Data Security
Last updated: November 12, 2026
How Partnertax AI Inc. protects client data, and where we stand on SOC 2. The full statement of what we collect and how it is used is in the Privacy Policy.
1. SOC 2
Partnertax AI Inc. is engineered around the SOC 2 Trust Services Criteria, and we are actively working toward SOC 2 Type II compliance.
- Security program built on the SOC 2 Trust Services Criteria
- Regular reviews and updates of security controls to address emerging threats
2. Encryption in transit and at rest
Industry-standard measures protect your data end to end, from the moment it leaves your browser to how it is stored.
- TLS/SSL encryption for all data in transit
- Encryption at rest with secure password hashing
- Uploaded documents are stored and encrypted at rest using AWS Key Management Service (KMS). The encryption keys are held within AWS KMS and are never exported from it; our systems use these keys only under strict access controls to process your documents.
3. Role-based access controls
Access to data is scoped by role: firm owners, team members, GPs, and partners each see only what their role permits.
- Role-based access controls across every workspace
- Fraud and unauthorized-access detection
- Every client entity in its own silo: documents, standing facts, and chat memory stay walled off, and nothing blends across clients
4. Client data and AI models
- Client data is never used to train models
- Sensitive identifiers are masked before documents are processed
- A copy of an attached document's text, with sensitive identifiers masked, is retained in encrypted storage so the document can be restored to a chat session, and is deleted when you delete the related chat session or close your account
- QuickBooks and Xero data is used to answer your questions and is not used to train AI models
5. Privacy compliance
Privacy practices aligned with the rules that govern tax professionals and their clients' data.
- California privacy rights honored under CCPA/CPRA
- Designed to support your IRC § 7216 obligations for tax return information
- Administrative, technical, and physical safeguards supporting your WISP
6. Where your data lives
All of the cloud platforms Partnertax AI Inc. uses are US-only. Your data is hosted and processed on US infrastructure.
7. Subprocessors
Infrastructure & hosting: Amazon Web Services, Cloudflare, Vercel, Pinecone
Analytics: PostHog
Research: Partnertax AI Pvt. Ltd., our research wing
8. Questions
Security questions, vendor questionnaires, and WISP reviews: support@partnertax.ai