Trust & Confidentiality
How we protect your clients' financial data
As a new firm, we'd rather tell you exactly what we do and don't have in place than overstate it. Here's the honest picture.
Our practices
Five commitments, in writing
Every one of these is in place before we touch a single client file.
- 01
NDA on every engagement
No client data is accessed until a mutual non-disclosure agreement is signed — before onboarding begins, not after.
- 02
Scoped, client-by-client access
We request access to the specific client files we're working on, not blanket access to your entire practice management system.
- 03
No credential sharing over unsecured channels
Access is granted through your platform's own user-invite and permission system wherever it's supported, rather than shared logins over email or chat.
- 04
Your data stays your data
We do not resell, repurpose, or retain client financial data beyond what's needed to deliver the agreed work.
- 05
Direct partner accountability
Every engagement has a named partner responsible for it — not an anonymous offshore queue.
How your data is handled
Nothing moves before the paperwork.
- 1
NDA signed
Before onboarding begins
- 2
§7216 consent
In place wherever tax data is involved
- 3
Scoped access
Client-by-client, via your platform's invites
- 4
Named partner
Accountable for every engagement
Tax data
IRC §7216 consent, handled before any data moves
US tax rules (IRC §7216) require your client's consent before their tax return information is disclosed to a third-party preparer — with an added disclosure requirement when that preparer is located outside the US.
We'll help your firm put a compliant consent process in place before any client data is shared with us, rather than leaving your firm to figure it out after the fact.
You stay the licensed professional of record
Our partners are ACCA-qualified, not US-licensed CPAs or EAs — so we never sign, file, or represent a client before the IRS or a state agency. We prepare returns, filings, and workpapers to your firm's standard; your licensed CPA or EA reviews, signs, and retains full professional responsibility and the client relationship, exactly as if the work were done in-house.
Roadmap
What we're working toward
We do not currently hold formal certifications such as SOC 2 or ISO 27001 — as a newly established firm, these are on our roadmap as the practice grows. If a formal security review is part of your firm's vendor process, tell us and we'll work through it directly with you.
Partners reply within one business day
Have specific security requirements?
Tell us what your firm's vendor process requires and we'll walk through it before any engagement starts.