part of the technology infrastructure. Load balancing and cloud server bandwidth ensure fast load times and data integrity.
The ClientHub security management model consists of four main stages: Plan, Do, Check, Act, as recommended by the ISO 27001 standard.

Secure ClientHub