Security at EntityTaxPro
Your financial data is among the most sensitive information you own. We treat it that way.
Encryption
- TLS 1.3 for all data in transit
- AES-256 encryption for all data at rest
- Database-level encryption with per-tenant isolation
- Encrypted backups retained for 90 days
Access Control
- Role-based access control (RBAC) on every resource
- Multi-factor authentication (MFA) enforced for admins
- Session timeout after inactivity
- Complete audit log of all user actions
Infrastructure
- Cloud hosting with multi-region failover
- 99.9% uptime SLA
- Automated daily backups with point-in-time recovery
- DDoS mitigation at the network edge
Authentication
- Secure password hashing with salt
- OAuth 2.0 / OIDC compliant SSO
- Magic link and passkey support
- Brute-force protection with progressive lockout
Monitoring
- Automated anomaly detection
- Real-time alerts for suspicious login patterns
- Immutable transaction and access logs
- Incident response SLA: 4 hours for critical issues
Data Isolation
- Strict tenant data separation — no cross-org access
- All queries scoped to authenticated organization
- Service accounts never exposed to browser clients
- API rate limiting on all endpoints
Report a Security Issue
Responsible disclosure is welcomed and appreciated. Security researchers who report valid vulnerabilities receive credit in our Hall of Fame.
[email protected]