For chartered accountants · India
Collect ITR documents without the plaintext scramble
One branded, encrypted form for PAN, Form 16, bank statements, and investment proofs — sent as a single link, returned in a form only your practice can decrypt.
Rao & Mehta, Chartered Accountants
ITR filing — client document upload
Full name (as per PAN)
PAN
encryptedPermanent Account Number
Assessment year
Form 16 / salary certificate
encryptedUpload
Bank account statements
encryptedUpload — all accounts
Investment & 80C proofs
encryptedUpload
Capital gains statements
encryptedUpload, if applicable
Aadhaar number
encryptedFor e-verification
Fields marked are encrypted in the browser before this form is sent.
The problem this solves
ITR season compresses hundreds of clients into a few weeks, each sending PAN, Form 16, capital-gains statements, and investment proofs by whatever channel is easiest. The easy channels are also the leakiest.
That bundle is exactly the kind of financial personal data the DPDP Act expects a CA practice to safeguard, and a full inbox of it is a standing liability.
Why the encryption matters here
Each upload is encrypted client-side with RSA-3072 and AES-256 before transmission. VerifID stores ciphertext it cannot read; your practice holds the only key.
A stolen laptop, a compromised email account, or a breach at the platform yields nothing but unreadable blobs — not a client’s PAN, Aadhaar, and bank history.
DPDP Act: How zero-knowledge encryption satisfies the DPDP Act’s security and erasure requirements. Read more →
How it works
- 1
Set up once
Brand the form, add the fields your ITR workflow needs, and save your private key securely.
- 2
Share with every client
One link covers all of them. Clients upload directly, no signup.
- 3
Open and file
Decrypt submissions with your key. Documents arrive organised and were never readable in transit.
Frequently asked questions
Can one form handle Aadhaar, PAN, and bank statements together? ▾
Yes. Every field — text or file upload — is encrypted with the same client-side scheme, so a single form can carry identity numbers and document uploads without any of it being readable by the platform.
Is this different from a Google Form with file upload? ▾
Yes. A Google Form stores responses and uploaded files in plaintext in your Google account, readable by Google’s systems and anyone with Drive access. Here the files are encrypted before upload and only you hold the key.
How do I delete a client’s documents after filing? ▾
Delete the encrypted submission. Because only your practice holds the decryption key, destroying that key also makes any residual copies permanently unreadable — which makes erasure straightforward to honour.
Do my clients need to install anything? ▾
No. The form runs in any modern browser. The encryption happens in the page itself before data is sent.
Build this form for your organisation
Start on the free plan, add your branding, and publish an encrypted version in minutes.