Security practices, with verification still in progress.
R&A Pro-Tax uses access controls and private document storage to support tax-office operations. A source and policy review is complete, but signed-in live role and office-isolation tests are still pending. We do not claim a completed end-to-end audit or regulatory certification.
Data Protection
Private records are handled behind authenticated access and encrypted connections. Specific coverage requires continuing verification.
Role-Based Access
Workspaces use assigned roles and server-side checks. Signed-in role-by-role testing on the live site remains pending.
Office Boundaries
Office-scoped access policies are in place. Live cross-office isolation still needs a second approved synthetic office for testing.
Sensitive Information
Sensitive values are designed to be restricted and masked where shown. Authorized reveal paths require further signed-in checks.
Audit Records
Selected account and access events are logged. Coverage and retention are not yet verified for every action.
Compliance Records
Verification and approval workflows retain records; we do not claim every record is immutable or independently certified.
Private Documents
Office documents use private storage and scoped access. Download behavior awaits signed-in, cross-office verification.
Lifecycle Controls
Office onboarding and status changes use governed steps and review points. End-to-end live acceptance is pending.
Onboarding Review
Activation includes authorized review of office requirements; completion depends on the applicable onboarding path.
Expiration Tracking
Some credentials and documents support expiration tracking. Alert delivery is not guaranteed or fully verified.
Renewal Workflows
Renewal workflows are available where configured. Automated reminders and delivery have not been verified end to end.
Security Review
Source and policy checks have been completed; owner MFA enforcement and signed-in live tests remain open.
IRS Pub 4557 · FTC Safeguards · GLBA
We use these published safeguards as references for our security practices. Alignment and operation of every control have not been independently verified. Read our security policy for more detail.