Companies are more vigilant than ever about cybersecurity—and for good reason. Financial records, engineering roadmaps, and payroll data are among a company’s most confidential assets. However, claiming R&D tax credits and capitalizing software costs often require handing this sensitive information over to external providers.

‍
That’s why Neo.Tax has committed to implementing advanced security protocols for company data.

‍
The fact is: the old way has always carried security risks. And as cyber criminals become more advanced, security measures need to keep pace. CPA firms request and store your internal payroll and financial data in outdated formats, like shared folders or legacy servers. They need that data available in case of an audit, so it remains in their systems for months or even years,  increasing the risk of exposure.

The advantage of working with a software-first company like Neo.Tax is that we understand the sensitivity of your data and have taken every step to protect it.

‍
These security steps include:

• SOC 2 Type 2 certification
• Enterprise SSO/SAML & IP Whitelisting
• AES 256 encryption of all data in transit & at rest
• An assurance that data never commingles within our application

Data Security Is Our Priority

For our enterprise customers, we offer an extra layer of security solutions, including a dedicated cloud environment, where each company gets its own fully isolated version of Neo.Tax with dedicated compute, storage, and networking. Because all of  our infrastructure is codified and managed via Terraform, we can provision a dedicated cloud environment within 24 hours.

This dedicated cloud offering provides completely separate compute and data storage, ensuring strict data segregation—there’s no commingling of customer data, and IAM permissions can be tightly controlled by the customer. Each tenant operates in its own environment, effectively creating an air-gapped system that eliminates risks associated with shared storage. Even in the event of a security incident, there is no shared network access or data exposure between tenants—each instance exists within its own security perimeter.

This also affords us the ability to add custom security measures for specific customers; for example, if a customer wants to limit which internal employees have access to the Neo.Tax application via IP whitelisting, they can do so by adding the whitelisted IPs to their dedicated cloud via a tool like ZScaler. And across all of our tenants, we enforce strict internal access controls with Tailscale as our VPN, ensuring all internal access is IP-restricted

Additionally, we provide a 30-day rollback window and point-in-time recovery powered by Neon. This allows us to restore data to any exact moment down to the millisecond within the last 30 days, ensuring that accidental deletions, corruption, or security incidents can be instantly reversed with no data loss.

Finally, our AI training is strictly anonymized, and we provide tailored options for company-specific training restrictions. Customers can also choose to opt of sharing their data for training purposes if they wish. 

The Neo.Tax Difference

We understand that it’s uncomfortable to have a third party accessing proprietary financial details. Traditionally, working with an accounting firm meant exposing your company’s sensitive information.

‍Neo.Tax changes that: our automated system strictly limits access to only the data necessary for summarizing projects—nothing more.

We never ask for or analyze proprietary details such as source code, architecture, or other confidential information. Instead, we rely on metadata like status changes, assignees, and project hierarchy to deliver insights while preserving your privacy.

Data is the lifeblood of innovative companies. You spend massive resources to protect it. But a security system is only as strong as its weakest link. We understand that. That’s why we’ve taken every step possible to use industry-leading protections at every level of Neo.Tax.