Four-eye tax operations, by design
VitalReturns treats filing like it's a four-eye operation — because for anything worth filing, it is. Preparer, reviewer and approver each sign off, with a tamper-evident record of every step.
Roles that match how tax teams actually work
- Role-based access
Partner, manager, preparer, reviewer, approver and read-only roles — each with precisely-scoped permissions.
- Per-engagement teams
Different clients, different teams — assign only the users who should see a specific engagement or company.
- Digital signatures
Captured on every return at submission — tied to the signatory's identity, not a shared account.
- Immutable audit trail
Append-only log of every change, with actor, timestamp, before/after state and justification where required.
- Read-only invitees
Give auditors, investors or regulators scoped read-only access without creating billable user seats.
- SSO + MFA
Enterprise SSO (SAML/OIDC) with mandatory MFA on sign-in and privileged action step-up.
Governance that URA auditors trust
Every mutation on a filing is attributable, reversible and retrievable.
- Attributable
Every edit, approval and submission is tagged with the actor's verified identity and the device/session that made it.
- Tamper-evident
The audit log is append-only. No admin can rewrite history — only append a corrective entry which itself is logged.
- Audit-ready export
Produce a signed activity report for any period — ready for URA assessment response, due diligence or internal audit.
Collaborate like your audit depends on it
Because when URA asks who signed off, you'll have the answer — timestamped and signed.