Security architecture overview
NiniTaxBot is designed around the most sensitive documents your clients have. Here's how the architecture approaches them.
Encrypted storage
Uploaded documents and extracted data are stored encrypted.
Firm-level isolation
Built for multiple firms, with each firm's data separated at the database level, so one firm's records are never mixed with another's.
Human review before anything leaves
Nothing is sent outside NiniTaxBot until someone at your firm approves it in the review queue.
How is client data kept separate between firms?
NiniTaxBot is a multi-firm system, and isolation is enforced at the database level rather than relying only on application screens. A user at one firm cannot see documents or data belonging to another firm.
How are documents stored?
Documents your clients upload, and the data extracted from them, are kept in encrypted storage.
Why does review before anything leaves matter for security?
Requiring approval keeps a person accountable for what leaves NiniTaxBot. It catches extraction errors, and it means nothing leaves the system automatically.
How does NiniTaxBot fit our firm's security plan?
Tax professionals are generally expected to maintain a written information security plan (WISP); IRS Publication 4557, Safeguarding Taxpayer Data, is a common starting point. A portal like NiniTaxBot can be one part of that plan, but it doesn't replace your firm's own policies, training and controls. Our guide to secure document collection has more general guidance. Talk to your own advisors about your obligations.
Can we get detailed security documentation?
Yes. Pilot firms receive detailed security documentation. To request it, contact us or mention it on the pilot form.
This page describes the design of NiniTaxBot ahead of its February 2027 pilot. It is not an audit report or third-party attestation. If your firm has specific requirements, ask us and we'll answer directly.
Spend this tax season reviewing, not retyping.
Join the CPA firms piloting NiniTaxBot in February 2027.