Trust & security
TaxHeed works on your clients' documents on your firm's behalf. Here is how that data is protected, where it goes, and how every AI decision stays accountable to a person.
Audit recordTH-2026-10-0418
Example01 · Your clients' data
Data is encrypted in transit and at rest, in databases with restricted, audited access.
Each firm's data is walled off from every other firm's. Inside your firm, access follows the roles you set.
On ISO 27001-certified infrastructure in the European Union.
TaxHeed reads from your software and the Agenzia delle Entrate's channels by client mandate, revocable at any time. It never initiates a payment.
We collect the minimum the work requires, and keep nothing longer than your firm needs it.
Export or delete a client's data at any time.
02 · Accountable AI
Every draft waits for an accountant's approval. Nothing is filed, sent or finalised automatically.
It classifies and explains. Every euro amount comes from a fixed calculation on the cited rule, never from the model.
Each AI interaction is logged with the rule version it used, so any output can be traced and audited, years later.
Your data and your clients' data are never used to train or fine-tune AI models.
Every answer carries a confidence score. Ambiguous cases are flagged for your judgement.
03 · Your obligations
GDPR
Your firm remains the controller of your clients' data. TaxHeed processes it only on your instructions, under a data processing agreement (nomina a responsabile del trattamento) available to every firm.
EU AI Act
Designed around human oversight and transparency, the principles at the heart of the EU AI Act, from the first line rather than retrofitted later.
Security questions? contact@taxheed.com