Secure. Scalable. Always in control.
Overstax overlays intelligence on your stack without taking custody of it. Enterprise-grade security and governance keep your data yours — at any scale.
SOC 2 Type II (in progress)GDPR & CCPA readyAES-256 at restTLS 1.2+ in transit
Controls you can build a program on
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256.
Granular access control
Role-based permissions and SSO/SAML keep the right eyes on the right data.
Full auditability
Every action is logged and traceable, so you always know who did what and when.
Data residency
Keep your data in your preferred region. Overstax reads signals without owning your systems.
Least-privilege by default
Connections request only the scopes they need — nothing more.
Governance & retention
Configurable retention and policy controls to match your compliance program.
Want the details?
Request our security overview and subprocessor list, and ask about the status of our compliance program.