For chartered accountants · India
A secure GST filing form your clients actually trust
Stop chasing GST documents across WhatsApp, email, and Google Drive. Send one branded, encrypted link and get every invoice, GSTIN, and bank detail back in a form only your practice can open.
Rao & Mehta, Chartered Accountants
GST filing — monthly document upload
Legal name of business
GSTIN
encrypted15-character GST identification number
Filing period
e.g. April 2026
Sales invoices
encryptedUpload — PDF or ZIP
Purchase invoices
encryptedUpload — PDF or ZIP
Bank statement for the period
encryptedUpload
Input tax credit notes
Authorised signatory consent
I authorise Rao & Mehta to file on my behalf
Fields marked are encrypted in the browser before this form is sent.
The problem this solves
Monthly and quarterly GST filing means collecting the same sensitive bundle from every client: GSTIN, sales and purchase invoices, bank statements, and reconciliation notes. Most practices gather it over WhatsApp and personal email, where it sits in plaintext on servers and devices no one controls.
Under the DPDP Act, a CA firm handling that data is a Data Fiduciary with a duty to apply reasonable security safeguards. A shared inbox is not one.
Why the encryption matters here
Every response on this form is encrypted in the client’s browser with RSA-3072 and AES-256 before it is sent. The decryption key is generated on the client side and never reaches VerifID’s servers, so no one at VerifID — or anyone who breached VerifID — can read a single invoice.
Only your practice holds the key. That is what makes the "reasonable security safeguards" duty structural rather than a line in an engagement letter.
DPDP Act: See how the architecture maps to India’s DPDP Act 2023 obligations for Data Fiduciaries. Read more →
How it works
- 1
Brand the form
Upload your firm logo; the form picks up your colours automatically. Add the fields your GST workflow needs.
- 2
Send one link
Share the form link with every GST client. No account needed for them to submit.
- 3
Decrypt in your practice
Paste your saved private key to open the submissions. Documents are ready to file, and nothing was readable in transit.
Frequently asked questions
Is a WhatsApp or email document collection compliant under the DPDP Act? ▾
The DPDP Act requires Data Fiduciaries to protect personal data with reasonable security safeguards. Consumer messaging and email store data in plaintext on infrastructure you do not control and offer no verifiable deletion, which makes them a weak basis for that duty. An encrypted, access-controlled form is a stronger position.
Do clients need a VerifID account to upload their GST documents? ▾
No. Anyone with the form link can submit. Only your practice needs an account, and only your practice can decrypt what comes back.
Can I reuse the same form every filing period? ▾
Yes. Publish one GST document-collection form, add a "filing period" field, and send the same link each month or quarter.
What happens if I lose the private key? ▾
Because of the zero-knowledge design, a lost key cannot be recovered — that is the same property that keeps the data safe from VerifID. Store it in a password manager the moment you create the form.
Build this form for your organisation
Start on the free plan, add your branding, and publish an encrypted version in minutes.