Security

Your client data is in your control.

Your clients trust you with their most sensitive financial information. Taxpartna is built with enterprise-grade security at every layer, so you can trust us with it.

AWS
SOC 2 Type 2 infrastructure
AES-256
Encryption standard
MFA
Mandatory for all users
You
Control data retention
01 / Protection

Six layers of protection.

From the moment data enters Taxpartna to the moment it’s purged, every layer is secured, monitored and controlled.

AWS infrastructure

Enterprise cloud foundation

Taxpartna is built on Amazon Web Services, the same infrastructure trusted by governments, financial institutions, and the world's most security-conscious organisations.

  • Hosted in AWS data centres with ISO 27001 certification
  • Multi-region redundancy and automatic failover
  • Data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Continuous infrastructure monitoring and threat detection

Self-hosted frontier AI

Fully contained AI pipeline

Taxpartna operates a fully self-contained pipeline powered by self-hosted frontier AI with a proprietary overlay. Your documents are not sent to third-party AI models for the processing of your reviews.

  • Proprietary AI overlay purpose-built for Australian tax QA
  • Documents not sent to third-party AI models for your reviews
  • Self-contained review pipeline with no external LLM calls
  • Transparent AI reasoning in all review outputs

SOC 2 certified infrastructure

Built on verified foundations

Taxpartna runs exclusively on AWS infrastructure which holds SOC 2 Type 2 certification, the gold standard for cloud security compliance, independently audited by third-party assessors.

  • AWS SOC 2 Type 2 covers Security, Availability and Confidentiality
  • Taxpartna inherits enterprise-grade compliance controls
  • All data processing within certified AWS environments
  • AWS compliance reports available via AWS Artifact

Multi-factor authentication

Every access verified

MFA is mandatory across all Taxpartna accounts, so no single credential alone can grant access to your firm's review data.

  • MFA required for all user accounts, no exceptions
  • Supports authenticator apps (TOTP standard)
  • Role-based access controls for team management
  • Automatic session expiry and re-authentication

Auto purge

Data deletion you configure

Set up an automatic purge cycle in your account settings so submitted files are removed on the schedule you choose. You decide how long documents are kept before they are permanently deleted.

  • Configure an auto-purge cycle in your account settings
  • Choose how long documents are kept before deletion
  • Automated deletion logs for your compliance records
  • Purge on request at any time

You control retention

User-controlled data policy

You control data retention with mandatory auto-purge periods. Configure your own retention settings so your client data is handled exactly how your firm requires.

  • Mandatory automatic purge on a schedule you control
  • Configure your own auto-purge periods for submitted data
  • Performance Dashboard users: non-sensitive metadata retained securely on AWS to track staff performance
  • No data sold, shared, or used for AI training
  • Full data lineage transparency on request
02 / Data flow

How your data flows.

A clear, transparent view of what happens from submission to purge.

Step 01

Encrypted upload

Your file is encrypted in transit using TLS 1.3 from the moment you hit submit.

Step 02

Secure processing

AI analysis runs in an isolated, secure environment on AWS infrastructure. No human ever reads your file.

Step 03

Review generated

Results are generated and returned to you. No results data is stored beyond your active session.

Step 04

Configurable purge

Your submitted file is purged according to the auto-purge cycle you configure in your account settings. Once purged, zero trace remains in our systems.

Questions about our security?

Talk to our security team.

Our team is happy to walk you through our security architecture and compliance documentation.

Understand how our controls support secure tax quality assurance and fit within the TPB quality management system requirements for tax agents. You can also read how security shapes our approach to AI tax software for Australian accounting firms.

Contact our security team