Security
These are the most sensitive documents you own.
A tax return carries your identifiers, your employer, your full income and where you live. We treat it accordingly, and we would rather tell you exactly how than ask you to take it on faith.
Your Form 16 is never stored
The PDF is read in memory and discarded. Only the extracted figures survive, and your PAN is masked even in those — held as ABCPK****L rather than in full.
Nothing is processed anonymously
You sign in before any document is read. Every computation is tied to a named account, so there is always an attributable record of who consented to what.
Your data stays in India
Model-assisted extraction is off by default. With it off, nothing about your return leaves our own infrastructure — no third-party service sees your salary or your PAN. This is where the company's servers live, regardless of which country's return you are working on.
Exact arithmetic, end to end
Every figure is held as an exact decimal from the parser to the response, never a float that could quietly lose a paisa or a cent. Rounding happens once, at the end, under the target country's own rule.
What we are still working on
A security page that only lists strengths is marketing. These are the things we know need to change before this platform holds taxpayer data at any scale, and we would rather you heard them from us.
Session tokens move to httpOnly cookies
Today the session token is held in browser storage, which any script on the page can read. It needs to move to an httpOnly, SameSite cookie set by the API, with CSRF protection alongside it.
Independent security review
The code has not yet been audited by anyone outside the team. It will be before we handle returns at volume.
Filing approval per country
Submitting directly to a tax authority requires that country's own registration — an e-Return Intermediary licence in India, an ERO in the United States. Until each is granted, nothing is submitted on your behalf there, and we will not imply otherwise.
Found something wrong?
If you have found a security problem, tell us before you tell anyone else and we will fix it quickly and credit you.
How to reach us