AI security & data privacy for tax professionalsClient data deserves serious care.
Tax professionals hold some of the most sensitive data there is. Every automation we build is designed around protecting it.
Last updated:
Aligned with IRS Publication 4557 & the FTC Safeguards Rule
Tax and accounting firms must maintain a Written Information Security Plan (WISP). We design automations to fit inside yours and document every data flow, access control, and vendor so your WISP stays accurate.
No training on your data
We use business and API offerings from AI providers under terms that prohibit using your data to train their models, and we enable zero-data-retention options wherever the provider offers them.
Private & self-hosted deployments
For firms that need data to stay inside their own environment, we deploy automations in your cloud tenant or on your infrastructure, including with open-weight models that never leave your network.
NDAs & data processing agreements
We sign an NDA before your audit and a data processing agreement before touching any client data, as standard.
Security practices in every build
- Encryption in transit (TLS) and at rest
- Least-privilege, role-based access to client data
- Multi-factor authentication on every system we administer
- Audit logs for automated actions and data access
- Human review before anything reaches a filed return or a client
- Redacted or synthetic data for development and testing
- Credentials stored in managed secret vaults, never in code
- Documented offboarding: access revoked and data returned or deleted
What we don't claim
Abakus is a small, independent consultancy. We are not SOC 2 certified, and we will say so plainly rather than imply otherwise. We're happy to complete your vendor security questionnaire and walk through exactly how your data is handled. We are not a law firm or CPA firm; confirm regulatory obligations with your own advisors.
Find out where your hours are going.
In a free 45-minute session we map your workflows and hand you a ranked list of automations for your firm, with estimated hours saved for each. It's yours to keep whether or not you work with us.