Multi-Recipient PDF Password-Protection & Secure Distribution Guide

Derived directly from columns in your local CSV so recipients can unlock their PDF without sending raw passwords in plain text.

200 PDFs merged across 1 browser-local FormBatch run(s) (up to 250 rows/run).

Eliminates manually opening and password-protecting 200 individual PDFs in desktop editors.

Run this offline script on your unzipped FormBatch folder to apply 256-bit AES encryption and disable unauthorized modification before emailing:

#!/usr/bin/env bash
# Zero-Cloud Local AES-256 PDF Batch Encryptor for FormBatch Output ZIPs
# Workflow: Finance & Tax — Vendor 1099 Summaries, K-1s & W-9 Verification Packets (200 rows across 1 FormBatch run(s))
# Passphrase Derivation Formula: {VendorID}-{TIN_Last4}-{ZipCode}
set -euo pipefail

INPUT_DIR="./formbatch_unzipped"
ENCRYPTED_DIR="./formbatch_aes256_ready"
KEYRING_CSV="./recipient_pins.csv" # Format: filename,user_password,owner_password

mkdir -p "$ENCRYPTED_DIR"

tail -n +2 "$KEYRING_CSV" | while IFS=',' read -r pdf_file user_pw owner_pw; do
  src_path="${INPUT_DIR}/${pdf_file}"
  out_path="${ENCRYPTED_DIR}/${pdf_file}"
  if [ -f "$src_path" ]; then
    qpdf --encrypt "$user_pw" "$owner_pw" 256 --modify=none --extract=n -- "$src_path" "$out_path"
    echo "[AES-256 LOCKED] ${out_path}"
  fi
done

echo "Completed local AES-256 encryption for 200 FormBatch PDFs (0 bytes uploaded to cloud)."

Instructs each recipient how to construct their PDF password using known account attributes without exposing the password in email text:

Subject: Secure Document Delivery (Finance & Tax — Vendor 1099 Summaries, K-1s & W-9 Verification Packets) — Out-of-Band Password Instructions

Hello,

Attached is your encrypted PDF document packet (2026_tax_1099_{recipient_id}.pdf) generated by our operations team.

For your privacy and regulatory data protection (IRS Pub 4557 & GLBA Safeguards Rule (Encrypted Tax Document Distribution)), this PDF is encrypted with 256-bit AES protection and cannot be opened without your personal passphrase.

HOW TO UNLOCK YOUR ATTACHED PDF:
To protect your security, we never transmit your raw password in the same email as your document. When prompted for the document password, enter your Vendor Account ID, followed by a hyphen, the last 4 digits of your EIN/SSN on file, and your 5-digit billing ZIP code (e.g., VEND4019-9921-60601).

If you have any questions or need your account identifier re-confirmed via SMS, please reply directly to this message.

Best regards,
Operations & Compliance Team