How Tax Preparers Organize Client Files in Google Drive

TL;DR: Organize a tax practice's drive by client, then tax year, with the same folders each year: source documents, workpapers, return, signed authorizations and correspondence. Collect documents through secure upload links, not email, because the FTC Safeguards Rule covers tax preparers and requires encryption, MFA and a written security plan. Sort existing files into the structure in one previewed pass, then let workflows file uploads and emailed W-2s and 1099s as they arrive.

A tax practice handles more sensitive paper per client than almost any other business, in a few frantic months. W-2s, 1099s, brokerage statements, K-1s, prior-year returns and signed e-file authorizations arrive by email, upload and photo. When season peaks, filing them correctly is the first thing to slip.

What folder structure should a tax preparer use?

Client first, then tax year, with the same folders inside every year:

Clients/
  Johnson, Mark and Lisa/
    2025 Tax Year/
      01 Source Documents/
        W-2s/
        1099s/
        K-1s/
      02 Workpapers/
      03 Return/
      04 Signed Authorizations/
      05 Correspondence and Notices/
    2024 Tax Year/
    Permanent/
      ID and Engagement Letters/
      Prior Returns/
  Northwind LLC/
Practice/
  Security Plan/
  Templates/

The Permanent folder holds what carries over year to year. Signed Authorizations is where Form 8879s go, which matters for retention below.

How long do tax preparers keep client records?

Two IRS rules set the minimums for returns you prepare:

• Copies of returns. For "the period ending 3 years after the close of the return period," a preparer must "retain a completed copy of such return or claim, or retain, on a list, the name and taxpayer identification number" of each taxpayer. (26 U.S.C. 6107)
• Form 8879. "Retain the completed Form 8879 for 3 years from the return due date or IRS received date, whichever is later." It "may be retained electronically." (Form 8879)

The FTC Safeguards Rule adds the other side: customer information should be disposed of "no later than two years after the last date the information is used," unless there's a business or legal reason to keep it. (16 CFR 314.4) A consistent client and year structure is what makes both possible.

What security rules apply to a tax practice's files?

The FTC Safeguards Rule applies to tax preparers by name: "An accountant or other tax preparation service that is in the business of completing income tax returns is a financial institution." The IRS reminds practitioners that "federal law requires tax and accounting professionals to create and maintain a Written Information Security Plan." (IRS)

Among the rule's requirements (16 CFR 314.4):

• a qualified individual responsible for the security program
• a written risk assessment
• encryption of customer information in transit and at rest
• multi-factor authentication for anyone accessing your systems
• reporting a breach involving 500 or more consumers to the FTC within 30 days of discovery

IRS Publication 5708 is a free WISP template for small practices, and Publication 4557 covers safeguarding taxpayer data. For files, the practical upshot is simple: don't collect W-2s and returns by plain email, keep client folders restricted, and turn on MFA everywhere.

How do you organize the client files already in your drive?

Most practices have years of client documents saved by whoever handled them, plus a "Scans" folder of unlabeled PDFs.

The Drive AI sorts them in place in Google Drive, OneDrive, SharePoint or Dropbox:

Go through /Scans and /Client Uploads. For each document, work out the client, tax year and form type. File it under Clients in the right year and folder: W-2s, 1099s and K-1s under Source Documents, 8879s under Signed Authorizations, IRS letters under Correspondence. Rename each Form, Client, Tax year, Issuer.

The agent reads each form, scans and phone photos included, proposes every move and rename as one change with a count and a sample, and runs it in the background once you approve. Undo reverses it. Files are encrypted in transit and at rest and never used to train AI models.

How do you collect and file client tax documents automatically?

Use a file request per client each season: one secure upload link listing what you need, with no account required. A workflow on the upload folder files each document as it arrives:

When a file is added to Clients/Season Uploads, if it contains several forms, split it into separate files. For each one, read the client name, tax year, form type and issuer, rename it Form, Client, Tax year, Issuer, and move it into that client's Source Documents folder for the year. If the client can't be matched, ask a preparer to approve before moving it.

Clients will still email some documents. A workflow on your inbox handles those the same way, saving each attachment and filing it. Worked examples: collect tax documents from clients, organize tax workpapers, and organize prior-year returns. Engagement letters and authorizations can go out for e-signature from the same assistant.

What can you ask across your client files?

• Which clients have last year's 1099-B in their folder but not this year's? A quick way to spot missing documents.
• List every 8879 for the 2025 tax year with client and date signed.
• Which clients haven't uploaded anything this season?

Where does each document go?

Every tax year folder holds the same set of documents.

What does this look like before and after?

A few real-world file names, before and after the agent or a workflow handles them:

What mistakes should you avoid?

• Collecting W-2s and returns by email. They carry Social Security numbers, and the Safeguards Rule requires encryption in transit. Use a secure upload link.
• One folder per client with no years. Prior-year documents get mixed with this year's, and retention can't be applied by year.
• 8879s filed with workpapers. Keep signed authorizations in their own folder; they have their own retention rule.
• Leaving combined client PDFs unsplit. A five-form scan hides what's missing. Split and name each form on arrival.

What won't it do?

• It isn't tax software. It doesn't prepare or e-file returns.
• It doesn't make you Safeguards-compliant on its own. Your WISP, risk assessment and MFA across all systems are your responsibility. The Drive AI encrypts files; it doesn't replace the plan.
• It doesn't apply retention schedules or delete files when the period ends.
• AI can misread a blurry photo of a form. Approval steps and undo exist for that.

Connected drives, email workflows and file requests come with the Max plan and Team plans.

Frequently Asked Questions

How should tax preparers organize client files?

By client, then tax year, with the same folders each year: source documents, workpapers, return, signed authorizations and correspondence, plus a permanent folder for ID, engagement letters and prior returns.

How long do tax preparers have to keep copies of returns?

Under IRC 6107(b), three years after the close of the return period, either a copy of each return or a list of taxpayer names and identification numbers.

How long do you keep Form 8879?

Three years from the return due date or the date the IRS received the return, whichever is later. It can be kept electronically.

Do tax preparers need a written information security plan?

Yes. The FTC Safeguards Rule covers tax preparers, and the IRS says federal law requires a written information security plan. IRS Publication 5708 is a template.

Is it safe to collect tax documents by email?

It's risky, because W-2s and returns carry Social Security numbers. A secure upload link is safer, and the Safeguards Rule requires encrypting customer information in transit.

Start before the season starts

Set up the client and year structure, send this season's upload links in January, and switch on the upload workflow before the first W-2s arrive. Sort prior years in the quiet months.

More for tax practices: tax preparer solutions and how to collect W-9s from vendors.