Security fundamentals you can rely on.

    VYAX applies industry-standard encryption, access controls, and comprehensive logging to protect sensitive data. Policies for retention and incident handling are documented, so your firm can operate with confidence and consistency.

    Secure Workflows
    End-to-end protection
    Encryption
    AES-256 standard
    Audit Trails
    Complete visibility

    Encryption and security at every stage

    Client Upload

    Browser to server

    TLS 1.3 Encrypted

    Secure Storage

    Secure cloud vault

    AES-256 at Rest

    Activity Logs

    Audit database

    Encrypted & Backed Up

    Preparer View

    Dashboard access

    Role-Based Access
    All data encrypted in transit with TLS 1.3
    Files encrypted at rest with AES-256
    Activity logged with user, timestamp, and IP
    VYAX

    Security Overview

    Security Overview Document

    Download our comprehensive security overview to share with clients, stakeholders, or compliance teams. Includes details on:

    • Encryption standards (TLS 1.3, AES-256)
    • Access control policies
    • Audit trail capabilities
    • Data retention and incident response

    Safeguards

    Encryption at rest and in transit

    All data protected with industry-standard encryption throughout its lifecycle

    Role-based access and least privilege defaults

    Admin and Preparer roles with permissions limited to what each role requires

    Audit trails & consent logs

    Comprehensive logging across uploads and signatures for complete accountability

    Data retention & incident response policies

    Documented policies you can share with stakeholders for transparency

    Enterprise-Grade Protection

    Advanced Security Features

    Multiple layers of protection safeguard your sensitive tax data at every step

    Encryption in transit

    All traffic between your browser and VYAX is encrypted with TLS. Social Security numbers are additionally encrypted in the database.

    Encrypted in transit and at rest

    Device Fingerprinting

    Advanced device recognition detects suspicious login attempts from new or unrecognized devices.

    Real-time Threat Detection

    Session Security

    Automatic session timeout, re-authentication for sensitive actions, and concurrent session management.

    30-minute inactivity timeout

    Automatic Key Rotation

    Encryption keys are automatically rotated every 90 days to minimize exposure risk.

    Seamless background rotation

    Secure Key Management

    Master encryption keys stored in Supabase Vault with role-based access and audit logging.

    Kept separate from application data

    Object Storage

    Documents stored via Supabase Storage (backed by AWS S3) with server-side encryption at rest and access controls.

    Redundant cloud storage

    Encryption standards

    AES-256
    Encryption at Rest
    TLS 1.3
    Transport Security
    15 min
    Idle session timeout
    AWS S3
    Secure storage

    Transparency

    The Trust Center outlines how data is handled, how access is granted, and how events are recorded. Use it with clients or stakeholders who request more detail.

    Data Handling

    How information is processed and stored

    Access Controls

    Who can view and modify data

    Event Recording

    Complete audit trail of all actions

    Built-in security you can trust

    Comprehensive protection integrated into every feature