Trust & Safety

Security at TaxCompPro

Protecting your data, your clients' information, and your professional reputation is our highest priority.

TLS 1.3 Encryption

PCI DSS via Stripe

AES-256 at Rest

99.9% Uptime SLA

How We Protect You

Multiple layers of security work together to keep your account and data safe.

End-to-End Encryption

All data in transit is encrypted using TLS 1.3. Sensitive data at rest is encrypted with AES-256.

Secure Authentication

We use industry-standard auth protocols with session tokens, and support Google OAuth. Passwords are hashed with bcrypt.

Infrastructure Security

Hosted on Vercel's enterprise infrastructure with isolated environments, DDoS protection, and 99.9% uptime SLA.

Access Controls

Role-based permissions mean your data is only accessible to you and admins under strict audit logging.

Threat Monitoring

Continuous monitoring for unusual activity, automated alerts, and rapid incident response protocols.

Payment Security

Payments are processed by Stripe — PCI DSS Level 1 certified. We never store your card details on our servers.

Your Security Checklist

Use a strong, unique password for your TaxCompPro account

Enable Google Sign-In for stronger authentication

Never share your login credentials with anyone

Log out from shared or public devices

Review your active sessions regularly in account settings

Report suspicious account activity immediately

Frequently Asked Questions

Can TaxCompPro employees read my messages?

Private messages are encrypted and access by staff is restricted to legal obligations and active abuse investigations, with full audit logging.

What happens if there's a data breach?

We will notify all affected users within 72 hours, provide a detailed incident report, and work with authorities as required by law.

How do I report a security vulnerability?

Please email security@taxcomppro.com with details. We have a responsible disclosure policy and will acknowledge reports within 24 hours.

Is my financial data safe?

Yes. All billing is handled by Stripe (PCI DSS Level 1). TaxCompPro never stores card numbers, CVVs, or full account details.

Found a Vulnerability?

We take all security reports seriously and have a responsible disclosure program. Report issues privately and we'll work with you quickly.

Report a Vulnerability