How we protect your data
Your bank transactions and tax records are some of the most sensitive information you have. These are the standards our service is being built to.
Where we are today: our service hasn’t opened yet, so we hold no client financial data. Each control below is checked before the first client joins.
We never ask for your passwords
We never ask for your HMRC password. You approve our HMRC authorisation request yourself. Bank feeds use open banking, so you sign in on your own bank’s site and we never see your bank login.
Read-only bank access
The bank feed can read transactions. It cannot move money, make payments or change anything in your account.
You confirm before anything is sent
Nothing goes to HMRC until you have seen the figures and confirmed them. Every confirmation is recorded with the date and time.
Encrypted, EU-hosted, least access
Your data is encrypted in transit and at rest, held on Amazon Web Services servers in the EU (Stockholm, Sweden), which UK data protection law treats as adequate, and only the parts of the system that need a piece of data can reach it. Secrets are kept in a managed vault, never in code.
Backups and an audit trail
Records are backed up, and every change to your books and every submission to HMRC is written to an audit log.
Kept as long as the law asks, no longer
We keep your records for as long as HMRC and anti-money-laundering law require, then delete them.
This website
This site sets no cookies and runs no third-party trackers. The landlord tools find a property’s region from our own copy of the ONS postcode directory: your browser fetches only the postcode’s first letters, so the postcode itself is never sent to us or anyone else.
Found a security problem?
Please email hello@rightotax.co.uk with “Security” in the subject line. Tell us what you found and how to reproduce it. We’ll reply and keep you updated until it’s fixed. Our security.txt has the same details.
What happens next
- Read our privacy notice for what we collect and why.
- See how it works from bank feed to HMRC.
- Questions? Email hello@rightotax.co.uk.