VERIFICATION

How to check our work

Most tax tools ask you to trust a number. Here is how to verify ours — and where we draw the line.

Checkable today

800+ deterministic assertions run on every change. A regression fails the build before it ships.
Every constant cites its source — IRS, SSA, the Federal Register, state revenue departments — printed next to the figure it produced, in the workpaper your CPA reviews.
Rules are effective-dated. Every computation stamps the ruleset it used. Where a value is not yet confirmed for a tax year, the engine says so rather than guessing.
Tenant isolation is enforced in the database (row-level security), not in application code.
Rule changes are monitored against primary sources, and nothing reaches the platform without human review. That record is public — see Law Watch.

Where we draw the line

We do not say “audit-ready,” “guaranteed,” or “always current.” Those are claims we cannot prove, and you would be right not to believe them from anyone. Outputs are planning illustrations for a licensed professional to review.

The engine’s arithmetic is locked by the assertions above. Its tax positions — the places where a defensible reading could go more than one way — are one practitioner’s judgment. We keep a written schedule of those calls, ordered by consequence. Ask and we will send it.

Document Vault controls

The optional Document Vault stores tax forms that may contain a taxpayer identification number, SSN or ITIN. What protects them:

Private bucket; organization-scoped access enforced in the database on both the file and its record.
Download links expire after 60 seconds.
Every download is recorded against the person who made it — and a download is refused if that record cannot be written.
Deletion is restricted to owner and admin, and is recorded by the database itself, not by the application.
Files cannot be overwritten in place.

Deletion is permanent — there is no versioning and no recoverable copy. See the Privacy Policy §2.3(b) for the full account.

Independent review status

CPA tie-out of the engine

Not yet complete

Offered to design partners as a joint exercise — prepared returns tied to the engine, line by line.

SOC 2 Type II

Not held

We answer security questionnaires directly, with documentation of the controls described below.

Third-party penetration test

Not yet performed

A test commissioned on ourselves would carry no independent standing.

This page is updated when any of the above changes.

Evaluating us for a firm or an athletic department? Talk to us — we will answer a security questionnaire in writing, and we will tell you plainly where the gaps are.