Data Security Policy

Protecting your tax and financial data is central to how we operate. This Data Security Policy outlines the safeguards we apply across our platform. It complements our Privacy Policy.

1. Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Data stored on our systems is encrypted at rest using AES-256 encryption.

2. Access controls

We apply the principle of least privilege. Access to systems and data is restricted to authorised personnel and services on a need-to-know basis, protected by strong authentication.

3. Audit logging

We maintain tamper-evident audit logs that record access to and changes of sensitive data, enabling a complete and traceable history of how information is handled.

4. Infrastructure security

Our platform runs on hardened, compliance-focused cloud infrastructure with network isolation, firewalls, regular patching and routine vulnerability assessments.

5. Monitoring and detection

We use automated monitoring and alerting to detect unusual or unauthorised activity, enabling a prompt response around the clock.

6. Data minimisation and retention

We collect only the data required to deliver our services and retain it only for as long as necessary to fulfil legal and operational requirements. Data that is no longer needed is securely deleted or anonymised.

7. Incident response

We maintain an incident-response process to contain, investigate and remediate security incidents, and to notify affected users and authorities where required by law.

8. Your role in security

• Keep your account credentials confidential.
• Use a strong, unique password and secure your email account.
• Report any suspicious activity to us immediately at support@iniciotax.online.

9. Contact us

For questions about this Data Security Policy, contact us at support@iniciotax.online.