--- title: "Accounting document vault in Morocco — React Box" description: "Scan, file and share your accounting documents with your firm. Timestamped audit trail, controlled access and a vault built for ten years of retention." url: https://www.react-box.com/en/vault lang: en --- Document vault # The vault for your accounting documents Scan, file and share your documents with your firm. Every document has its place, every action leaves a trace — for ten years. [Create my account](https://www.react-box.com/auth/sign-up)[See pricing](https://www.react-box.com/en/pricing) react-box.com/dashboard/vault ![The React Box vault: Contracts, Tax documents, Purchase and Sales invoice folders, each with its document count and the date of its latest upload.](https://assets.react-box.com/shots/web/en/vault-2400.webp?v=2026-09-19) ## Filing that holds itself together ### Linked requests When your accountant asks for a document, your upload lands straight in the right folder and settles the request. ![A document request opened in React Box: the expected document, who asked for it, the due date and what has been filed.](https://assets.react-box.com/shots/web/en/document-request-2400.webp?v=2026-09-19) ### Full audit trail Upload, view, download, move: every action is logged with author and timestamp, and the log stays browsable from your dashboard. ![A vault document opened in the React Box mobile app, with its tags and activity log.](https://assets.react-box.com/shots/mobile/en/03_vault_document-1080.webp?v=2026-09-19) * ### Mobile scanner Photograph an invoice or a receipt from the iPhone or Android app: the document lands in the vault, already filed in the right category. * ### Structured filing System folders designed for Moroccan bookkeeping — purchases, sales, bank, cash — completed by your own folders and tags. * ### Visibility you control You decide who sees what: hide a document from your firm, restrict it to certain internal roles, or open it to an outside party through an expiring link. * ### Legal retention The vault is built to cover the ten-year retention period required in Morocco: your documents remain accessible for as long as your subscription is active, with the legal weight of the digital document. Each closed financial year is archived as a dated batch, reserved for authorised people, without anything leaving its folder. ## Every document in its place, on both screens One folder open: bank statements grouped by month, dated, ready to open. The same vault in your pocket. react-box.com/dashboard/vault ![The Bank statements folder in the vault, its PDF statements grouped by month with their filing date.](https://assets.react-box.com/shots/web/en/vault-folder-2400.webp?v=2026-09-19) ![The vault in the React Box mobile app, with the same folders as on the web.](https://assets.react-box.com/shots/mobile/en/02_vault_list-1080.webp?v=2026-09-19) ## Documents that stand as proof * ### Evidentiary value Every scanned document keeps its evidentiary value: integrity preserved and an action log, so the file holds up in a DGI audit. * ### Built for ten years The vault covers the legal retention period required in Morocco — ten years — with no paper archives to manage. Access remains conditional on an active subscription. * ### AES-256 encryption Documents are encrypted at rest with AES-256 and transferred through short-lived signed URLs, never publicly exposed. * ### Controlled firm access Your firm accesses the vault through precise roles and permissions; every view or download is timestamped and logged. ## Frequently asked questions ### What is the React Box document vault? The React Box vault is the secure space where a Moroccan business centralizes all its accounting documents — purchase and sales invoices, bank statements, receipts, contracts. Each document is uploaded from the web or the mobile app, filed in folders designed for bookkeeping (purchases, sales, bank, cash), then shared with the accounting firm. Unlike a plain drive or email threads, every document carries a timestamped audit trail and the legal weight of the digital document. The vault is built to cover the ten years of retention required in Morocco and encrypts your documents at rest with AES-256, so nothing gets lost and everything holds up in the event of an audit. ### How long are my documents kept? The vault is sized for the ten years of retention required by Moroccan regulations, with no paper archives or external drives to manage. Your documents stay viewable and downloadable at any time, with their full history, for as long as your subscription is active — you decide whether and when a document is deleted; React Box erases none of them on its own initiative. Each document is downloaded individually from the vault, on the web and on mobile alike. And your business records — sales invoices, purchase invoices, third parties — export to CSV whenever you want, ready to be picked up by a spreadsheet or another bookkeeping tool. A finished financial year is archived as a dated batch — “Financial year 2025” — which takes the paperwork out of day-to-day work without moving or deleting it, and which only authorised people open. This long-term retention, combined with structured filing and the audit trail, replaces binders and archive boxes while staying compliant with legal obligations. ### Can my accounting firm access my vault? Yes. Once your firm is linked to your organization, it accesses your vault through precise roles and permissions, with no need to email anything. The firm can view documents, comment on them, request a missing piece and message you in real time. Every view, download or change is timestamped and logged in the audit trail, with the name of the person who performed it. This access is entirely free for the firm: in React Box only client businesses pay a subscription, and collaborating with your accountant costs nothing extra. ### Are my documents really secure? Security sits at the heart of the vault. Your documents are encrypted at rest with AES-256 and are never publicly exposed: every access goes through a short-lived signed URL. Data is hosted in the European Union and React Box complies with the GDPR and Moroccan law 09-08 on personal data protection. Authentication is handled in-house by React Box, with two-factor authentication (2FA) available on every account, and every action on a document is recorded in a timestamped audit trail. Role-based access control ensures that only authorized people — you, your team and your firm — can see your documents. Nothing is shared without your consent. ### Can I scan my documents from my phone? Yes. With the React Box iOS and Android apps, you photograph an invoice or a receipt and the document lands straight in the vault, already filed in the right category. Scanning comes with AI-assisted OCR that reads the document's key fields, which speeds up processing on the firm's side. You can scan on the fly, as soon as a receipt arrives, instead of piling up paper at month-end. Mobile offers the same organization as the web — folders, tags, document requests, activity log — so owners and accountants work on the same documents wherever they are. ## Put your accounting documents somewhere safe A secure space, shared with your firm, where nothing gets lost. [Create my account](https://www.react-box.com/auth/sign-up)[See the documentation](https://www.react-box.com/en/docs/vault)