Security
SOC 2 Type II controls plus continuous hardening. We engineer security into every part of your tax workflow.
Our controls are independently audited every year. Your clients' data is protected by the same standards trusted by banks and healthcare providers.
Point auditors to OWASP-aligned, SOC 2 Type II reports and control mappings. Show encryption and access controls on demand.
Keep files, comments, and credentials protected with AES-256 at rest, TLS in transit, and Bcrypt for passwords.
Send expiring magic links instead of attachments. Keep access simple for clients and private for you.
Apply role-based access and least-privilege defaults.
Record who requested, uploaded, reviewed, and signed so you can retrace every decision in an audit.
Fully redundant, multi-region protection with a ransomware-proof design.
Our firms trust us with their most sensitive data.
See for yourself. Select a date below and schedule a meeting with a Truss Account Executive.