Draft — to be reviewed by counsel before publication.
Security
The technical and organizational measures that protect records on the platform.
Isolation
Each office is a separate tenant. Row-level security in the database enforces the boundary for every query, and every data access carries the office's context.
Encryption
Traffic is encrypted in transit with HTTPS and strict transport security. Identifiers such as Social Security numbers are encrypted at rest with only the masked form readable by the application.
Access
Staff accounts require a password and a code from an authenticator app. Permissions follow roles, and page-level and record-level checks run on every request.
Monitoring and audit
Sensitive actions are written to an append-only audit log. Backups run nightly and are encrypted; restores are tested.
Reporting a concern
Email support@taxharbor.com. We acknowledge reports promptly and keep reporters informed.
