How Ashford protects your tax and bank data

You are trusting us with your income, your bank history and your Social Security number. This page says exactly what we do with them.

A white shelf of archive boxes with one red binder

What we do, in plain words

Each line below is audited every year by an independent firm.

Read-only bank access

We connect through your bank’s own data-sharing. We never see your bank password and cannot move money without your approval of each payment.

Read only

Encryption

AES-256 for data at rest, TLS 1.3 in transit, and encryption keys held in a separate managed service.

AES-256

Social Security numbers

Stored in a separate vault, shown masked in the app, and decrypted only when a return is filed.

Vaulted

Who can see your data

Support staff see your account only when you open a request, and every view is logged.

Logged

Independent audit

SOC 2 Type II every year, covering systems, people and vendors.

SOC 2 Type II

E-file

Returns go to the IRS and states through their authorized e-file systems only.

Authorized channels

Your data stays yours

Delete it, export it or disconnect it whenever you like.

Export every transaction, receipt, report and filed return from Settings as CSV and PDF, at any time and on any plan.

Disconnect a bank in one click and we stop reading it the same minute. Close your account and we delete your data within 30 days, except filed returns, which the IRS requires us to keep for three years.

Found a security issue? Email security@ashfordtax.app. We reply within one business day and never take legal action against good-faith research.

Know your January 15 number before January

Connect the accounts you get paid through and Ashford shows your fourth-quarter estimate in about five minutes. Bookkeeping and estimates are free; filing starts at $24 a month.

Get my Q4 estimate free

Use this free template

Get my Q4 estimate free