Privacy, Security and Performance

SurePrep has developed information security policies and procedures that adhere to the high standards of regulatory requirements such as Gramm-Leach-Bliley, Payment Card Industry and Massachusetts 201 CMR 17.00.

SurePrep's production servers are managed by SurePrep staff and hosted by IBM at data centers in Dallas, Seattle and Washington D.C. Our servers and firewalls are monitored on a 24/7 basis. Performance reports are generated to assure maximum operational availability. Citrix NetScaler load balancing is in place to achieve the best possible system performance. Through monthly patch management we are constantly updating our security software to protect against unauthorized access to our network systems. Daily back-ups are performed and stored in alternate facilities within the IBM data-center network.


SurePrep's products are web-based applications built on the Microsoft .NET Framework. Access is restricted to registered users who log in by way of a username/password combination verified on the server side. User passwords are encrypted and a log is maintained of all users that access the system. User authentication can be further limited to client-specified IP ranges. Communications use industry-standard 4096-bit Secure Socket Layer encryption for all data transfers, the same encryption technology used by banks for securing online banking transactions.


SurePrep's production servers are  managed by SurePrep staff and hosted by IBM at data centers in Dallas, Seattle and Washington D.C. IBM data centers are SAS-70 Type II and SSAE 16 certified.

SurePrep's software has been audited, tested and validated by C-Level Security, LLC. The application was found to enforce security controls to support a secure processing solution. C-Level Security is an independent security focused consulting firm employing leaders in the industry. C-Level Security certifications are developed to meet regulatory and best practice guidelines. The C-Level Certified Seal carried on this site displays that the Organization has adopted proactive security steps for safeguarding your data during entry, transmission and storage. Click here to view SurePrep's C-Level Letter of Attestation for the FileRoom. Click here to view SurePrep's C-Level Letter of Attestation for TaxCaddy.

Network Operations Center

SurePrep's software runs on a permissively neutral network and benefits from multi-homed connectivity with redundant 10 Gbit/s Tier 1 carriers combined for over 80 Gbit/s of bandwidth. The IBM servers are manned 24 x 7 by  NOC personnel in a static free environment with redundant Liebert 30-ton HVAC units and pre-action dry pipe fire suppression. Physical access to the facility is limited to IBM IT staff only utilizing proximity security badge and individual card keys for entry. The facility is under digital video surveillance at all times and is powered for continuous, uninterrupted operation by N + 1 paralleled generators and UPS power systems.

What Customers Are Saying About 1040SCAN

  • 1040SCAN PRO is at the core of a highly efficient workflow. It is the elite software in its class.

    Crissie Landry, CPA LaPorte CPAs & Business Advisors
  • 1040SCAN has helped us to standardize our workpapers, while moving the scanning and verification to administrative staff, freeing up professional staff to get the tax files done in less time.

    Barbara Cooper, CPA, MBA Cooper Associates, LLC
  • 1040SCANverify can be a lifesaver for extensions. If you’re in a crunch and you need to quickly calculate an extension payment for clients that have primarily standard documents, it [1040SCANverify] can quickly calculate the tax liability.

    Beth Attebery, CPA The Henry Levy Group, A CPA Firm
  • With SPbinder, preparers can create open items and other notes that are automatically linked to the related workpapers. Then they can export the notes to email. Then I can get the email as the partner-in-charge, I can open SPbinder and quickly go to those pages and answer the questions, and leave a trail showing that it was me who answered it. So that was a process that gained efficiency.

    Jeff M. Lawson, CPA, MST Stoy, Malone & Company, P.C.
  • The decision to center our tax workflow process around SurePrep will prove to be one of the most important choices in the history of our firm.

    Adam Wolfe Bobby Medlin CPA
  • 1040SCAN did an excellent job of getting all the numbers out of brokerage statements… We could very easily get through multi-page Schedule D’s and out of maybe five or six hundred numbers that have to be imported into the return, there were only two or three numbers that had to be changed (in verification). So it was highly accurate.

    Paul Sevigny, CPA, CVA, CFA Stoy, Malone & Company, P.C.
  • 1040SCAN PRO has bookmarked the whole file, perfectly entered interest, dividends and it’s done. With 1040SCAN PRO I’d say that I easily saved 50-75% of my time.

    Susan Shusko, CPA