Guide

Form 8821: what a tax information authorization actually permits

Written by CompDefend. Founded by Umair Nazir, EA — Enrolled Agent, federally licensed to practice before the IRS. Last updated 2026-08-23.

Form 8821, Tax Information Authorization, lets you name a person or company to inspect and receive your confidential IRS account information for the specific forms and periods you list. It does not let that designee speak for you, sign for you, or argue your case — that is Form 2848, a power of attorney. Think of 8821 as a read-only key to a defined set of IRS records, and 2848 as the key plus the authority to act.

Form 8821 in brief

Form 8821 authorizes a designee to inspect and/or receive your confidential tax information for the type of tax, form numbers, and years or periods you list on line 3 — nothing broader.
It does not authorize representation: the designee cannot speak on your behalf, advocate your position, sign waivers or agreements, or receive your refund. Representation requires Form 2848.
A CAF-recorded Form 8821 stays in effect for its listed matters until revoked, withdrawn, or displaced; a new 8821 automatically revokes prior ones unless you check line 5 and attach copies.
The IRS will not record future periods more than 3 years past December 31 of the year it receives the form, and it returns any form that says "all years" or "all periods."
Monitoring services such as CompDefend Radar run on an 8821 scoped to specific business form modules — for Radar, Forms 1120-S, 941 and 940 under one EIN. The form is a legal instrument; deciding who holds one, and for what, is a defensibility control.

What Form 8821 permits, and what it does not

Your returns and account records are confidential by statute. Internal Revenue Code section 6103 opens with "Returns and return information shall be confidential," and section 6103(c) carves out one path: the IRS may disclose your information to a person you designate in a written consent. Form 8821 is the IRS's standard consent. The instructions say it "authorizes any individual, corporation, firm, organization, or partnership you designate to inspect and/or receive your confidential information verbally or in writing for the type of tax and the years or periods you list on Form 8821." In practice, the designee can pull your business tax transcripts for the listed matters, and gets copies of your IRS letters only if you check the line 2 box. The designee need not be a credentialed practitioner; the IRS processing manual confirms "A Form 8821 designee can be an individual or a business entity" (IRM 21.3.7).

The instructions draw the other line in one sentence. Form 8821 "doesn't authorize your designee to speak on your behalf; to execute a request to allow disclosure of return or return information to another third party; to advocate your position regarding federal tax laws; to execute waivers, consents, closing agreements; or represent you in any other manner before the IRS." And: "A designee is never allowed to endorse or negotiate a taxpayer's refund check or receive a taxpayer's refund via direct deposit." Those acts belong to a representative under Form 2848, who must be eligible to practice before the IRS — an attorney, CPA, enrolled agent, or another category listed in Publication 947. The practical test: if you want someone to see what the IRS has recorded, 8821 is enough. If you want someone to act — answer an examiner, negotiate a balance, sign a consent — you need 2848.

Form 8821 versus Form 2848
Question	Form 8821 (tax information authorization)	Form 2848 (power of attorney)
Who can be named	Any individual or business entity, including a software company	Only individuals eligible to practice before the IRS
Read account and return information	Yes, for the listed forms and periods	Yes, for the listed matters
Receive copies of IRS notices	Yes, if the line 2 box is checked	Yes, if requested on the form
Speak to the IRS for you, argue your position	No	Yes
Sign agreements, waivers, consents, closing agreements	No	Yes, within the listed matters
Sign your tax return	No	Only in limited cases, with the line 5a box checked
Receive or endorse your refund	Never	Never
Recorded on the CAF	Yes, unless specific-use (line 4)	Yes, for most matters

