Your data protection is our top priority
We employ bank-level security measures to safeguard your sensitive data
We use the same encryption technology as major financial institutions to protect your data during transmission and storage.
Your information is stored in Australian SOC 2 compliant data centers with 24/7 physical security and redundant systems.
Add an extra layer of security to your account with optional 2FA, preventing unauthorized access even if your password is compromised.
Our systems undergo routine penetration testing and security audits by independent cybersecurity experts.
Use your device's fingerprint or face recognition for quick and secure access to your tax information.
We strictly adhere to the Australian Privacy Act and maintain comprehensive data protection policies.
How we protect your information at every step
We've implemented multiple layers of authentication to keep your account secure:
You'll also receive email notifications about important account activities, such as password changes or login attempts from new devices.
Your data is protected both in transit and at rest:
We never store sensitive information like tax file numbers in plain text and employ advanced key management systems.
Our technical infrastructure is built with security at its core:
We employ a dedicated security team that responds to potential threats 24/7 and continuously improves our security posture.
We meet or exceed industry standards for data protection
ISO 27001 Certified
SOC 2 Compliant
ATO DSP Certified
PCI DSS Compliant
GDPR Compliant
We undergo regular independent security audits and maintain certifications with leading security standards organizations. Our security practices are continuously updated to address emerging threats and comply with evolving regulations.
Our comprehensive approach to protecting your information
How we collect, use, and protect your personal information
We collect information necessary to provide our tax services, including:
We never collect more information than necessary to provide our services.
Your information is used solely for:
We never sell your personal information to third parties for marketing purposes.
As an Australian service provider, we respect your rights to:
For a complete explanation of our privacy practices, please review our full Privacy Policy.
Answers to common questions about our security measures
Your tax data is protected using multiple security layers. We employ 256-bit encryption (the same used by banks) for all data transmission and storage. Our systems are hosted in secure Australian data centers with physical security measures, and we implement strict access controls so that only authorized personnel can access your information when necessary for service provision.
Two-factor authentication (2FA) adds an extra security layer by requiring two forms of verification when you log in: something you know (password) and something you have (mobile device). To set up 2FA, log into your account, go to "Security Settings," and select "Enable Two-Factor Authentication." You can choose between SMS verification or using an authenticator app like Google Authenticator or Authy. We strongly recommend enabling this feature for maximum account security.
We retain your tax information for as long as necessary to provide our services and comply with legal requirements. For tax returns, the ATO requires taxpayers to keep records for five years from the date of lodgment. Accordingly, we maintain your tax documents for this period to assist with any ATO inquiries. You can request deletion of certain information (subject to legal retention requirements) through your account settings or by contacting our support team.
No, Taxo.au has never experienced a data breach. We maintain a proactive security posture with continuous monitoring, regular security assessments, and a dedicated security team. In the unlikely event of a security incident affecting your data, we are committed to transparent communication and would notify affected users promptly as required by the Australian Privacy Act and other applicable regulations.
We only share your information with third parties in limited circumstances: (1) when necessary to provide our services (such as submitting your return to the ATO), (2) with service providers who help us operate our platform (all of whom are bound by strict confidentiality agreements), (3) if required by law or legal process, or (4) with your explicit consent. We never sell your personal information to third parties for marketing purposes.
If you suspect unauthorized access to your account, take these immediate steps: (1) Change your password immediately through the "Forgot Password" link if you can't access your account, (2) Enable two-factor authentication if you haven't already, (3) Contact our security team immediately at security@taxo.au or call 1300 TAXO AU, (4) Review your account activity and tax return status for any unauthorized changes, and (5) If you notice any fraudulent activity, also report it to the ATO and relevant authorities. Our security team will work with you to secure your account and investigate any suspicious activity.
Experience peace of mind with our secure tax return platform
