How Black Diamond Tax Solutions safeguards sensitive taxpayer information.
Identity and contact details, taxpayer identifiers (SSN/ITIN), income and deduction records, uploaded tax documents, signatures and the communications you exchange with our team.
Every uploaded file, SSN, MFA secret and message body is encrypted at rest with AES-256-GCM. Connections are protected with TLS. Sessions use secure, httpOnly cookies and expire automatically. Accounts lock after repeated failed sign-ins.
Access follows least-privilege principles: clients see only their own file, preparers see only clients assigned to them, and administrators manage team access. Every access to sensitive data is recorded in a tamper-evident audit log.
When you sign, we record your name, the signing method, timestamp, IP address and a SHA-256 verification hash binding the signature to the request, consistent with the ESIGN Act and IRS e-file requirements.
Records are retained as required by IRS Circular 230 and applicable state rules. We never sell your information and disclose it only to taxing authorities on your behalf or when legally required (IRC §7216).
Update your profile and reminder preferences in Settings at any time, turn on 2-step sign-in, and contact your administrator to request copies or correction of your records.