Security & privacy
Security and privacy
Tax data stays in a private workspace. We ask only for what we need to prepare your return.
- We never collect your CRA username, password, or MFA codes
- SIN and sensitive data encrypted with application-level encryption
- Documents stored in private encrypted object storage
- Role-based access with deny-by-default authorization
- PIPEDA-aligned privacy request handling
- Canadian data residency targeted for production (ca-central-1)