Built as if an auditor reads the code
Tax documents are among the most sensitive things a business owns. These are the rules that govern every byte of them on the platform.
A key per workspace
Every file is AES-256-GCM encrypted with a data key that belongs to your workspace, wrapped by a master key that never leaves the server. A stolen backup is unreadable.
An audit trail nobody can edit
Every action is an entry chained by the SHA-256 hash of the previous one. The database refuses updates and deletes. The chain can be verified at any time.
Approval with a fingerprint
The agent's approval binds to a fingerprint of the return's content. Any later change voids the approval automatically.
The technician sees nothing
The technical administrator runs the system and cannot open a document. Support enters a customer's workspace only with a logged reason for 60 minutes, visible to the customer in their trail.
Single-use links
Downloads go through a token that works once, for five minutes, only for a signed-in member of the workspace. Files are delivered as attachments, never rendered inline.
No data leaves without an assessment
Nothing is sent to an external AI or cloud provider without a documented, approved transfer assessment. None is approved today, so external AI stays off.
Fourteen roles, each seeing only what it needs
From workspace owner to read-only, from tax agent to billing administrator. Any member can be limited to one company inside a group.
| Role | Sees returns | Edits | Approves | Confirms | Billing |
|---|---|---|---|---|---|
| Workspace owner | ✓ | ✓ | – | ✓ | ✓ |
| Company director | ✓ | ✓ | – | ✓ | – |
| Finance manager | ✓ | ✓ | – | – | – |
| Internal accountant | ✓ | ✓ | – | – | – |
| External bookkeeper | ✓ | ✓ | – | – | – |
| Employee | ✓ | ✓ | – | – | – |
| Auditor | ✓ | – | – | – | – |
| Read-only | ✓ | – | – | – | – |
| Billing admin | – | – | – | – | ✓ |
| Tax agent | ✓ | ✓ | ✓ | – | – |
| Compliance admin | – | – | – | – | – |
| Support | – | – | – | – | – |
| Technical admin | – | – | – | – | – |
Compliance and support reach content only through a logged, time-boxed grant.
Security questions
Where are the servers?
In the region, on infrastructure we run. Data residency is on the legal verification list before public launch.
Do you train models on my data?
No. And nothing leaves to an external provider without an approved transfer assessment.
How long do you keep documents?
For the legal retention period (5 years for VAT, 15 for real estate, 7 for corporate tax) and never deleted during a legal hold.
Start with the first document. We guide you through the rest.
Free up to the draft. You pay only for the tax agent's review.