GUIDE, FOR ACCOUNTANTS & BUSINESSES

How to securely share documents for an IRAS tax audit

Responding to an IRAS audit means handing over sensitive records, tax returns, bank statements, working papers. Emailing them around is risky. Here's how to share them securely, remove what you shouldn't disclose, and keep a record of everything.

Set up a secure audit room

The five steps

1
Create a secure data room for the audit
Set up a room named for the client and IRAS reference. Everything for this audit stays in one controlled, audited place, not scattered across email.
2
Upload the requested documents
Drag in tax returns, financial statements, working papers and source records. AI extracts the text so everything is searchable and auto-tagged.
3
Check for PII before sharing
Run the AI PII scan to find personal and bank details, and remove anything that shouldn't be disclosed before the auditor sees it.
4
Invite the IRAS officer or auditor by email
They verify their identity with a 6-digit code, no account or password. Optionally require NDA acceptance first. You control whether they can download or view only.
5
Answer questions in-thread and keep the audit trail
Use Q&A to handle the auditor's questions against specific documents, and rely on the tamper-evident, exportable log as your record of exactly what was shared, with whom, and when.

Why not just email the documents?

Emailed attachments can't be controlled

Once sent, they can be forwarded indefinitely and you have no record of who opened them.

Personal and bank details need removing

AI PII detection finds NRICs and bank details, so you can remove them before sharing.

You need a record

A tamper-evident, exportable audit trail records exactly what was shared and when.

Singapore data residency

Tax records stored in Singapore.

IRAS audit sharing FAQs

How do I securely send documents to IRAS or an auditor?

Create a secure data room, upload the requested documents, remove any PII you're not disclosing, then invite the IRAS officer or auditor by email. They verify their identity with a code, no account needed, and you get a tamper-evident record of everything they access. This is far safer than emailing attachments or sharing a Drive link.

Is it safe to email tax documents to my accountant?

Email is risky for tax documents: attachments can be forwarded indefinitely, there's no record of who opened them, and personal and bank details sit unprotected in inboxes. A secure data room verifies the recipient, flags PII so you can remove it, blocks downloading if you choose, and logs every access, much safer for the sensitive data in a tax matter.

Can ShareAndGo find personal and bank details before I share?

Yes. AI PII detection finds NRICs and bank details, so you can remove them before sharing.

Where are my tax documents stored?

In Singapore (Google Cloud asia-southeast1).

Do auditors need to install anything?

No. The auditor or IRAS officer opens a secure link in their browser, verifies via email code, and views documents inline, including spreadsheets, with no software, account or download required.

Can I show what I shared during the audit?

Yes. Every view, download and Q&A is recorded in a SHA-256 hash-chained audit trail you can export, a record of exactly which documents were shared, with whom, and when.

Handle your next IRAS audit securely

Set up a secure audit room in minutes. Free to start, documents stored in Singapore.

Start Free Trial

How to securely share documents for an IRAS tax audit

The five steps

Create a secure data room for the audit

Upload the requested documents

Check for PII before sharing

Invite the IRAS officer or auditor by email

Answer questions in-thread and keep the audit trail