01. Encryption Standards
TaxoBuddy employs industry-leading encryption standards to ensure that professional research and firm data remain confidential and tamper-proof.
02. Data in Transit
All communication between user browsers and TaxoBuddy servers is encrypted using TLS 1.3 or higher. We enforce HTTP Strict Transport Security (HSTS) to prevent downgrade attacks.
03. Data at Rest
Sensitive information, including user profiles and firm-specific research logs, is encrypted at rest using AES-256 (Advanced Encryption Standard).
- Unique encryption keys per firm silo.
- Automated key rotation managed via AWS KMS.
- No plaintext storage of professional intellectual property.