CPA Ontario & PIPEDA Compliant Standards

Legal & Regulatory Compliance Hub

Review our binding platform terms, PIPEDA privacy safeguards, CRA e-filing representation disclosures, and professional accounting standards.

Last Updated: October 2026 • Jurisdiction: Ontario, Canada
01

Terms of Service & Digital Platform Agreement

Governing client relationships, website access, and digital portal transactions

1. Acceptance of Terms

By accessing, browsing, or utilizing the website fiscalx.ca, submitting questionnaires via our onboarding system, or creating credentials within our Client Portal Vault, you confirm your agreement to be legally bound by these Terms of Service. If you do not accept these terms, you must refrain from using this website and our digital client services.

2. Scope of Professional Services

FiscalX Professional Corporation ("FiscalX") provides professional corporate tax (T2), personal income tax (T1), notice to reader compilation, bookkeeping, and CRA compliance representation. Nothing submitted through an initial intake form or exploratory questionnaire constitutes an official filing with the Canada Revenue Agency (CRA) until a formal client engagement is finalized, required supporting slips are verified, Form T183 or T183CORP is signed, and invoices are paid.

3. Retainer, Invoicing & Payment Terms

Professional services are billed based on fixed fee agreements or predetermined hourly rates outlined in your service confirmation. All invoice remittances must be tendered via Interac e-Transfer to payments@fiscalx.ca. Invoices are due upon receipt. FiscalX reserves the right to withhold final transmission of tax returns to the CRA or suspend Client Portal vault services until balances are paid in full.

4. Limitation of Liability

To the maximum extent permitted by applicable Ontario and Canadian federal law, FiscalX Professional Corporation, its directors, officers, agents, and software providers shall not be liable for any indirect, special, incidental, consequential, or punitive damages. This includes, without limitation, losses arising from client-provided inaccuracies, system interruptions beyond our control (including AWS, Microsoft Graph, or Intuit QuickBooks outages), or postal and electronic carrier delays.

5. Termination of Portal Access

FiscalX reserves the right to suspend or permanently revoke client credentials, access to file uploads, and online document vaults at its sole discretion in cases of breach of these terms, fraud, non-payment, or uncooperative conduct.

02

PIPEDA & Canadian Data Residency Privacy Policy

Protection of confidential client financial records and Social Insurance Numbers

1. Statutory PIPEDA Conformance

FiscalX complies strictly with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation. We recognize the profound sensitivity of financial records and maintain stringent organizational, physical, and technological measures to guard all personal and corporate disclosures.

2. Collection of Sensitive Identifiers

To complete accurate tax filings and satisfy CRA regulatory requirements, we collect:

  • Full legal names, dates of birth, marital status, and residential addresses.
  • Social Insurance Numbers (SINs) and Corporate Business Numbers (BN/HST).
  • Income records (T4, T5, T3, T5007, NOAs, and foreign reporting forms).
  • Corporate financial statements, trial balances, general ledgers, and director registers.

These records are collected strictly under your informed consent and used exclusively for preparing tax documentation, communicating with the CRA, and managing your client account.

3. Sovereign Canadian Data Residency

All files, onboarding questionnaires, and database records uploaded to FiscalX reside exclusively on servers physically located within Canada:

🛡️

Data Sovereignty Guarantee: Your tax files are hosted in Amazon Web Services (AWS) Canada Central (ca-central-1, Montreal, QC). Files are encrypted with AES-256 both in transit and at rest, ensuring your data is protected under Canadian privacy sovereignty and never transferred outside Canadian jurisdiction.

4. Zero Sale or Commercialization of Data

FiscalX never sells, leases, monetizes, or shares your personal or corporate information with third-party advertisers or data brokers under any circumstances.

5. Retention & Destruction

In accordance with CRA Section 230(4) of the Income Tax Act, books and records must be retained for a minimum period of six (6) years from the end of the last taxation year to which they relate. Following the statutory retention window, physical and digital files are purged using secure cryptographic deletion.

03

CRA Representation & E-Filer Consent Disclosure

Scope of CRA RepID 6SB456C, client verification duties, and audit disclaimers

1. Scope of CRA Representative Access (RepID: 6SB456C)

When you designate Wasim Kadri, CPA / FiscalX Professional Corporation as your authorized representative using Representative ID 6SB456C:

  • Personal Tax (T1): Level 2 online access allows us to view tax slips, prior-year Notices of Assessment, RRSP limits, and correspond with the CRA on your behalf.
  • Corporate & HST (T2/RT): Level 3 access allows us to review corporate assessments, file returns, make address adjustments, and manage filings on your corporate account.

2. Taxpayer Representation Warranty & Truthfulness

Under Canadian federal tax law, the primary legal responsibility for the veracity and completeness of a tax return rests unconditionally with the taxpayer. By providing documents to FiscalX, you warrant that all stated income (domestic and foreign), worldwide bank accounts, real estate holdings, and claimed expenses are factual, supported by valid receipts, and in compliance with the Income Tax Act.

3. Electronic Transmission Authorization (Form T183 / T183CORP)

FiscalX will not electronically transmit any personal (T1) or corporate (T2) tax return to the CRA until you have signed CRA Form T183 (*Information Return for Electronic Filing of an Individual's Income Tax and Benefit Return*) or Form T183CORP. Electronic signatures executed through our client portal are legally binding under part 2 of the Personal Information Protection and Electronic Documents Act.

4. Audit & Reassessment Immunity Disclaimer

Preparation and electronic filing of a tax return by a Chartered Professional Accountant does not confer immunity from CRA review, desk audit, or field examination. The CRA selects returns at random or based on sector-specific criteria. While FiscalX vigorously defends client returns under our representation agreements, FiscalX is not liable for taxes, interest, or statutory penalties assessed by the CRA resulting from disallowed deductions, lack of client receipts, or undisclosed income.

04

Professional Accounting & Tax Advice Disclaimer

CPA Ontario professional standards, web content boundaries, and formal retainers

1. Informational & Educational Purpose Only

All materials, articles, calendar deadline reminders, and calculators presented on fiscalx.ca are intended solely for general informational and educational purposes. They do not constitute formal legal, accounting, tax, or investment advice and should not be relied upon as a substitute for an in-depth consultation tailored to your unique financial situation.

2. No Practitioner-Client Privilege by Web Interaction

Sending an inquiry through our contact form, messaging via WhatsApp, or scheduling an appointment does not automatically establish a formal CPA-client relationship. A professional fiduciary relationship is established solely upon the mutual execution of an official FiscalX Engagement Letter defining the specific scope of work, fees, and deliverables.

3. Third-Party Links & Regulatory References

Links to external websites (including the Canada Revenue Agency, CPA Ontario, and QuickBooks Online) are provided for client convenience. FiscalX assumes no responsibility for the accuracy or currency of third-party content or government portal availability.

05

Cloud Infrastructure & Digital Vault Security

Technical telemetry, authentication architecture, and zero-knowledge encryption

FiscalX utilizes serverless cloud infrastructure built specifically to handle mission-critical financial applications. The security architecture includes:

● AWS Cognito Auth

Multi-tier client authentication with PBKDF2/SHA-256 password hashing and short-lived JWT authorization tokens.

● Pre-Signed S3 Vault

All file uploads bypass intermediate servers via time-limited, digitally signed cryptographic URLs straight to private S3 buckets.

● Encrypted DynamoDB

Database ledgers and client profiles are encrypted with AWS KMS customer-managed keys (CMK) at rest.

● Microsoft Graph Sync

Calendar synchronization and video links are provisioned directly through Microsoft 365 OAuth 2.0 corporate APIs.

Call WhatsApp