Is It Safe to Store Tax Returns, Passports and IDs Online? A 10-Question Checklist
Ten questions to ask before you upload a tax return, passport or insurance policy to any app: security, business model, AI training, export and deletion.
Storing important documents online can be safer than a shoebox in the closet — fires, floods and moves destroy paper every day. But "online" covers everything from a carefully built vault to a free app that reads your files to sell ads. Here are ten questions to ask before you upload a tax return, passport or insurance policy anywhere.
Security basics
- Is two-factor sign-in required? A password alone isn't enough for documents that can be used to steal your identity. The best services require a second factor on every account, not as an optional extra.
- Is everything encrypted in transit and at rest? Your files should be encrypted on the way to the service and while they're stored. Be wary of vague phrases like "bank-level security" with no detail behind them.
- Is each account walled off at the database level? Good services enforce separation in the database itself, not just in the app's screens.
- Does it sign you out when you walk away? Automatic sign-out after idle time protects you on shared or forgotten devices.
Privacy and business model
- How does the company make money? If you're not paying, find out who is. Ad-funded products have every reason to learn as much about you as possible.
- Does it sell or share your data for advertising? Look for those exact words in the privacy policy. "We don't sell your data" is not the same as "we don't share it with advertising partners."
- Does your content train AI models? Many services now train on what you upload by default. For identity and financial documents, the answer you want is a flat no.
- Who else handles your files? Every service relies on some providers — storage, email, payments. A trustworthy one names them and says what each does.
Control
- Can you export everything in one step? If leaving is hard, your data is the hostage.
- What happens when you delete? Look for a clear answer: removed from live systems right away, and from backups on a stated schedule.
What to store, and what to keep in paper too
A digital vault is ideal for copies of IDs and passports, insurance policies, tax returns and receipts, warranties, home and vehicle records, and medical summaries. Keep the originals of documents that only count on paper — certain wills, deeds, titles and some certificates — somewhere safe, and note in your vault where each original lives.
How Unfoggable answers these ten questions
Two-factor sign-in is required on every account. Files are encrypted in transit and at rest, each vault is sealed off in the database, and idle sessions lock themselves. We make money only from subscriptions, never sell or share your data for marketing, and never train AI on your documents. Our privacy policy names every service that touches your data. You can export your whole vault at any time, and deleting your account removes it from live systems right away.
Whatever you choose, ask the ten questions. A service that can't answer them clearly hasn't earned your passport.