Security Notice

SalesTax50 maintains administrative, technical, and organizational safeguards designed to protect information processed through the Service. Security controls may evolve as the Service changes. This Security Notice describes general safeguards and does not create a warranty, guarantee, service-level agreement, or representation that any system is completely secure.

Current and Intended Safeguards

• Encryption in transit using HTTPS/TLS for supported production connections.
• Appropriate encryption or other protection for sensitive fields at rest where implemented, including credentials, tokens, and tax identifiers.
• Passwords stored using salted cryptographic hashes rather than plaintext.
• Payment processing through specialized third-party payment service providers, with tokenized or processor-controlled payment functionality used where technically supported to reduce storage of sensitive payment credentials within SalesTax50 systems.
• Access controls designed to restrict organization data to authorized users and limit internal production access to personnel or systems with a legitimate operational need.
• Secure session controls, authentication protections, logging, backups, monitoring, rate limiting, firewall or similar controls as implemented in production.
• Customer approval controls designed so AutoFile submissions occur only after an authorized user approves the filing, except where a separate written agreement expressly provides otherwise.
• Filing snapshots and confirmation records maintained as reasonably necessary to document approved and submitted filings.

SalesTax50 may add, replace, enhance, or retire security controls as technology, threats, vendors, and operational needs change. Roadmap items, future certifications, penetration tests, security-framework alignment, or other planned controls are not commitments unless expressly stated in a separate written agreement.

No Absolute Security

No internet transmission, software platform, cloud service, third-party integration, credential system, payment network, government portal, or electronic storage system can be guaranteed to be completely secure, continuously available, or free from unauthorized access. To the maximum extent permitted by law, the Security Notice does not expand SalesTax50's warranties or liability beyond the Terms.

Customer Security Responsibilities

Customers are responsible for maintaining secure devices, protecting login credentials, selecting and supervising authorized users, promptly removing access that is no longer appropriate, maintaining current contact information, using reasonable security practices, and promptly notifying SalesTax50 of suspected unauthorized access or account compromise.

Security Incidents

SalesTax50 will investigate security incidents and provide notifications when required by applicable law or contractual obligations. Any incident notice is based on information reasonably available at the time and does not constitute an admission of fault, wrongdoing, or liability.