Trust & Security
You’re trusting us with bank statements. Here’s exactly how we protect them.
No jargon, no fine print you need a lawyer to parse, just a plain account of what happens to your documents from the moment you upload them.
How your documents are handled
Documents you upload go directly into secure storage, they never pass through email or an unsecured inbox. Deliverables we send back to you, like filed returns or financial statements, are streamed to you directly rather than sent as a link that could be forwarded or exposed.
Encryption in transit and at rest
Everything moving between your device and our systems is encrypted in transit. Everything stored is encrypted at rest. This is the default for the infrastructure we run on, not an add-on.
Multi-factor authentication
Every portal account requires multi-factor authentication, a password alone is never enough to access an account. There is no opt-out, for clients or for staff.
Access logging
Every time a document is viewed or downloaded, we record who did it and when. This is not just for our own oversight, it exists so there is a clear record if a question about document handling ever comes up.
Malware scanning on every upload
Every file you upload is scanned before anyone at GTCL can access it. Nothing reaches our systems, or your file, unscanned.
Retention policy
Jamaican tax records are generally kept for approximately seven years, in line with standard record-keeping expectations for tax matters. Deletion outside that window is a manual, logged action taken by an administrator, never automatic and never silent.
Infrastructure
Our systems run on Cloudflare, with data stored in North America. Cloudflare's infrastructure holds SOC 2 compliance and encrypts data at rest by default, the same foundation used by major financial and technology companies.
Confidentiality
Beyond the technical safeguards, everyone at GTCL operates under the confidentiality obligations that come with professional tax practice. What you share with us stays between us and, where legally required, the relevant tax authority.
See It In The Portal
Not just a policy. This is what it looks like.
2026 Income Tax Filing
Supporting documents
Bank statements, Jan–Dec 2026
Bank Statements
Prior year filed return
Prior Returns
Deductible expense receipts
Receipts
Government-issued ID
KYC
For the formal policy governing data collection, use, and third-party processors, see our Privacy Policy.
An engagement usually starts with one conversation.
Tell us what you're dealing with, individually or on behalf of your business, and we'll tell you plainly what it takes to resolve it.