Security & Privacy

Last updated: October 23, 2026

You trust us with bank statements, tax returns and deal financials. This page explains, in plain English, how Midwest CPA protects that information: how you send it to us, the security requirements our team follows, the systems we use and the commitments behind them.

For how this website handles visitor information, see our Privacy Policy.

1. How You Send Us Documents

Sensitive files go through a secure portal or your deal’s data room, not back and forth as email attachments.

1.1 Monthly accounting and tax clients

Monthly accounting and tax clients share documents through Double, our secure client portal. Upload documents to Double, and they’re in one place for you and our team instead of buried in an inbox.

1.2 Quality of earnings engagements

For quality of earnings engagements, we work in the data room your deal already runs on, whether that’s Box, Dropbox, Google Drive or another platform.

1.3 Why it matters

Fewer email attachments means less sensitive data sitting in inboxes, and less for you to track down when someone asks for a file again.

2. Our Team’s Security Requirements

Every team member works under the same safeguards, wherever they’re based.

2.1 Security requirements for every team member

Multi-factor authentication. Every team member signs in with multi-factor authentication, so a password alone isn’t enough.
Password manager. Every team member uses a password manager.
Company-managed laptop. Every team member works on a company-managed laptop.
Confidentiality agreement. All staff sign confidentiality agreements.

2.2 Where our team is based

Our team includes members based in the U.S. and abroad; everyone follows the same security requirements.

3. Systems We Use

We run the firm on a small set of established platforms:

QuickBooks Online (accounting): where we keep your books.
Gusto (payroll): payroll for monthly clients who add it.
Microsoft 365 (email and documents): our email and everyday documents.
Double (client portal): where monthly accounting and tax clients share documents with us.
Claude (AI assistant): used with model training on our data turned off. See Use of AI.
This website (midwest.cpa): served over HTTPS, hosted on Kinsta with Cloudflare. See Website Privacy.

4. Use of AI

We use Claude, an AI assistant made by Anthropic, with model training on our data turned off.

5. Confidentiality & Professional Obligations

5.1 Confidentiality agreements

All staff sign confidentiality agreements.

5.2 Professional standards

For CPAs, keeping client information confidential is a professional obligation under AICPA rules.

6. Our Written Security Plan (WISP)

We maintain a written information security plan (WISP), as the IRS requires for tax preparers.

7. Insurance & Incident History

7.1 Cyber liability insurance

We carry cyber liability insurance.

7.2 Incident history

We have never had a data breach.

8. Website Privacy

Our Privacy Policy explains what this website collects and how you can manage cookies.

We do not sell personal information.
This website is served over HTTPS and hosted on Kinsta with Cloudflare.

9. Frequently Asked Questions

How do I send you documents?

Monthly accounting and tax clients share documents through Double, our secure client portal. For quality of earnings engagements, we work in the data room your deal already runs on, such as Box, Dropbox or Google Drive, rather than email attachments.

Do you use offshore staff?

Yes. Our team includes members based in the U.S. and abroad; everyone follows the same security requirements. That means multi-factor authentication, a password manager, a company-managed laptop and a signed confidentiality agreement for every team member.

Do you use AI on my data?

We use Claude, an AI assistant made by Anthropic, with model training on our data turned off.

What happens if there’s a breach?

We have never had a data breach. We maintain a written information security plan (WISP), as the IRS requires for tax preparers, and we carry cyber liability insurance.

Is my financial information kept confidential?

Yes. Confidentiality is a professional obligation for CPAs under AICPA rules, and every member of our staff signs a confidentiality agreement.

Do you sell my information?

No. We do not sell personal information. Our Privacy Policy explains what this website collects and how you can manage cookies.

What software do you use?

QuickBooks Online, Gusto, Microsoft 365 and Double, our secure client portal. For AI, we use Claude with model training on our data turned off.

10. Contact Us

Questions about security? We’re happy to walk you through how we handle your information.

Email: chris@midwest.cpa
Online: Contact us
Talk it through: Book a free consultation

11. Changes to This Page

We may update this page as our practices change. When we do, we’ll update the “Last updated” date at the top of this page.