How we protect your information
You trust us with your passport, Social Security number, income and bank details. Protecting them is a legal duty for a tax preparer and part of how we work every day.
The rules we follow
IRS e-file and Acceptance Agent rules
As an IRS Authorized e-file Provider and Certified Acceptance Agent, we follow the IRS rules for protecting taxpayer data and identity documents, including IRS Publication 4557, Safeguarding Taxpayer Data.
FTC Safeguards Rule
US tax preparers must keep a written information security plan. Ours names the person responsible, assesses risks, sets safeguards and is reviewed regularly.
Your consent, under IRC §7216
We use your tax information only to prepare and file your return. We never sell it, and we don't share it for any other purpose without your written consent.
How your data is protected
The short version is below. The details are in our security overview.
Encrypted connections
Our website and client account use HTTPS, so data is encrypted between your device and our servers.
Encrypted storage
Documents and returns are stored encrypted with AES-256.
Multi-factor sign-in
Everyone on our team signs in to client data with multi-factor authentication.
Need-to-know access
Only the people working on your return can see it. Access is removed as soon as someone leaves the team.
Trained people
Every team member, including seasonal staff, completes data security training before working with client data, and again every year.
Backups and deletion
Data is backed up. We keep your documents for at least 3 years after filing, then ask you whether to delete them; without an answer they move to an encrypted archive.
If something goes wrong
We keep a written incident response plan. If client data were ever compromised, we would contain the problem, report it to the IRS as tax preparers must, notify the FTC where required, and tell affected clients directly with clear next steps.
Report a concern
Noticed something suspicious, or got a message pretending to be us? Write to support@taxfrom.us.
How to protect yourself
- The IRS doesn't start contact by email, text or social media to ask for personal or financial information.
- We will never ask for your online banking password.
- Get an Identity Protection PIN from the IRS. It stops anyone else filing a return with your SSN.
- Use a strong, unique password for your Tax From US account.
- Upload documents through your account, not over social media chats.