Frequently asked questions
What Certifitax is
What does Certifitax do?
It makes BIR Form 2307 from the figures a payor enters, and delivers it to the person it was issued to. Both sides can open every certificate for five years.
Who is it for?
Payors and payees. Payors are the organizations that make payments and withhold tax, such as hospitals, clinics, HMOs, and companies. Payees are the people and businesses those organizations pay, such as doctors, consultants, and suppliers. Everyone signs up the same way, as themselves; if you issue certificates, you create your organization once you are in. Plenty of people are both.
Is Certifitax a BIR system, or accredited by the BIR?
No. It is a private platform operated by Medtax Solutions Inc. It produces certificates in the layouts the BIR prescribes, from the figures you supply. It does not file anything with the BIR and does not check whether what you enter is correct.
Platform Terms, Section 14: No Duty to Monitor or VerifyDoes Certifitax file my returns or remit the tax I withheld?
No. Filing, remittance, and the alphalist remain the withholding agent's responsibility, exactly as they are today. Certifitax replaces the spreadsheet and the email attachment, not the accountant.
Why Certifitax
We already issue 2307s from a spreadsheet. Why change?
Because the spreadsheet is where the time goes. Every quarter someone retypes the same template, re-enters the same payee details, saves a PDF per doctor, and sends each one as an attachment to the right address. On Certifitax the payee details are already on file. You enter the amounts, the certificate is generated in the prescribed layout, and it is emailed to the payee the moment you issue it. Nothing to attach, nothing to address, nothing to file away.
What does a payor actually save?
The retyping, the one-at-a-time emailing, and the searching afterwards. Every certificate you have ever issued is listed with its status and the date it was sent, so when a doctor asks for last year's Q2 certificate you find it in seconds instead of digging through a sent folder.
What does a payee get out of it?
One place for every certificate, from every organization that pays you. Each one arrives by email the moment it is issued, and it also sits in your dashboard, downloadable any time, for five years. No more asking the hospital's accounting office to resend a copy at filing season.
Can I download my certificates?
Yes. Every certificate in your account can be downloaded as a PDF whenever you need it, individually, for as long as it is retained. You do not need to ask the organization that issued it.
What if I am paid by several hospitals?
They all land in the same account. Each organization issues to you separately, and you see them together, listed by period and by payor. That is the view an accountant wants at filing time.
Does the recipient need an account to receive a certificate?
The certificate is emailed when it is issued. A free account adds the dashboard, the five-year history, and downloads on demand, without having to keep track of attachments.
Is it hard to set up?
No. An organization registers, adds its payees, and can issue the same day. There is no software to install and nothing for your IT team to configure. It works in the browser.
Cost
What's the catch?
None. In the future, we'll introduce augmented and optional services. You can purchase them if you'd like, but they're optional, and you can keep using the site as it is.
Will professionals ever be charged?
No. Receiving your own certificates will never cost you anything.
Data and privacy
Who is responsible for the data on a certificate?
The organization that issues it is the personal information controller for the recipient's name, TIN, and income figures. Medtax is the processor, acting on the organization's instructions. This is set out in the Data Privacy Policy and the Platform Terms, and both say the same thing.
Data Privacy Policy, Section VIIIWhere is the data stored?
On Amazon Web Services, which may not use that data for any purpose of its own. The region in use is published on our Service Providers page and updated when it changes. Two other services act on our instruction: an email delivery service that sends your messages, and Anthropic, which answers the help chat.
Service ProvidersDo you sell or share data?
We never sell it. It is shared only as the Data Privacy Policy describes: with the two parties on the certificate, with our hosting provider, and with the BIR or a court where the law requires.
Do you use our data for marketing, or to test your systems?
Neither. We do not send marketing email to recipients, and we do not use real user data to test or develop the platform. Development runs on generated seed data.
Is Medtax registered with the National Privacy Commission?
Yes, with a designated Data Protection Officer reachable at dpo@certifi.tax.
A recipient wants a certificate corrected or deleted. Who handles that?
The organization that issued it, which is the controller for that record. If the request reaches Medtax, we refer it to the issuer and act on the issuer's lawful instruction. Certificates that must be kept by law cannot be deleted before the retention period ends.
Accounts and access
Our accounting firm handles our 2307s. Can they use Certifitax for us?
Yes. Your organization holds its own account and grants the firm access as an authorized user. The firm can hold access to as many client accounts as it serves. What it cannot do is issue certificates for several clients from one account of its own. Each payor is its own account, because each is its own withholding agent.
Who signs the certificates?
Form 2307 carries the name and position of the withholding agent's authorized signatory. You designate that person in the platform. Medtax does not verify their authority and does not require a board resolution or Secretary's Certificate. That is your organization's declaration to make, and you are responsible for keeping it current.
Two people from our hospital both registered. Now what?
Only one account may be held per TIN and branch code; the Platform Terms make a duplicate a breach. If it has happened, write to contact@certifi.tax and we will merge the two into one account and add the second person as an authorized user. Separately registered branches are separate withholding agents and each hold their own account.
Who at Medtax can see our certificates?
Access is restricted to what operating the service requires. Certificates are visible to the organization that issued them and the person named on them, and to no other account on the platform.
Leaving
Can we leave whenever we want?
Yes, immediately, with no fee. If fees have been introduced and paid in advance, the unused portion is refunded pro rata.
What happens to our certificates if we leave?
You can no longer issue new ones. Everything already issued stays retrievable, by you and by the people you issued to, for the five-year retention period. On request we provide an export of your certificates and account data in a machine-readable format within 30 days, whether or not you have left.
Can Medtax close our account?
Yes, and the same rule applies: issuing stops, retrieval of issued certificates does not. Medtax will not delete or withhold an issued certificate on account of termination.
Platform Terms, Section 19: Term and TerminationNot answered here?
Write to us and a person will reply.