How we protect the return

This page is a customer summary and a draft for attorney review. It is not a completed written information security plan and it is not legal advice.

Social Security numbers, ITINs, and bank accounts are encrypted before they are stored. Session tokens are stored as hashes. Staff sessions idle out sooner than taxpayer sessions. Actions on a return are written to an audit log with the identifier and the bank account removed.

Only the account holder, and staff whose role the return requires, can open it. Uploaded files stay in private storage. The public site does not print a taxpayer identifier.

If you think an account was used without you, write to support@eztax.today and change the password from Account. We will sign the other sessions out when you ask.