W-9 Collection Software: What to Look For
A fair buyer's checklist for W-9 collection software: the five kinds of tools, how they protect TINs, e-signature rules, retention, TIN matching and 1099s.
"W-9 collection software" covers at least five different kinds of tools, from 1099 compliance platforms that also match TINs and e-file, to plain file-request links. Start by deciding which jobs you need done: only collecting completed W-9s, or also verifying TINs and filing 1099s.
General information, not tax or legal advice.
The short answer
Pick the category before the product. If you want TIN matching and 1099 e-filing alongside W-9 collection, look at compliance platforms or your AP tool. If you file 1099s another way and mainly need completed W-9s returned safely, a secure-link collector or your existing firm portal may be enough. Our secure W-9 collection guide covers the underlying workflow.
What "W-9 collection software" can mean
These are our categories, based on how vendors describe their products. Examples are illustrative, not endorsements, and each was checked on the vendor's own page in September 2026.
1. W-9 and 1099 compliance platforms
These bundle W-9 requests with TIN matching and 1099 e-filing. Avalara 1099 & W-9 describes W-9 management, TIN matching and 1099 e-filing through IRIS and FIRE in one product. TaxBandits says recipients can complete and e-sign W-9s from any device with no login, and that it offers IRS TIN matching.
2. AP and bill-pay tools
Some accounts payable tools collect W-9s as part of vendor setup and payment. Melio's 1099 and W-9 management page says its 1099 e-filing is powered by Tax1099, that a Tax1099 account is required, and that fees may apply.
3. Dedicated secure-link collectors
These focus on getting a completed W-9 back from a vendor through a link. getW9 says the vendor or contractor receives a secure link, and its site lists automatic reminders.
4. Accounting-firm portals
Practice-management portals often include document requests. TaxDome's help center describes a quick link for a client or third party to upload files without needing to access the portal.
5. Generic file-request and e-signature tools
General tools can collect a W-9 file but aren't built around tax forms. Dropbox says its file requests let you collect files from people who don't have a Dropbox account, with files landing in a folder you choose.
Why the choice matters
A completed W-9 holds a vendor's TIN, which can be an SSN, ITIN, ATIN or EIN. The W-9 warns requesters that disclosing or using TINs in violation of federal law can bring civil and criminal penalties (Form W-9, Rev. March 2024). IRS instructions require payers to keep W-9 identity information, including SSNs and EINs, confidential, and to use it only to comply with the tax laws (IRS General Instructions for Certain Information Returns). Your software becomes part of how you meet those duties.
What the rules say
Security obligations for firms that prepare tax returns
The FTC Safeguards Rule names an accountant or tax preparation service that is in the business of completing income tax returns as a financial institution (16 CFR Part 314). Firms that prepare tax returns are covered; bookkeeping-only firms should confirm with counsel whether the rule applies to them. For covered firms:
- The rule requires encrypting customer information both in transit over external networks and at rest; if that is infeasible, the Qualified Individual must approve effective compensating controls.
- Covered firms must implement and periodically review access controls so only authorized users can reach customer information.
- The rule requires MFA for anyone accessing any information system, unless the Qualified Individual approves an equivalent or stronger control in writing.
- Covered firms must monitor and log authorized users' activity and detect unauthorized access to or tampering with customer information.
- Customer information must be disposed of securely within two years of last use, unless it is required to be kept by law or regulation or is needed for a legitimate business purpose.
IRS Publication 4557 tells tax pros to send only password-protected, encrypted documents if they must use email, or to use secure file transfer instead of email (IRS Publication 4557).
Electronic W-9 systems
The IRS lets requesters set up a system for payees to submit W-9s electronically, including by fax (Instructions for the Requester of Form W-9). IRS instructions say an electronic W-9 system must generally:
- confirm that the information received is what was sent, and log every access that results in a submission;
- make reasonably certain the submitter is the person named on the form;
- provide the same information as the paper W-9;
- be able to produce a hard copy if the IRS asks; and
- end with the payee's electronic signature under penalties of perjury, when a signature is required.
For W-9s that don't have to be signed, the IRS says an electronic system doesn't need to collect an e-signature or a perjury statement. For ordinary vendor payments the form doesn't require a signature, but requesters may ask for one, and a signed, dated W-9 is what the backup-withholding reliance rules look for.
The requester instructions describe no IRS approval or certification process for these systems.
Retention
The backup withholding regulation requires a payor to keep a W-9 for 3 years from the date the account is opened (26 CFR 31.3406(h)-3), while the IRS's independent-contractor page says to keep the W-9 in your files for four years (IRS: Forms and associated taxes for independent contractors). Many firms keep them at least four years after the last payment; that's practice, not law. See how to store W-9 forms securely.
