№ 01 · Workflow
Case assignments
Who assigned what to whom, when. Including reassignments and de-assignments.
Feature · Audit log
Every move, on the record.
When the IRS calls, a partner calls, or a former employee calls — the question is the same:“who did this, when?”. TaxSQR’s answer is a single, append-only audit log that captures every consequential action with actor and timestamp.
§ Section I · Coverage
Every move, on the record.
№ 02 · Pipeline
Stage transitions
Every move from one pipeline / case stage to another, with prior + new state.
№ 03 · Vault
Document uploads & downloads
Upload by uploader, taxpayer ID, presigned URL hash. Downloads by accessor and timestamp.
№ 04 · E-SIGN
E-signatures
Engagement letters and Form 8879 — signer name, email, IP, timestamp.
№ 05 · Access
Permission changes
Role grants, revocations, password resets, MFA enrollments and resets.
№ 06 · AI · ~6s
AI extract events
Each prefill run, the source doc hash, and the preparer’s accept / edit / reject decision per field.
§ Section II · Tamper-evident
Append-only, by database design.
The log table forbids UPDATE and DELETE at the constraint layer. Even an attacker who reaches the database cannot silently redact entries — they would have to truncate, which leaves a gap a forensic auditor can spot.
№ 01
Append-only
Database constraints prevent UPDATE or DELETE on log entries. Even an attacker with DB access cannot silently redact history.
Append-only
№ 02
Per-org export
Owners can export the full audit log as CSV or JSON, scoped to their org, on demand. Useful for SOC 2 evidence or a partner review.
Self-serve
№ 03
Taxpayer transparency
A taxpayer can request a CSV of every action against their own record. Their data, their right to know who touched it.
Transparent
№ 04
Retention forever
Logs are retained for the life of the org. Cancellation triggers a 90-day grace period before deletion, with an export by default.
∞ retention
We no longer reconstruct the timeline. We read it.
— A TaxSQR firm partner