The CAF, specific-use authorizations, and how long an 8821 lasts

The Centralized Authorization File (CAF) is the IRS database that records who is authorized on which taxpayer's accounts, for which forms and periods. Each designee carries a CAF number; if it has none, you "enter 'NONE,' and the IRS will issue one directly to your designee." Some sites present a CAF number as proof the IRS has vetted a firm. Publication 947 says the opposite: "The issuance of a CAF number does not indicate that an individual is either recognized or authorized to practice before the IRS." It is an identifier, not a license — judge a designee by what it may do with your data and how it secures it. Line 4 then separates two kinds of 8821. A CAF-recorded authorization is the ongoing kind: it stays on file and covers the listed periods as the account changes, which is what bookkeeping, preparer and monitoring relationships run on. A specific-use authorization is a one-time disclosure the IRS does not record — the instructions give "Requests to disclose information to loan companies or educational institutions" and background checks as examples. It "will not revoke any prior tax information authorizations," and for non-tax purposes "the IRS must receive the Form 8821 within 120 days of the taxpayer's signature date," a rule drawn from Treas. Reg. §301.6103(c)-1 that, per the instructions, "doesn't apply to a Form 8821 submitted to authorize disclosure for the purpose of assistance with a tax matter with the IRS."

Form 8821 does not print a conventional expiration date, but a CAF record is not retained indefinitely. IRM 3.30.123 says Forms 2848 and 8821 on the Centralized Authorization File are purged seven years from the signed date. A separate limit applies when you file: "The IRS will not record on the CAF system future tax years or periods listed that exceed 3 years from December 31 of the year that the IRS receives the tax information authorization." Ongoing relationships therefore need refreshed authorizations. To revoke without naming anyone new, send a copy of the original with "REVOKE" written across the top, freshly signed and dated, to the IRS office where it was filed. To replace a designee, file a new 8821; by default that revokes the old ones. The IRS processes authorizations "in the order we receive them, whether submitted online, by fax or mail" with no fixed turnaround, so expect a gap between signing and access in either direction.

How to complete the key lines

Form 8821, line by line (Rev. January 2021)

Line 1 — Taxpayer information.For a business, enter the legal name exactly as the IRS has it, the EIN, and the address — not a DBA, and not the owner's SSN. Some sites suggest an 8821 updates your address with the IRS; the instructions say "Address information provided on Form 8821 will not change your last known address with the IRS."
Line 2 — Designee(s).Name and address of up to two designees, each with a CAF number or "NONE." Decide deliberately whether to check "Check if to be sent copies of notices and communications" — that box authorizes the IRS to send the designee copies of notices and communications. It does not redirect your original mail.
Line 3 — Tax information.Four columns: (a) type of tax, such as income, employment or civil penalty; (b) form number; (c) years or periods; (d) specific tax matters. Be precise: "Don't use a general reference such as 'All years,' 'All periods,' or 'All taxes.' Any tax information authorization with a general reference will be returned." Ranges are fine — "2017 thru 2019" or quarterly "2nd 2017–3rd 2018." In column (d), enter "not applicable" unless you mean to narrow the authority. Line 3 also carries the box "By checking here, I authorize access to my IRS records via an Intermediate Service Provider," a third-party transcript retrieval channel. Leave it blank unless the designee has told you it uses one.
Line 4 — Specific use not recorded on CAF.Check only for the one-time, non-CAF purposes described above; then skip line 5, since the authorization will not disturb existing ones.
Line 5 — Retention or revocation of prior authorizations.The default is easy to miss: "the IRS will automatically revoke all prior tax information authorizations on file unless you instruct otherwise." To keep an existing 8821 — your CPA's, for example — check the box and attach a copy of it.
Line 6 — Signature.For a corporation, an officer with authority to bind the entity signs with a title; the form has the signer certify "I have the legal authority to execute this form with respect to the tax matters and tax periods shown on line 3." For a partnership, any person who was a partner during part of the covered period may sign. By mail or fax, "Digital, electronic, or typed-font signatures are not valid signatures" — handwrite it. Electronic signatures are accepted only through the online submission channel, and a designee with no existing relationship to you must verify your identity against photo ID before submitting a remotely e-signed form.

