TOTAL CLIENTS
0
Encrypted records
E-FILED
0
Returns submitted
BALANCE OWING
$0
Total outstanding
INVOICED
0
On file
New client 🔒 Encrypted before saving
Search by:
File #
Name
SIN number
Email
Invoice #
ALL CLIENTS — encrypted at rest
| File # | Name | ClientSIN | EFILE | Invoice # | Date | Balance | Year | Actions |
|---|
Invoices
All invoices pulled from client records.
TOTAL INVOICES
0
TOTAL BILLED
$0
OUTSTANDING
$0
COLLECTED
$0
INVOICE LEDGER
| Client | Invoice # | Invoice date | Balance owing | Status |
|---|
E-File tracker
Track e-file submission status across all clients.
E-FILED
0
PENDING
0
NOT FILED
0
COMPLETION
0%
E-FILE STATUS
| Client | Year | EFILE status | Balance owing |
|---|
Documents
Upload and store client documents — T4s, T5s, receipts, and more.
Click to upload a document
PDF, PNG, JPG supported
UPLOADED DOCUMENTS
| Filename | Type | Size | Uploaded | Action |
|---|
Notes
Encrypted notes — client meeting summaries, reminders, and follow-ups.
New note 🔒 Encrypted
Reports
Summary analytics across all client records.
TOTAL CLIENTS
0
TOTAL BILLED
$0
OUTSTANDING
$0
E-FILE RATE
0%
FILING STATUS BREAKDOWN
No data yet.
RECENT ACTIVITY
No activity yet.
Search clients
Search across all encrypted records by name, SIN, email, or invoice number.
Search by:
Full name
SIN number
Email
Invoice #
Start typing to search your encrypted client records.
Import CSV
Export from your tax software and drop the file here.
EXPECTED COLUMN HEADERS
ClientFirstName, ClientLastName, ClientSIN, EFILE, Invoice_Number, Invoice_Date, BalanceOwing
These match the export fields in your tax software exactly.
Click to upload CSV file
All records encrypted immediately on import
Settings
Manage your vault preferences.
VAULT INFO
VAULT NAME
—
TOTAL RECORDS
0
ENCRYPTION
AES-256-GCM
KEY DERIVATION
PBKDF2-SHA256 (310,000 rounds)
RECOVERY CONTACTS
Up to 3 email addresses or phone numbers that can verify identity for password recovery.
DROP-IN DOCUMENT RECEIPT
Record when a client drops off documents in person. Sends confirmation to both sides.
CHANGE PASSWORD
Update your master password. You will need to re-encrypt all records.
KEYBOARD SHORTCUTS
New clientCtrl + N
SearchCtrl + F
Lock vaultCtrl + L
DeadlinesCtrl + D
DANGER ZONE
Permanently delete your vault and all encrypted records. This requires 3-step authorization and cannot be undone.
⚠ This will permanently destroy all client records, invoices, notes and documents. There is no recovery.
Deadline tracker
CRA filing deadlines per client. Never miss a deadline.
OVERDUE
0
DUE THIS WEEK
0
DUE THIS MONTH
0
ON TRACK
0
CLIENT DEADLINES
| File # | Client | Year | Filing deadline | Days left | EFILE status |
|---|
Follow-up alerts
Clients that need your attention right now.
Activity log
Every action tracked — who did what and when.
RECENT ACTIVITY
| Time | Action | Details |
|---|
Document drop-off
Log documents received from clients at the office. An SMS confirmation is sent to the client automatically.
LOG NEW DROP-OFF
SMS
RECEIVED DOCUMENTS LOG
No drop-offs logged yet.
Client portal
Clients log in with their email and file number to check document status.
CLIENT LOGIN
Client portal
Najax Consulting Group
HOW IT WORKS
1
Client drops off documents
You log the drop-off in the Drop-off tab. SMS confirmation sent to client.
2
Client checks their status
Client visits ncgvault.com, logs in with email + file number.
3
They see their documents
Shows received docs, processing status, balance owing, and e-file status.
🔒
Always secure
Clients can only see their own file. All data encrypted with AES-256-GCM.
Security
How your data is protected.
ENCRYPTION
AES-256-GCM
KEY DERIVATION
PBKDF2-SHA256
ITERATIONS
310,000
IV / NONCE
96-bit random
SALT
128-bit random
AUTH TAG
128-bit GCM
PROTECTION DETAILS
✓ Password never stored — used only to derive the key via PBKDF2. Not saved anywhere.
✓ AES-256-GCM — provides both confidentiality and tamper detection per record.
✓ Unique IV per record — identical data produces different ciphertext every time.
✓ SIN masked by default — click to reveal temporarily; auto-hides after 4 seconds.
⚠ Browser storage — for production, pair with a server-side encrypted database.
⚠ No password recovery — forgotten master password = data unrecoverable by design.