Product DNA · confidential working draft

The document should arrive before the tax appointment.

CivicTax Cloud is API infrastructure for consent-based delivery of tax documents. It does not replace a tax office, own the office’s customer relationship, file a return, or present itself as a government identity.

The product thesis

Tax preparation is slowed by fragmented document sources, unclear permissions, email attachments, missing records, and manual follow-up. The early wedge is not “another tax portal.” It is a neutral delivery layer that lets each participant keep its own portal while using one controlled workflow for the documents the citizen chooses to share.

The bottleneck

Everyone has part of the file. No one has the complete, authorized package.

01Sources produce records separately

Employers, payroll providers, gig platforms, banks, brokers, marketplaces, insurers, and public entities each create different tax records.

02Citizens carry the coordination burden

People chase email, paper, portals, screenshots, and missing attachments before a preparer can even begin review.

03Offices need the right documents, not broad access

A tax office needs a case-specific checklist and a clear consent record, not an unrestricted folder or a customer’s permanent credentials.

04Existing software needs a controlled integration point

Software vendors can improve workflows only where documented, authorized integrations exist. CivicTax is designed as the connector layer, not an assumed replacement.

The product truth

Four roles. One limited flow.

Document sourceUses its own restricted credentials to deposit its assigned record.
Citizen vaultReceives, organizes, and notifies before any office access.
Explicit consentNames the office, purpose, year, and requested categories.
Tax officeReceives only the authorized package for human review.
Design principles
Consent is a product surface

Permission is specific, affirmative, revocable, time-bounded, and auditable. It cannot be a buried default checkbox.

Separation is the security model

Each tenant, source, citizen, case, scope, and office role is isolated. Browser input never decides tenant authorization.

Automation organizes; humans decide

Classification can propose a document category and route. It must preserve review requirements and cannot make final tax decisions.

Integrate only by permission

Connectors remain placeholders until a provider offers official documentation, credentials, and contractual authorization.