TIN matching and 1099 filing
IRS TIN Matching is available only to payers, and their authorized agents, that file information returns (IRS: TIN Matching). If you file 10 or more information returns in total, all types combined, you must e-file (IRS Publication 1099), and after January 1, 2027, IRIS is the IRS's only electronic filing system for information returns (IRS: FIRE). Our FIRE-to-IRIS guide explains the change.
Evaluation checklist
Our recommended questions. Ask every vendor the same ones.
Protecting TINs
- How are files and form data protected in transit and at rest? (Record the vendor's own wording.)
- Who can open a completed W-9: which of your staff, and which of the vendor's?
- Is MFA available for everyone on your side who can reach W-9 data?
- Is there a log of who viewed or downloaded each document?
Electronic W-9s (if vendors fill out and sign online)
- How does the tool address each of the five IRS system requirements?
Retention and deletion
- How long does the tool keep documents, and can you change that?
Filing needs
- Do you need TIN matching in the same tool, or will you register for it through IRS e-Services yourself?
- Do you need 1099 e-filing, and does the tool file through IRIS for the 2027 season?
Workflow and vendor experience
- Does the vendor need to create an account?
- Does it work on a phone?
- Are automatic reminders, bulk sending or accounting integrations included, if you need them?
- Is pricing per form, per request, per user or flat?
Comparison by category
W-9 collection tools by category
| Category | Typically covers | Example vendors in this category | Often a fit when |
|---|---|---|---|
| Compliance platforms | W-9 requests and TIN matching, often with 1099 e-filing | Avalara 1099 & W-9; TaxBandits | You want collection, verification and filing in one place |
| AP and bill-pay tools | Tax-form features offered alongside vendor payments (for example, 1099 e-filing through a partner) | Melio | You already pay vendors through the tool |
| Secure-link collectors | A link for the vendor to return a completed W-9 | getW9; W9Vault | You file 1099s elsewhere and mainly need W-9s returned safely |
| Accounting-firm portals | Document requests inside practice management | TaxDome | Your firm already runs client work in a portal |
| Generic file-request and e-signature tools | General-purpose file collection for any document type | Dropbox file requests | You already use the tool and add your own controls |
Product details as of September 2026 (checked on vendors' websites September 26, 2026); check each vendor's site for current features and pricing. Product names are trademarks of their owners; W9Vault is not affiliated with any vendor named here.
Example scenario
Example scenario: Cedar Row Bookkeeping, a made-up two-person firm, collects W-9s for its clients' vendors and files 1099s through a separate service. Its needs: no vendor accounts, no TINs in email, and files moved promptly into its own document system. It tests a secure-link collector and its existing portal against the checklist and records each vendor's security wording in its security plan.
Common mistakes
- Choosing on price before deciding which jobs the tool must do.
- Restating a vendor's security claims as your own findings instead of recording what the vendor says.
How W9Vault supports this workflow
W9Vault is a secure-link collector. Here is exactly what it does:
| W9Vault | |
|---|---|
| How vendors return documents | A secure upload link that expires after 7 days |
| Encryption | Files are encrypted in the vendor's browser before upload; the server never receives the plaintext file |
| Retention | Uploaded files are automatically deleted 30 days after upload for completed requests |
| File types | PDF, JPG, PNG up to 20 MB |
| Documents per request | Several at once: W-9, W-8BEN, ACH form, Invoice, Contract, Government ID; single requests can use "Other" |
| Tracking | Dashboard shows whether each request is sent or completed |
| Not offered | TIN matching, 1099 e-filing, automatic reminders, fillable in-browser W-9 forms, integrations, bulk send |
Plan to download each completed W-9 into your own records before automatic deletion. W9Vault is designed to support a secure collection workflow; the customer remains responsible for their own tax, recordkeeping and security obligations.
Collect W-9s without email attachments
Send vendors a secure, expiring upload link. Files are encrypted in the vendor’s browser before upload.
If you run an accounting practice, our accounting firm document collection guide covers portals and client requests in more depth. Collecting ACH forms too? Read vendor bank change fraud before you update any payment details.
Frequently Asked Questions
The IRS sets requirements for electronic W-9 systems that requesters set up themselves, and the requester instructions describe no IRS approval or certification process for those systems.
Only when a signature is required. For W-9s that do not have to be signed, the IRS says an electronic system does not need to collect an e-signature or a perjury statement. Many requesters still collect one as good practice.
No. IRS TIN Matching is available only to payers, and their authorized agents, that file information returns.
Official resources
- Form W-9 (PDF), Rev. March 2024
- Instructions for the Requester of Form W-9
- IRS General Instructions for Certain Information Returns
- IRS Publication 1099
- IRS: Taxpayer Identification Number (TIN) Matching
- IRS: Filing Information Returns Electronically (FIRE)
- IRS: Forms and associated taxes for independent contractors
- 26 CFR 31.3406(h)-3
- 16 CFR Part 314, FTC Safeguards Rule
- IRS Publication 4557, Safeguarding Taxpayer Data
