How are our HMRC credentials stored?

Government Gateway user IDs and passwords are encrypted with authenticated encryption. They are decrypted only at the moment a message is sent to HMRC, are never shown again after entry, and are removed from every log and stored message.

Is two-factor authentication available?

Yes. Every user can turn on authenticator-app (TOTP) two-factor sign-in from their security settings.

Can other firms see our data?

No. Every firm's data is kept separate, and every query is limited to the firm of the signed-in user.

What is recorded in the audit trail?

Case changes, calculations, submissions, credential changes, sign-ins and document access, with user, time and IP address. The log is append-only.

How long is data kept?

By default, 7 years after completion. Each firm can set 6–15 years to match its regulatory and insurance obligations.

What happens to the XML sent to HMRC?

Every request and response is stored unchanged as evidence of what was filed, with passwords removed before anything is saved.

Home / Security

Security for SDLT filing, built for regulated firms

Conveyancing and tax data is sensitive, and HMRC credentials more so. This is how FileSDLTonline protects both.

HMRC credentials

Each firm files under its own Government Gateway ID, password and STORN. Credentials are encrypted at rest with authenticated encryption, decrypted only at the moment a message is sent to HMRC, never shown again after entry, and removed from every log line and stored message.

Accounts and access

Optional authenticator-app two-factor sign-in, account lockout after repeated failures, rate limiting on sign-in and public tools, idle session timeout, and role-based permissions from owner to read-only.

Firm separation

Every firm's cases, documents and settings are kept apart, and every database query is limited to the firm of the signed-in user. Going live with HMRC requires a separate approval step by the platform administrator.

Audit trail and evidence

An append-only record of case changes, calculations, submissions, credential changes, sign-ins and document access. Every request and response exchanged with HMRC is stored unchanged as evidence of what was filed.

Data protection

Encrypted in transit (TLS 1.2 or higher, including connections to HMRC). Configurable retention of 6–15 years after completion, with a default of 7. No client data is used for marketing.

Correct jurisdiction

Scottish and Welsh land is blocked before a return can be built, with a pointer to Revenue Scotland or the Welsh Revenue Authority, so returns never go to the wrong tax.