Privacy and security
Reviewed
990.tax is run by Digital Tax LLC, an IRS-authorized e-file provider. Returns go to the IRS through the IRS Modernized e-File system, and Form 199 to the California Franchise Tax Board.
Your sign-in
- Passwords are stored only as a one-way (bcrypt) hash. Nobody at 990.tax can read your password.
- Sign-in pauses after repeated wrong passwords.
- Password reset links expire after 60 minutes.
- Changing your password signs out your other browsers and devices.
- Before the first signature or payment, a 6-digit code confirms that your email address is yours.
Payments
Payments are taken by Stripe on its own secure page. 990.tax never sees or stores your card number.
Signatures
Forms 8453-TE and 8453-EO are signed in a Dropbox Sign window inside 990.tax; see Electronic signatures.
What becomes public
Exempt-organization returns are public by law. The IRS publishes e-Postcard information (including the principal officer’s name and address) and e-filed returns on its Tax Exempt Organization Search. Do not put information on a return that you would not want published, beyond what the form requires.
The full privacy policy is at 990.tax/privacy-policy.
Questions
Who sees our return?
990.tax sends it to the IRS (and Form 199 to the California FTB). Exempt-organization returns are public documents: the IRS publishes e-Postcards and e-filed returns, and anyone may ask the organization for a copy.