Security

Your client data never leaves your control.

Your clients trust you with their most sensitive financial information. Taxpartna is built with enterprise-grade security at every layer, so you can trust us with it.

AWS
SOC 2 Type 2 infrastructure
AES-256
Encryption standard
MFA
Mandatory for all users
You
Control data retention
01 / Protection

Six layers of protection.

From the moment data enters Taxpartna to the moment it’s purged, every layer is secured, monitored and controlled.

AWS infrastructure

Enterprise cloud foundation

Taxpartna is built on Amazon Web Services, the same infrastructure trusted by governments, financial institutions, and the world's most security-conscious organisations.

  • Hosted in AWS data centres with ISO 27001 certification
  • Multi-region redundancy and automatic failover
  • Data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Continuous infrastructure monitoring and threat detection

Self-hosted frontier AI

Fully contained AI pipeline

Unlike other AI solutions, Taxpartna operates a fully self-contained pipeline powered by self-hosted frontier AI with a proprietary overlay. No user data is ever shared with third-party LLMs such as OpenAI or Anthropic. It stays within our enterprise-grade ecosystem only.

  • Proprietary AI overlay purpose-built for Australian tax QA
  • Zero data sharing with any third-party AI LLM
  • No external API calls to OpenAI, Anthropic or other LLMs
  • Transparent AI reasoning in all review outputs

SOC 2 certified infrastructure

Built on verified foundations

Taxpartna runs exclusively on AWS infrastructure which holds SOC 2 Type 2 certification, the gold standard for cloud security compliance, independently audited by third-party assessors.

  • AWS SOC 2 Type 2 covers Security, Availability and Confidentiality
  • Taxpartna inherits enterprise-grade compliance controls
  • All data processing within certified AWS environments
  • AWS compliance reports available via AWS Artifact

Multi-factor authentication

Every access verified

MFA is mandatory across all Taxpartna accounts, so no single credential alone can grant access to your firm's review data.

  • MFA required for all user accounts, no exceptions
  • Supports authenticator apps (TOTP standard)
  • Role-based access controls for team management
  • Automatic session expiry and re-authentication

Auto purge

Data deletion you configure

Set up an automatic purge cycle in your account settings so submitted files are removed on the schedule you choose. You decide how long documents are kept before they are permanently deleted.

  • Configure an auto-purge cycle in your account settings
  • Choose how long documents are kept before deletion
  • Automated deletion logs for your compliance records
  • Purge on request at any time

You control retention

User-controlled data policy

You are in complete control of your data. Configure your own retention settings — including a zero-retention, auto-purge cycle — so your client data is handled exactly how your firm requires.

  • Zero-retention available as an account setting
  • Set your own auto-purge cycle for submitted data
  • Performance Dashboard users: non-sensitive metadata retained securely on AWS to track staff performance
  • No data sold, shared, or used for AI training
  • Full data lineage transparency on request
02 / Data flow

How your data flows.

A clear, transparent view of what happens from submission to purge.

Step 01

Encrypted upload

Your file is encrypted in transit using TLS 1.3 from the moment you hit submit.

Step 02

Secure processing

AI analysis runs in an isolated, secure environment on AWS infrastructure. No human ever reads your file.

Step 03

Review generated

Results are generated and returned to you. No results data is stored beyond your active session.

Step 04

Configurable purge

Your submitted file is purged according to the auto-purge cycle you configure in your account settings. Once purged, zero trace remains in our systems.

Questions about our security?

Talk to our security team.

Our team is happy to walk you through our security architecture and compliance documentation.

Understand how our controls support secure tax quality assurance and fit within the TPB quality management system requirements for tax agents.

Contact our security team