Before you sign an 8821 for your business

Legal name and EIN on line 1 match the IRS's records — no DBA, no owner SSN.
The designee's legal name, address and CAF number match what it told you.
Line 3 lists only the forms and periods the designee needs, within the three-year horizon.
You decided on purpose about the notice-copies box (line 2) and the Intermediate Service Provider box (line 3).
Any authorization that should survive — your CPA's, for instance — is retained on line 5 with a copy attached.
An officer with authority to bind the entity signs with a title, by hand if the form goes by mail or fax.
You keep a copy and add it to a running list of who can see your IRS account.

How monitoring services like CompDefend use Form 8821

The mechanism. IRS business account monitoring works because an 8821 designee can pull the account transcript for the listed periods each week and compare it with the last one. A change — a penalty assessed, a balance posted, an examination indicator, a missing-return flag — becomes visible once the IRS has fully processed it. That may occur before or after related mail reaches you. CompDefend Radar is built on exactly this: the business names CompDefend on line 2, line 3 lists the supported form modules, and the account is read weekly.
Scope matches the form. Radar's 8821 covers Forms 1120-S, 941 and 940 under one business EIN. Form 1040 (the owner), Form 1065, Form 1120, and information-return penalty accounts are outside that authorization and Radar's scope. An 8821 on your S corporation says nothing about your personal return.
Read-only authority, not representation. Because the authorization is an 8821 and not a 2848, CompDefend cannot represent you, respond to the IRS, sign anything, or receive a refund. Revoking the 8821 ends future authorized access through the IRS; it does not erase information lawfully received while the authorization was active.
What a transcript can and cannot say. A transaction code can show that a balance or penalty appeared or that examination activity began. It does not name the specific notice the IRS mailed, and no deadline can be computed from it — the letter controls. Monitoring tells you where to look; it does not replace reading the notice.

Three layers: the instrument versus the control

Legal requirement. Your return information is confidential under IRC §6103. The IRS may disclose it to a designee only on a written consent that meets Treas. Reg. §301.6103(c)-1: signed and dated, naming the taxpayer, the recipient, the type of information and the years. The designee may use it only for the purpose you granted and may not pass it on without your permission. Form 8821 is the instrument that satisfies this.
IRS administrative expectation. The form must be completed the way the instructions say — no general references, periods within the three-year horizon, a handwritten signature for mail and fax, the 120-day window for non-tax uses. Miss these and the IRS returns the form; nothing is recorded.
Defensibility control. Who holds an 8821 on your business, for which forms, with or without notice copies, and whether anyone reads the account between filings — none of that is required by law. It is a choice within CompDefend's defensibility framework, and it gives the business a recurring way to detect a posted payroll deposit penalty or new balance. Keeping a register of active authorizations and revoking stale ones — the bookkeeper who left two years ago — is the same kind of control: a practice you choose, not a rule.

Where CompDefend fits — and where it does not

What CompDefend does

Runs CompDefend Radar under a Form 8821 that names CompDefend as a designee for the supported business form modules — Forms 1120-S, 941 and 940 — under one business EIN.
Reads the authorized account weekly and alerts you when supported activity appears: new balances and penalties, payroll deposit penalties and the trust-fund indicator, examination and missing-return activity, collection context, and generic notice-related activity.
Tells you before you sign exactly which forms and periods the authorization covers, and how to revoke it.
Measures your business's broader federal tax posture free, through the adaptive assessment behind the Federal Tax Defensibility Index.

What CompDefend does not do

Represent you before the IRS — Form 8821 is a read-only authorization, not a power of attorney, and CompDefend does not hold a Form 2848 for anyone.
Prepare or file returns, respond to notices on your behalf, or give individualized legal advice.
Form 1040, Form 1065, Form 1120, and information-return penalty accounts are outside the authorization and outside Radar's scope.
Tell you which specific notice the IRS mailed or when your response is due; transcripts show codes, and the letter sets the deadline.

See where your business stands

Deciding who may read your IRS account is one control among several. The free assessment scores the domains that actually apply to your business — filings, payroll, contractors, owner pay, records, and the account itself — so you can see where an 8821-based watch fits in the larger picture.

Check My Business Tax Defensibility See how CompDefend Radar works