GoFileRoom API
Programmatically access GoFileRoom documents, FirmFlow routes, client index fields, and audit trails with a stable REST API. Supergood builds and operates production-grade, unofficial GoFileRoom integrations so your team can automate compliance, audit, and recordkeeping workflows without heavy custo
What is GoFileRoom?
GoFileRoom is a cloud-based document management and workflow platform within the Thomson Reuters CS Professional Suite, purpose-built for accounting, tax, and audit firms. It centralizes document capture, indexing, search, retention, and process routing (via FirmFlow) with granular permissions and audit logging.
Core product areas include:
- Document Management (drawers/cabinets, index fields, OCR, full-text search, versioning, check-in/out)
- FirmFlow Workflow (routes, tasks, approvals, due dates, assignments)
- Security & Governance (role-based access, audit trail, retention schedules, legal hold)
- Client Collaboration (portal publishing, request lists, e-signature integrations)
- Capture & Organization (scan/import, barcode/cover sheets, bulk filing, annotations)
Common data entities:
- Users, Groups, Roles/Permissions (staff, managers, administrators)
- Drawers/Cabinets and Index Fields (e.g., Client ID, Entity, Engagement, Tax Year, Document Type)
- Documents and Versions (PDF, XLSX, DOCX, images, workpapers)
- FirmFlow Workflows (routes, steps, tasks, assignments, statuses)
- Clients/Entities (IDs, names, contact metadata, portal access)
- Audit Logs (access, download, update, check-in/out, delete events)
- Retention Policies and Legal Holds
The GoFileRoom Integration Challenge
Accounting and audit teams live in GoFileRoom, but turning UI-first flows into reliable APIs is non-trivial:
- Index-driven taxonomy: Drawer-specific index fields and custom vocabularies complicate consistent queries
- Check-in/out and versioning: Safe updates require lock awareness and version control
- FirmFlow complexity: Multi-step routes, role-based tasks, and conditional approvals are modeled across screens
- Authentication and: Thomson Reuters ID, MFA, and firm add headless automation hurdles
- Large files and OCR: Scanned workpapers and image-heavy PDFs need robust upload and processing behavior
- Governance: Retention, legal hold, and portal-publishing states must be respected for compliant access
- Entitlements: User- and group-level permissions drive which drawers, clients, and documents are visible
How Supergood Creates GoFileRoom APIs
Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your GoFileRoom tenant.
- Handles username/password and MFA (SMS, email, TOTP) securely
- Maintains session continuity with automated refresh and change detection
- Normalizes drawer/index schemas so you can integrate once across clients and years
- Aligns with customer entitlements and role-based permissions to ensure compliant access
- Implements upload flows with checksums, large-file handling, and post-ingestion validation
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your modules, licensing, and authentication model.
- Supergood Builds and Validates Your API
We deliver a hardened GoFileRoom adapter tailored to your workflows and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as GoFileRoom evolves.
Use Cases
Evidence Collection & PBC Automation
- Generate and sync PBC lists, pulling matching documents by client, engagement, and year - Detect missing evidence and trigger requests or tasks automatically - Attach collected artifacts back to the correct drawer and index set
Continuous Audit & Compliance Monitoring
- Stream audit trails for access and changes into your GRC platform - Flag high-risk events (e.g., off-hours downloads of sensitive binders) - Produce defensible logs for SOC, ISO 27001, and internal audit
Records Retention & Legal Hold
- Report on documents nearing retention thresholds by drawer and policy - Apply legal hold flags and prevent deletes through controlled routes - Enforce metadata completeness and binder integrity across clients
Client & Engagement Sync
- Mirror client/entity lists and drawer index taxonomies into your data warehouse - Normalize engagement structures for cross-firm analytics and reporting - Keep portal-publish status aligned with your client experience tools
Technical Specifications
Authentication
Username/password with MFA (SMS, email, TOTP); supports service accounts or customer-managed credentials
Response format
JSON with consistent resource schemas and pagination across drawers and workflows
Rate limits
Tuned for enterprise throughput while honoring customer entitlements and usage controls
Session management
Automatic reauth and cookie/session rotation with health checks
Data freshness
Near real-time retrieval of documents, index metadata, FirmFlow tasks, and audit logs
Security
Encrypted transport, scoped tokens, and audit logging; respects GoFileRoom role-based permissions
Webhooks
Optional asynchronous delivery for long-running workflows (e.g., OCR completion, route approvals)
Latency
Sub-second responses for list/detail queries under normal load
Throughput
Designed for high-volume document sync and FirmFlow task processing
Reliability
Retry logic, backoff, and idempotency keys minimize duplicate actions
Adaptation
Continuous monitoring for UI/API changes with rapid adapter updates
Frequently asked questions
Supergood supports workflows across Document Management (drawers, index fields, versions), FirmFlow (routes, tasks, approvals), Client/Entity metadata, and Audit Trails, subject to your licensing and entitlements. We scope coverage during integration assessment.
We support username/password + MFA (SMS, email, TOTP) and can operate behind firm when enabled. Sessions are refreshed automatically with secure challenge handling.
Yes. We support chunked uploads with checksum validation and confirm post-ingestion processing states (e.g., OCR complete). We also surface full-text search where available alongside index filters.
Where portal-publish flags are exposed, we can reflect and set those states. We can also ingest e-signature artifacts and attachments from integrated tools (e.g., DocuSign), associating them with the correct document and index metadata when permitted.
We respect GoFileRoom retention policies and legal hold flags by design—blocking destructive actions and surfacing policy metadata in responses. Administrative changes can be routed via FirmFlow where appropriate.