Security and data
You hold sensitive HMRC data. We treat it that way, by design rather than as an afterthought.
Data is stored in UK-region infrastructure, appropriate for HMRC and UK tax information.
Sensitive credentials and tokens are encrypted at rest. Connections are encrypted in transit.
Client data is held securely and is only accessible to your firm and the people you authorise.
Two-factor authentication protects access for everyone handling client data. Teams can also sign in with their existing Microsoft 365 or Xero account.
Every access to client data is logged, so there is a clear record of who saw what and when.
The app is distributed through the App Store and Google Play, under their review and security standards. White-label branding is available on the Branded plan.
We read each client's tax position through approved agent channels and your practice systems, then show it back in your app. The taxpayer sees their own position, and you see your clients.
The full detail lives in our Privacy Policy and Terms of Service; a signed data processing agreement is part of every firm's onboarding.