Security
Designed for sensitive financial data
TaxAgentPortal is a multi-tenant SaaS built with strict per-firm data isolation. Each firm operates inside its own secure workspace.
Row-Level Security
Every record is scoped by company_id. Database policies enforce that one firm can never see another firm's data.
Per-firm storage folders
Uploaded documents are stored in company-prefixed paths with private access only.
Role-based access
Super admin, firm admin, staff and client each see only what their role permits.
Audit logs
Sensitive actions write to an immutable audit log scoped to the firm.
MFA & step-up verification
Multi-factor authentication with trusted devices and step-up checks before sensitive actions like Stripe Connect or billing changes.
No false claims
We don't claim SOC2 or government integration. We provide solid, honest security practices.