Trust, Security & Compliance
Taxnova handles sensitive financial and engineering data. Here's how we protect it — and what independent auditors have verified.
Assurance
SOC 2 Type 2 audit report covering Security — access via Trust Center
Encrypted in transit and at rest
Annual third-party penetration testing
Multi-factor authentication and least-privilege access for all internal systems
Privacy
Your data is never used to train or fine-tune any AI model. We only engage LLM providers who contractually commit to the same.
Isolated storage environment per customer
We never sell customer data. Our full list of sub-processors is available on request.
UK GDPR & GDPR — DPA available on request
Access
No source code access — we read metadata, never the contents of your files
Read-only integrations — we ingest, we don't write back
Scoped, minimum access OAuth tokens you can revoke at any time
Slack access limited to the public channels you've explicitly connected