ISO/IEC 27001 certified. Powered by Microsoft Azure
Cloud based enterprise tax software
Taxlab is a SaaS application accessible through supported web browsers. Used by accounting firms, banks, corporations and government agencies.
Information security as a feature
Information security is paramount and integral to our business, and yours. We carry out all activities with goals to:
- Protect the confidentiality, integrity and availability of information and ensure no unauthorised access
- Meet regulatory, legislative and contractual information security requirements as they evolve
- Be compliant with and maintain certification with ISO/IEC 27001
We highlight key aspects of our information security management system below, but do not publish all of our security controls for obvious reasons. Please contact us for further information.
ISO/IEC 27001 certified
Taxlab is certified as compliant with ISO/IEC 27001, an international standard in information security. Users can be assured that Taxlab have implemented comprehensive best practices for identifying information security risks and adopting controls to protect confidential and sensitive data. Download our ISO/IEC 27001 certificate.
Microsoft Azure technology
Taxlab is a Microsoft partner and predominantly uses Microsoft technology including Microsoft Azure for application deployment and cloud data storage. The system runs in an isolated Microsoft Azure environment and the host operating system is maintained by Microsoft. We rely on Microsoft’s guaranteed uptime of 99.9% and their data centres located in Australia. Please refer to the Microsoft Trust Centre for more information.
Inland Revenue approved
We are approved to store customer’s electronic records outside of New Zealand under section 22(8)(a) of the Tax Administration Act 1994. This means that we have passed Inland Revenue’s stringent vendor criteria on your behalf and you are not required to independently gain offshore record keeping approval in relation to the data stored in Taxlab.
Taxlab currently requires an ADSL internet connection and a modern internet browser such as Google Chrome (recommended), Mozilla Firefox, Microsoft Edge or Internet Explorer 11. Our minimum system requirements change over time as we update the software and internet browsers become unsupported or out of date.
No installation needed
Users access the system via https://my.taxlab.co.nz/. There are no downloads, CDs or updates required by the user or the local IT team. Users can begin preparing tax returns within minutes of creating a user account from our website.
Always up to date
Users always log in to the latest version of the system. We release new features frequently and update tax logic in advance of each tax year. Updates are completed in the cloud and are available to all users instantly.
Taxlab is 100% designed, developed and supported locally. Free helpdesk support is available during normal business hours on 0800 00 1035 and firstname.lastname@example.org. Calls outside of these hours are directed to mobile phones and will generally be answered. While we do not guarantee a response time, we typically reply within one hour of receiving a message.
We lever the extensive security and data protection measures provided by Microsoft, including a 99.9% uptime guarantee. Please refer to the Microsoft Trust Centre for more information. Microsoft Azure servers located in Australia.
Secure user accounts
Users are required to login from a user account. Taxlab staff are not permitted to access user accounts or client data without a verified invitation. Only key Taxlab staff have access to our Microsoft Azure server space. We provide several configurations for authentication, including multi-factor authentication from Microsoft. You control which user accounts have access to which tax computations.
Users create an individual Taxlab user account for authenticating each session. Authentication is required for each session. A strong password is required and passwords are encrypted. Login details are not remembered by the browser between sessions. User accounts are locked temporarily if incorrect passwords are repeatedly entered
Multi-factor authentication is an optional but highly recommended security feature that adds an extra layer of protection to your Taxlab account. Once enabled, when logging into Taxlab you will be prompted to confirm your identity via your mobile phone. There is an additional monthly subscription cost for this service.
Active Directory authentication
We can use your organisations existing Active Directory for single sign-on user authentication using OpenID Connect rather than Taxlab user accounts. There is an additional monthly subscription cost for this service.
Data transfers and storage
Data transfers between the user’s machine and our Microsoft Azure server space occur over an encrypted channel with SSL encryption. The Taxlab system and data is hosted on a Microsoft Azure data centre as follows.
Storage of production data remains with the Azure datacentre network which adheres to strict security procedures. Should data be moved from Microsoft Azure our policy is to encrypt it.
Redundancy and backups
Our production data storage uses the built in geo-replication of Microsoft Azure. We can do a point in time restore for recovery of recent history. Additionally our databases are backed up nightly in multiple locations. Backups can typically be restored within two hours. Data and backups are stored indefinitely by Taxlab, including after termination of a subscription to meet IRD requirements.