Policy
Acceptable Use Policy
The rules that keep RequestFlow safe for firms, clients, and the documents they exchange.
Last updated: June 9, 2026
What this page covers
RequestFlow is for legitimate client document collection by bookkeeping, accounting, tax prep, payroll, controller, and fractional CFO firms.
Allowed use
Use RequestFlow to request, receive, track, and export client documents related to your firm's work.
- Create checklist requests for monthly close, tax prep, payroll reports, onboarding, cleanup, and missing-item follow-up.
- Ask clients to upload files to the correct checklist item.
- Use reminders, receipts, audit logs, and exports for legitimate firm operations.
Prohibited use
Do not use RequestFlow to harm the service, other customers, clients, or third parties.
- Do not upload unlawful, harmful, misleading, abusive, or malicious content.
- Do not use RequestFlow to distribute malware, credential theft, phishing, spam, or fraudulent requests.
- Do not attempt to bypass access controls, probe non-public systems, scrape private endpoints, or abuse rate limits.
- Do not impersonate another firm, client, provider, or RequestFlow representative.
Security testing
Security reports are welcome, but testing must be responsible and must not put customer data or service availability at risk.
- Do not access, modify, delete, or exfiltrate data that is not yours.
- Do not run denial-of-service testing, destructive scanning, spam, phishing, or social engineering.
- Report security concerns through /security-contact/.
Firm responsibility
Your firm remains responsible for how it uses RequestFlow with clients.
- Use accurate checklist item names and send requests only to the intended client or contact.
- Maintain your own compliance program, written information security plan, professional obligations, client consent practices, and records-retention decisions.
- Remove users, revoke links, and delete data when access is no longer appropriate.
Questions before launch?
Tell us what your firm needs to know before launch, and we will follow up with the right privacy, terms, or security details.