Security You Can Count On
Your tax data is among the most sensitive information your business holds. We protect it like it's our own.
Built to SOC 2
Formal audit planned pre-launch
IRS Authorized
e-File provider
256-bit SSL
All data encrypted
GDPR Ready
Privacy by design
Our Security Architecture
Encryption at Every Level
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Encryption keys are rotated regularly and managed via HSMs.
Access Controls
Role-based permissions ensure team members only access data relevant to their role. All access is logged and auditable. Optional SSO for Enterprise accounts.
Infrastructure Security
Hosted on AWS with multi-region redundancy. Automated backups every hour. Infrastructure hardened per CIS benchmarks with continuous vulnerability scanning.
Incident Response
Continuous automated monitoring for threats, backed by a formal incident response plan with scheduled testing. Users are notified within 72 hours of any data security event.
Our Commitments to You
We never sell or share your data with third parties for marketing purposes
We never store complete credit card numbers — payments processed via PCI-compliant gateway
All employee access to customer data is logged and audited
Independent penetration testing scheduled ahead of launch, then on an ongoing basis
You can request full data deletion at any time
Automatic session timeout after 30 minutes of inactivity
All passwords are hashed using bcrypt with per-user salts
Database-level encryption for all PII including SSNs and EINs