Security

Security and data handling

A factual summary of the controls currently in place. We do not hold third-party security certifications.

Encryption in transit

All traffic to Exempt Tax Desk is served over HTTPS/TLS.

Private document storage

Documents uploaded for K-1 Review and Board Decks are held in private, server-controlled storage that is not publicly accessible, and are deleted after processing (K-1 Review residual cleanup within about 24 hours; Board Decks within about one hour). Return Review documents are processed and not intentionally retained.

Server-side access controls

Access limits, payment verification and admin functions are enforced on the server. Database tables are protected by row-level access rules.

Authentication

Accounts use Exempt Tax Desk sign-in. The Excel add-in requires a signed-in account.

Excel: selection only

The add-in reads only the cells you select, and only when you choose to. It never sends the workbook file, file name, other worksheets, formulas, comments or workbook metadata. Requests are limited to 5,000 cells.

Explicit, user-triggered analysis

Nothing is sent when you change your selection. Analysis runs only after you click Analyze Selection, and the add-in writes to your workbook only when you click Add to Review Sheet.

Retention

Selected workbook values and Ask questions are processed to produce a response and are not stored in our application database. Usage records keep a one-way hash of Ask questions for quota enforcement. Workbook values are never included in analytics.

Third-party processing

Content you submit is sent to AI and infrastructure providers as needed to produce the requested result.

Payments

Payments for paid services are handled by Stripe. Exempt Tax Desk does not store card numbers.

See also the Privacy Policy. Security questions: info@exempttaxdesk.com.