← CFC Desk

CFC Desk Privacy Policy

Effective date: 2026-09-08 · Operator: BK · Version 2

1. Who we are

This policy applies to CFC Desk, the web service operated by BK at 5471.work and its subdomains. CFC Desk is a professional tool that helps tax practitioners prepare IRS Form 5471. It is not open to the public; access is by invitation only.

2-1. Sign-in information

When you sign in with Google we receive only your email address, name, and profile picture URL from Google. When you sign in with Microsoft (Azure AD / Entra ID) we receive only your email address and display name as provided by Microsoft — we do not read or store any Microsoft tenant or object identifier beyond what is needed to complete sign-in. When you sign in with a one-time email code we receive only your email address. In every case, sign-in itself is verified by Cloudflare Access before the request reaches the application; the application stores only the e-mail address and display name it receives from Cloudflare Access, never a password or access token from Google or Microsoft. We do not request or use any other Google or Microsoft data or scopes (no Drive, Contacts, Calendar, Gmail, OneDrive, or Outlook access).

2-2. Work documents

Users upload work documents: the foreign corporation's financial statements and tax computation PDFs, the prior-year Form 5471 PDF, and the return information typed into the screens (entity names, registration numbers, shareholder details, amounts). These may contain client identifiers such as EIN, SSN, and addresses. This taxpayer-identifying and tax-return information is processed only to prepare the return and related schedules and workpapers; it is never used for any other purpose (no advertising, no analytics profiling, no resale, no use to train a general-purpose model).

2-3. Usage records

Sign-in times, an audit trail of actions (save, upload, run), and server error logs. Error logs are designed not to contain emails, names, or identification numbers.

2. How we use it

We do not use your data for advertising and we do not sell it.

The service drafts figures, forms, and workpapers; it does not decide what is filed. A human — the signing tax practitioner using the service — reviews every draft and makes the filing decision.

3. Where it is stored

All data is stored on servers controlled by the operator and located in the United States (currently an on-premises server; later a cloud server, still U.S.-only). If the operator moves the service to a cloud server, or otherwise changes where data is stored, the operator will give users advance notice before the move, and the data will continue to stay in a United States region. The operator does not transfer your data outside the United States, and would give advance notice before any such international transfer. Access is protected by Cloudflare Access (HTTPS; only invited emails may sign in), and each user's workspace is isolated. The operator maintains the information security program required of U.S. tax practitioners (FTC Safeguards Rule; IRS Publication 4557).

4. Sharing

We do not sell data or use it for advertising. We share data only with the infrastructure and sign-in providers needed to run the service, each of which processes it solely to provide their service to us, and we share data when required by law:

Thomson Reuters is not a sub-processor and does not receive your data: the service only formats data into a guide for you to type or import into your own UltraTax CS; it does not transmit your data to Thomson Reuters.

5. Google and Microsoft user data

CFC Desk's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information received from Microsoft at sign-in is used the same way. In both cases that information is used only for sign-in and user identification and is not transferred to others or used for any other purpose.

6. Retention

Work documents are kept while your engagement and account are active (they are reused for the following year's return). If an account has no activity for 24 months, the operator deletes it and its work documents unless a longer retention is legally required. On account deletion we remove sign-in information, the workspace, and uploaded files together. Server logs are deleted after 90 days. Backups of the database and uploaded files are made daily as a single archive and are kept on a rolling 14-day schedule, after which the oldest backup is removed as a new one is made. During this test program, backup archives are stored unencrypted on a separate disk on the office server; encryption of backups is enabled at general availability.

7. Security incidents

If the operator confirms a security incident affecting your data, the operator will notify affected users without undue delay after confirming the incident, consistent with the notification expectations of the FTC Safeguards Rule and IRS Publication 4557.

8. Your rights

You may request access to, a copy of, correction of, or deletion of your data, object to a particular use of it where applicable law provides that right, and request deletion of your account, at any time by contacting us below. We respond within 10 business days.

9. Not for children

CFC Desk is a professional tool for tax practitioners. It is not directed to, and is not intended for use by, individuals under 18 years of age.

10. Cookies

We use only the cookies needed to keep you signed in (the Cloudflare Access session cookie and the CFC Desk session cookie). There are no advertising or tracking cookies.

11. Changes

If this policy changes we will update the effective date and version number on this page and notify signed-in users of material changes. Version 2 (2026-09-08): Backups are now written as a single archive per run instead of a mirrored folder; the retention schedule is unchanged at 14 days.

12. Contact

Operator: BK. Role contact: [email protected]. You may also reply to the invitation e-mail you received, or use Admin › Notifications in the app.