Security
Your file stays on your computer. It holds SSNs, EINs, names and amounts, and we built this so we never see any of it.
| What | Where it runs | What we keep |
|---|---|---|
| Reading and checking your file | Your browser, in a background worker | Nothing |
| Building your IRIS files and the conversion report | Your browser, in the same worker. You download a zip made on your computer. | Nothing |
| Passing a file you drop on the home page to the checker | Your browser's own storage on this computer. Deleted as soon as the checker opens it. If the checker never opens, it is deleted the next time you visit, and it is never used after 5 minutes. | Nothing |
| The waitlist | Our server, then Loops, our email service | Your email, the form types in your file and a rough return count, only if you join |
| The free trial | Our server, then Loops to send your code | Your email, a hash of your code and how many exports you've used |
| The contact form | Our server, then Loops, which emails it to us | What you type into the form: name, email, company, forms, volume and message |
| Analytics and error tracking | None | Nothing |
How we enforce it
- Every page sends a Content Security Policy that lets your browser connect only to our own site. Your browser refuses connections from these pages to any other site.
- Our automated tests load a fake file and fail if any request carries its TINs, names or raw record text.
- We build only from public IRS publications. We never ask for, and never see, your IRIS credentials.