Security at TaxVant

1. Infrastructure & Hosting

TaxVant runs on Amazon Web Services (AWS). Application data is stored in secure, AWS-managed database services that hold SOC 1/2/3 and ISO 27001 certifications.

2. Encryption

• In Transit: All connections to TaxVant use HTTPS with TLS, meaning data is encrypted as it moves between your browser and our servers.
• At Rest: Your saved scenarios and household inputs are encrypted at rest using industry-standard AES-256 encryption.

3. Authentication & Access

• Passwordless Login: We support authentication exclusively through secure, trusted third-party OAuth providers (Google and Apple). Because of this, we never collect, see, or store your passwords.
• Data Isolation: Access is strictly enforced at the API and application layer. We use secure, encrypted session tokens to verify user identities. The API verifies the authenticated user ID for every request, ensuring you can only retrieve and edit household scenarios associated with your own account.
• Internal Access: Administrative access to our systems is role-based, limited to authorized personnel, and requires multi-factor authentication (MFA).

4. Privacy & Data Handling

• No Data Selling: We do not sell, rent, or trade your personal or financial data to third-party advertisers.
• No Account Linking: TaxVant does not connect to your bank or brokerage accounts. Your real-world credentials never touch our systems.
• Data Ownership: You can update, modify, or permanently delete your account and scenario inputs at any time. When you request deletion, data is soft-deleted for a 30-day grace period before being permanently purged.