Data Security at Taxd
Your financial data is highly sensitive, and protecting it is a core foundational pillar of how we operate.
Taxd is formally registered with the Information Commissioner’s Office (ICO) and operates in strict compliance with all UK GDPR requirements. To ensure your peace of mind, we continuously maintain internationally recognized security standards and independent accreditations.
Our Compliance Framework
We validate our security posture through continuous external audits and alignment with leading security frameworks:
| Standard / Accreditation | What It Means for You |
|---|---|
| ICO Registered | Formally registered with the UK data protection regulator to handle sensitive personal information. |
| UK GDPR Compliant | Strict adherence to UK data privacy laws, ensuring your right to data privacy, access, and control. |
| ISO 27001 Certified | Global best-practice certification verifying that our information security management systems are robust and continually audited. |
| Cyber Essentials | UK government-backed accreditation confirming that our defenses are guarded against a wide range of common cyber threats. |
How We Protect Your Data
We deploy a multi-layered, defense-in-depth security architecture to safeguard your personal and financial information:
- End-to-End Encryption: All data transmitted between your device and our platform is heavily encrypted using industry-standard Secure Sockets Layer (SSL) technology. Furthermore, all data stored on our physical servers is fully encrypted at rest.
- Enterprise Cloud Infrastructure: Our systems are hosted within highly secure, isolated cloud infrastructure provided by Amazon Web Services (AWS)—the exact same infrastructure relied upon by global financial institutions and tier-one technology companies.
- Tokenized Payments via Stripe: All financial transactions are processed securely through Stripe, a leading global payment infrastructure provider. Taxd never stores or sees your raw credit/debit card numbers on our servers, drastically reducing data exposure risk.
- Secure Access Management: We enforce robust user authentication systems with stringent password complexity requirements to actively prevent unauthorized credential stuffing and brute-force access attempts.
What Data Is Shared With HMRC?
We operate on a strict data-minimization principle. We only share data with HMRC when you explicitly authorize us to do so to complete your mandatory tax filings or fulfill direct statutory reporting obligations.
This data package is strictly limited to:
- The exact income figures, asset gains, and allowable expense records you provide.
- The core personal identifiers required to validate your identity, such as your full legal name, Date of Birth, and Unique Taxpayer Reference (UTR).
- Meta-submission data legally mandated by HMRC to process a Self Assessment return.
Our Privacy Guarantee: We never sell, rent, or share your personal data or financial history with third-party marketing firms. The data you enter stays securely within our compliance loop.
Key Points to Remember
- Fully compliant with UK GDPR and securely registered with the ICO.
- Hardened with ISO 27001 certification and Cyber Essentials verification.
- All data is structurally encrypted both in transit (SSL) and at rest on AWS servers.
- Complete payment separation via Stripe protects your financial instruments.
- Information is transmitted to HMRC solely for filing compliance, never for commercial monetization.