How we protect your business data

What we do not collect

We do not ask for a Social Security number. The product is built around your EIN, and data we never collect cannot be exposed.

How your EIN is stored

Your EIN is encrypted with a key unique to that record, which is itself wrapped by a master key held in a key management service. It is never written to application logs, analytics, or error traces. Lists and support screens show only the last four digits.

Access and audit

Access to your data is limited to your own account. Staff access is role-restricted and requires multi-factor authentication. Sensitive actions — viewing an EIN, changing a plan, submitting a report — are written to an append-only audit trail that records who did what, and when, by reference rather than by value.

Files

Report PDFs are stored privately and reachable only through short-lived signed links. There is no public URL for your report.