Security and your clients' data
- Data is stored in the United States, in a separate area for each firm, encrypted in transit.
- Tax return information is used only to do the engagement it was uploaded for. It's never used to train AI models, to compile statistics, or to market to anyone.
- Lunar Papers acts as your service provider under Treas. Reg. §301.7216-2(d), so no separate client consent is needed.
- Retention: uploaded documents, organized copies and working files are deleted automatically after your firm's retention window (set in Firm settings; 30 days by default). Workbooks, comparison reports and sent-email logs stay.
- Sign-in sessions last 14 days. Google and Microsoft sign-in carry your own multi-factor protection.
- Our support staff look inside an account only to help with something you've asked about, and every look is logged.
The full details are on the Security page.
More guides: Getting started · Get clients from the Find a CPA directory · What to upload · Working the open items · Print the tax file (for preparers who work on paper) · The client email (PBC list)