Security
Security model
Sensitive tax data should travel only when it has to.
TakoTax reduces server-side tax data exposure by doing document parsing, calculation, project saving, and form generation in the browser during normal preparation.
What stays in the browser
During normal preparation, documents, entered values, saved projects, and generated forms remain in your browser. Website requests can still create operational logs. If you contact secure support, the details you choose to share are sent to our support system. See how privacy works.
No third-party document extraction in normal prep
Uploaded documents are parsed locally in the browser. TakoTax does not send your tax documents to third-party extraction systems during normal preparation.
Your device still matters
Local-first preparation reduces server exposure, but it does not secure your personal device for you. Use a device you control, keep it updated, use a screen lock, and avoid shared or public computers.
Vulnerability reporting
Security reports should be sent to security@tako.tax. Do not include sensitive personal information in a report. See the full vulnerability disclosure policy.