-
Security is essential
We're constantly improving our security posture and we welcome all feedback. Immediate questions or concerns can be addressed to security@retrotax-aci.com. Here are just a few of the measures we take to prevent data leaks and unauthorized data access:
-
Third Party Auditing
We're excited to announce that Retrotax has successfully completed the Service Organization Controls (SOC) 2 Type 2 audit. A detailed report for all existing clients can be made available by emailing security@retrotax-aci.com.
-
Annual Penetration Testing
We've conducted annual penetration testing since 2016 and while we do not currently have a bug bounty program, that's on our roadmap. Please review our responsible disclosure policy.
-
Multifactor Authentication & Encryption
We enforce multi-factor authentication across all devices and services and all of our applications enforce end-to-end encryption for data in transit (TLS) and data at rest (AES-256).
-
Built on Amazon Web Service's Cloud
We prioritize our responsibilities in AWS's Shared Responsibility Model and leverage AWS for their portion.
-
-