1. Introduction – What is Publication 5593?
Internal Revenue Service (IRS) Publication 5593 is titled “FAQs for LB&I Audits – TDC SFS-SM.” While that collection of letters may look like alphabet soup, it stands for something simple: Frequently Asked Questions for Large Business and International (LB&I) Audits using Taxpayer Digital Communications Secure File Sharing – Secure Messaging. It is the official IRS handbook that explains how corporations, cross-border businesses, and high-asset taxpayers can safely exchange electronic messages and digital records with IRS audit teams.
According to the official IRS Forms, Instructions, and Publications repository updates verified for 2026, Publication 5593 (Catalog Number 92622E) remains the active operational guidance for digital audit file sharing. While originally revised in April 2022 (Rev. 4-2022) and posted to IRS systems in May 2022, its standards govern active digital interactions throughout the 2026 tax year alongside Internal Revenue Manual audit planning procedures. As the IRS accelerates its paperless processing initiatives in 2026, understanding this publication ensures you know how to send files securely without relying on antiquated snail mail or fax machines.
2. Who Should Read This Publication
Publication 5593 is primarily designed for corporate tax directors, controllers, external Certified Public Accountants (CPAs), and tax attorneys who represent business entities during LB&I examinations. The LB&I division generally oversees domestic and foreign businesses with enterprise assets greater than $10 million, as well as complex international individual filings. If your company receives an audit notice from an LB&I revenue agent, this document is essential reading.
Individual taxpayers undergoing complex audits or those who file joint returns involving international reporting may also encounter this system. Furthermore, enrolled agents and designated Power of Attorney (POA) representatives need to understand the platform to protect their clients’ legal rights and sensitive data. Even if you do not run a massive conglomerate, understanding how the IRS secures corporate data offers valuable insight into government cybersecurity practices.
3. Key Topics Covered
Publication 5593 is structured in a clear question-and-answer format that walks taxpayers through every stage of using the secure messaging portal. It covers technical prerequisites, account registration, system security frameworks, and communication boundaries.
- Program Purpose: Why the IRS uses digital file sharing and its permanent status beyond temporary pandemic-era relief.
- System Security & Hosting: How federal standards protect commercial tax records in government cloud storage.
- User Consent & Onboarding: Requirements for authorizing users and completing mandatory consent documentation.
- File Transfer Rules: File size maximums, supported file formats, and restricted file extensions.
- Account Maintenance & Troubleshooting: Session timeouts, password reset rules, and automatic lockout policies.
4. Detailed Breakdown of Main Concepts
To use the system successfully, taxpayers must understand the foundational components of the Taxpayer Digital Communications (TDC) environment. The IRS designed this portal to balance convenience with strict federal privacy mandates.
Cloud Architecture and Cybersecurity
The TDC SFS-SM platform is hosted within Amazon Web Services (AWS) GovCloud. It has achieved full authorization under the Federal Risk and Authorization Management Program (FedRAMP) and adheres to National Institute of Standards and Technology (NIST) standards. It also complies with Federal Information Processing Standards (FIPS) and undergoes mandatory annual security reviews by IRS Cybersecurity teams. This enterprise-grade encryption guarantees that sensitive trade secrets, financial ledgers, and employee identifiers cannot be intercepted in transit.
Upload Capacities and File Restrictions
The platform eliminates the need to mail unencrypted thumb drives or reams of paper ledger printouts. Taxpayers and their authorized representatives can upload files up to 1 gigabyte (1 GB) per submission, and multiple files or compressed ZIP archives are permitted. Conversely, outgoing messages from IRS agents are capped at 25 megabytes (25 MB). To protect federal servers from viruses and malicious macros, the system strictly blocks dangerous extensions, such as executable programs (.exe, .bat) and macro-enabled spreadsheets (.xlsm, .docm).
| Feature | Taxpayer / Representative Limit | IRS Agent Limit |
|---|---|---|
| Maximum Upload Size | 1 Gigabyte (1 GB) per submission | 25 Megabytes (25 MB) per submission |
| Session Inactivity Timeout | 15 minutes (warning at 90 seconds) | Standard agency protocols |
| Account Lockout Threshold | Locked after 2 failed password resets | Internal agency IT management |
Account Lockout and Session Security
The system enforces rigorous session hygiene to prevent unauthorized access from shared workplace computers. If a user is inactive for 15 minutes, the system will log them out automatically, displaying a warning prompt 90 seconds before termination. If a user fails two consecutive password reset attempts, the account enters an automatic lockout state. Taxpayers do not need to call a helpdesk to resolve this lockout; the system automatically unlocks itself after 120 minutes.
