Trust, Security & Compliance

Taxnova handles sensitive financial and engineering data. Here's how we protect it — and what independent auditors have verified.

Assurance

  • SOC 2 Type 2 audit report covering Security — access via Trust Center

  • Encrypted in transit and at rest

  • Annual third-party penetration testing

  • Multi-factor authentication and least-privilege access for all internal systems

Privacy

  • Your data is never used to train or fine-tune any AI model. We only engage LLM providers who contractually commit to the same.

  • Isolated storage environment per customer

  • We never sell customer data. Our full list of sub-processors is available on request.

  • UK GDPR & GDPR — DPA available on request

Access

  • No source code access — we read metadata, never the contents of your files

  • Read-only integrations — we ingest, we don't write back

  • Scoped, minimum access OAuth tokens you can revoke at any time

  • Slack access limited to the public channels you've explicitly connected