You hand us W-2s, 1099s, and Social Security numbers. That's not a transaction — it's trust. Here is exactly how we protect it, layer by layer, and the legal duties we operate under.
Every connection to the site and client portal is encrypted with TLS. Documents you upload travel over encrypted channels only — never as email attachments.
Files in your Secure Document Vault and records in our database are encrypted at rest (AES-256) on infrastructure operated by providers that maintain SOC 2 Type II audits.
Sessions expire automatically, and we will never ask for your password by email, text, or phone.
Access rules are enforced at the database row level: your records are readable by your account and your preparer — no one else. There is no shared bucket of client files.
| Provider | What it does | What it can see |
|---|---|---|
| Supabase (AWS) | Database, document vault, authentication | Encrypted client records and files |
| Netlify | Hosts the website and portal | No client documents |
| Resend | Sends transactional email (receipts, status updates) | Your email address and message content we send you |
| Anthropic | Powers Ascend AI answers inside the portal | Only the questions you ask it — Ascend AI conversations are not used to prepare your return without your preparer's review |
| Sanity | Manages public website content | No client data |
That's the whole list. No data brokers, no advertisers, no "partners." If this table ever changes, this page changes the same day.
If you believe you've found a vulnerability, or you get a suspicious message claiming to be us, tell us and we'll respond within one business day. If we ever discover an incident affecting your data, you'll hear it from us first — plainly, promptly, and with exactly what we're doing about it.
ascendtaxesco@gmail.com