Every CA practice has a version of the same drawer. Somewhere — a shared email inbox, a WhatsApp group, a pen drive that travels between the office and a partner's laptop, a folder on the reception desktop called "Clients FINAL" — sits the actual raw material of the firm. PAN cards, Aadhaar copies, bank statements, last year's returns, signed engagement letters, board resolutions, a DSC token or two, and a hundred bank passwords helpfully written on a sticky note. It works, in the sense that the work gets done. It is also the single most fragile part of the practice, and the part the software you already pay for was never designed to fix.
The filing tools were never meant to hold the documents
Indian tax software is genuinely good at what it does. Winman, CompuTax and SAG Infotech's Genius compute and file — income tax, TDS, GST, audit reports — quickly and accurately, and firms that live in them are right to. Newer tools like Suvit and Vyapar's TaxOne pull in data and speed up reconciliations. None of this is a criticism. But look closely at what these tools are: they are engines for producing and submitting returns. They take numbers in and push filings out. They are not, and were never meant to be, the system of record for the client's documents and the firm's relationship with that client.
So the documents live everywhere else. And "everywhere else" is fine right up until a laptop is lost, a staff member leaves with the WhatsApp history, a client asks for a copy of something from three years ago, or a regulator asks how you secure the personal data you hold.
Why the shoebox is now a liability, not just a mess
That last point stopped being hypothetical recently. The Digital Personal Data Protection Rules were notified in November 2025, giving operational shape to the DPDP Act, 2023, with obligations phased in over the following months. A CA firm is, in plain terms, holding a great deal of other people's personal and financial data — exactly the kind of processing the law is concerned with. The Act pushes anyone holding such data toward real obligations: reasonable security safeguards, clarity on consent and purpose, and the ability to respond when a client asks what you hold or asks you to delete it. You cannot demonstrate any of that when the honest answer to "where is this client's data?" is "in about six places, and one of them is Rajesh's personal Gmail".
Here is the sprawl most firms would find if they went looking today:
- Identity and KYC — PAN, Aadhaar, incorporation documents — scattered across email threads and phone galleries.
- Financials — bank statements, ledgers, prior-year returns — on a shared drive nobody has audited for access.
- Credentials — portal logins, bank passwords, DSC tokens — on paper, in spreadsheets, or in one partner's head.
- Engagements — signed letters and scope documents — filed if you are lucky, verbal if you are not.
- Correspondence — the actual advice given — buried in individual inboxes and WhatsApp chats.
What a real client vault actually does
A document vault is not a fancy folder. The point is control and retrieval, not storage. Done properly, it changes the daily texture of the practice in small, boring, valuable ways:
- Every client has one place where their documents live, organised by year and by engagement, so retrieval is seconds instead of a search across inboxes.
- Access is by role — an article sees what an article should see, a partner sees everything, and access is logged.
- A clear audit trail shows who uploaded, viewed or downloaded a document and when.
- Clients can upload directly into their own space instead of emailing sensitive files around.
- When someone leaves the firm, the documents stay with the firm — not on their phone.
Complementary, not a replacement
We want to be precise about this, because it is easy to misread: BizRevolt is not a filing tool and does not want to be your Winman or your Genius. Keep those. Keep filing exactly how you file. What BizRevolt gives a practice is the layer around the returns — the part about running the firm rather than producing a single filing. The client document vault sits inside a broader practice workspace with a deadline tracker that treats a missed due date as a real risk, engagement and billing records, roles and permissions, and an audit trail across the whole thing.
It is priced to be an easy yes: ₹1,499 a month for a solo practitioner, ₹4,999 for a firm. That sits alongside your filing software, not on top of it, and it is designed so a two-person practice and a twenty-person firm both find their shape in it.
Picture the ordinary request that exposes the whole arrangement: a client rings in July and needs a copy of a capital-gains working from three years ago to answer a notice. In a tidy practice that is a thirty-second retrieval. In the scattered version it is an afternoon — someone checks an old laptop, someone else scrolls a WhatsApp group, a partner is phoned on holiday because the file only ever lived on his machine. The work was done correctly the first time; the entire cost is in not being able to find it again. Multiply that by a busy season and document sprawl stops being a filing preference and becomes billable hours quietly leaking out of the firm.
If the thought of a regulator asking where you keep client data makes you slightly uneasy, that instinct is worth listening to. We are happy to show you what a proper client vault looks like against your own messy reality — message us on WhatsApp or call +91 91 0657 4865, and we will walk one client file end to end before you change anything.
Image credit: Blogtrepreneur, CC BY 2.0 — via Wikimedia Commons.