Access control
- Role-based access for super admin, firm admin, staff and client roles.
- Multi-tenant isolation — each firm operates in its own workspace.
- Row-level security (RLS) policies on database tables.
- Per-firm secure storage folders for uploaded documents.
- Signed URLs for document downloads where supported.
Sensitive identifiers
- TFN and ABN values are masked in UI; full values are not displayed.
- Sensitive values are hashed/encrypted at rest where applicable.
Server-side secrets
- Service-role keys, Stripe secret keys and other privileged credentials are stored server-side and never exposed to the browser.
- Authentication uses short-lived tokens; sessions can be revoked.
Logging and log retention
- Audit logs record sensitive actions, including sign-ins, failed sign-ins, MFA events, e-signature steps, job changes, messages and administrative actions.
- Audit logs are retained for a minimum of 7 years and are never deleted automatically.
- Audit log entries are append-only: they cannot be edited or deleted by users or administrators. If a related record is removed, its audit entries are preserved in a protected archive.
- An investigation hold can be placed on a firm to prevent deletion of its records while an investigation is under way.
What we do NOT claim
We do not claim "bank-level" security, SOC 2 certification, ISO 27001 certification, ATO approval, or "government-grade" security, unless and until we hold the supporting certifications.
Your responsibilities
- Choose a strong, unique password.
- Keep your devices secure and up to date.
- Do not share credentials.
- Report suspicious activity immediately.
No absolute guarantees
No internet service can be 100% secure. We continuously work to reduce risk but cannot guarantee that the platform is immune to all attack or failure.
Contact
Security concerns: support@taxagentportal.com.au