5. Practical Examples or Scenarios
Scenario 1: Uploading Large Accounting Ledgers
Acme Manufacturing is undergoing an LB&I corporate examination regarding research and development tax credits. The revenue agent issues an Information Document Request (IDR) seeking three years of detailed general ledgers totaling 650 megabytes. Instead of splitting the records across dozens of encrypted emails or mailing a physical hard drive, Acme’s tax director uploads the entire ZIP archive directly through the TDC secure portal. The agent receives the package instantly, and both parties have a verifiable digital audit trail confirming the delivery date.
Scenario 2: The Macro Spreadsheet Block
A corporate tax manager prepares a financial reconciliation model saved as an Excel Macro-Enabled Workbook (.xlsm) to answer an examiner’s question. When attempting to upload the file to TDC SFS-SM, the portal rejects the transmission. Referring to Publication 5593, the manager realizes that macro-enabled files are prohibited to protect against embedded malicious scripts. The manager saves the file as a standard, macro-free workbook (.xlsx) or exports the schedules to PDF, allowing the upload to complete smoothly.
6. How This Publication Relates to Specific Forms
Publication 5593 works in tandem with several essential IRS administrative forms. Taxpayers cannot simply log in and begin messaging; proper legal authorizations must be filed beforehand.
- TDC SFS-SM Consent Form: The mandatory agreement that formalizes a taxpayer’s election to communicate digitally. An officer with legal binding authority or an authorized representative must sign this form before the IRS creates portal accounts.
- Form 2848 (Power of Attorney and Declaration of Representative): A representative holding an active Form 2848 on file has the legal power to sign the TDC consent form and correspond on the taxpayer’s behalf.
- Form 8821 (Tax Information Authorization): While Form 8821 allows an individual or firm to view tax data, Publication 5593 explicitly clarifies that Form 8821 does not grant legal signing authority for the TDC consent agreement.
- IRS Letter 2205 / 2205-L: The initial audit notification letters sent to businesses. Revenue agents typically reference Publication 5593 and provide enrollment instructions during the initial conference following this letter.
7. Common Misunderstandings Clarified
Many taxpayers confuse general commercial email with IRS secure messaging. Regular email is unencrypted across public networks and violates federal privacy statutes for transmitting confidential tax information. Publication 5593 clarifies that TDC SFS-SM is not standard email; it is a dedicated web portal that uses secure browser encryption without requiring taxpayers to purchase special third-party digital certificates.
Another frequent misconception is that taxpayers can freely open new conversation threads at any time. In the TDC platform, communication is structured around open audit items. Initial case files and message threads must be initiated by the assigned IRS revenue agent. Once the agent creates the secure workspace, the taxpayer or representative can respond, submit documents, and exchange notes freely.
8. Why This Publication Matters for Taxpayers
Audits involving large corporations or cross-border assets move at a rapid pace and involve strict statutory deadlines. Missing an Information Document Request deadline can lead to formal summonses or the disallowance of valuable tax positions. Publication 5593 gives taxpayers the operational rules needed to deliver substantial records instantly, cutting out transit delays associated with postal delivery.
Additionally, the guidance provides peace of mind regarding data security. Identity theft and corporate espionage are serious risks in modern business environments. Knowing that your records are protected by FedRAMP-certified cloud storage and NIST compliance ensures that your company’s private financial data remains shielded from bad actors throughout the audit process.
9. Frequently Asked Questions
Is participation in the TDC SFS-SM system mandatory?
No, participation is entirely voluntary. Taxpayers who prefer traditional paper mail, in-person record delivery, or secure fax may continue using those methods, though digital transfer is significantly faster.
Can both spouses use the system for a joint return audit?
Yes, either spouse may sign the consent form for a joint return under examination. Both spouses can be listed as authorized contacts in the consent appendix to receive individual access credentials.
What should I do if my account is locked out?
If you fail two password reset attempts, the system places your account in a temporary safety lockout. You do not need to submit an IT ticket; the platform automatically restores access after 120 minutes.
Can I submit password-protected PDF or ZIP files?
Yes, you can upload encrypted or password-protected archives. However, you must communicate the decryption password to your assigned revenue agent through a separate message or during a phone conference.
10. Conclusion
IRS Publication 5593 serves as an indispensable roadmap for navigating the digital side of Large Business and International audits. By eliminating paper waste, speeding up file deliveries, and offering up to 1 gigabyte of transfer space, the TDC SFS-SM system streamlines what has historically been a burdensome audit correspondence process.
Whether you are a corporate tax director preparing for an upcoming examination or an advisor representing a multinational client, mastering the rules in Publication 5593 ensures your documentation moves securely, quickly, and in full compliance with IRS standards.
