Tax Paperwork

Data flow

What leaves the browser in public preview

Public-preview form workflows are designed so return facts stay in the browser while the user tests a watermarked draft PDF. This page describes the current browser-local boundary.

Current preview boundary Tax Paperwork does not upload SSNs, TINs, addresses, gift facts, entity-election facts, generated PDFs, or project files to an application server for PDF creation.

Browser-Local PDF Generation

When a public-preview form generates a draft PDF, the browser downloads static app code and a blank IRS source PDF, runs validation and PDF assembly in the browser, and creates a local file download. The form answers are held in browser memory for that session unless the user downloads an encrypted project file.

Data Sent Over The Network

The current public preview should send only narrow operational data:

  • Static page assets, JavaScript, CSS, images, and blank PDF source files are downloaded from the site.
  • Optional account sign-in can send an email address and authentication tokens to the configured auth provider.
  • Payment and checkout are disabled during public preview.
  • Return-entry pages should not use analytics that capture taxpayer data, raw form answers, or raw search text.

Data Not Sent For Preview PDF Creation

Preview PDF creation is not a server-side rendering service. It should not transmit return payloads, SSNs/TINs, EINs, addresses, gift descriptions, donee facts, shareholder facts, entity-election facts, signed forms, generated PDFs, or project files.

Downloaded Files

Downloaded draft PDFs and project files are outside the site once saved to the user's device. Users should protect those files, avoid sharing them with support, and remember that browser downloads, cloud sync folders, and backups may retain copies.

How We Guard The Boundary

The codebase includes guardrails for local-only draft generation, generic download filenames, blocked sensitive backend payloads, privacy-safe analytics events, no session replay on return-entry pages, and static build checks for public-preview copy.

These checks reduce accidental drift, but they are not a substitute for legal review, independent security review, or a formal compliance program.

No IRS Submission

Public preview does not submit, transmit, fax, mail, upload, or track anything with the IRS. It creates watermarked local draft PDFs only. Users should not treat a draft preview as proof that the IRS received, accepted, or processed a filing.