Security & Compliance

1. Our Commitment

Warrior Financial Services LLC ("we," "us," "our") maintains an information security program designed to protect the confidentiality, integrity, and availability of taxpayer data handled through our software and services. This program follows the administrative, technical, and physical safeguards required of professional tax preparers under federal and state law.

This program covers all of our offerings, including Warrior Tax Pro Elite (our professional tax preparation software and the IntelliWarrior document upload portal) and Warrior Tax Pro Online (our self-prepared online filing service at app.warriortaxpro.com).

2. Regulatory & Compliance Framework

As a professional tax preparation business and an IRS-authorized e-file provider, we operate under the following requirements:

3. Data Encryption

We use encryption to protect taxpayer data throughout its lifecycle:

• In transit: All data exchanged between your browser or application and our servers is encrypted using industry-standard TLS (HTTPS).
• At rest: Taxpayer data stored in our systems is encrypted at rest, so that database files are unreadable without the encryption key.
• Document intake: Documents uploaded through the IntelliWarrior secure portal are transmitted over encrypted links and stored under the same protections.

4. Access Controls & Authentication

Access to taxpayer data is restricted and authenticated:

• Multi-factor authentication (MFA) is available for preparer accounts to add a second layer of protection beyond a password.
• Role-based, least-privilege access: users and preparers can access only the data their role requires.
• Account protection: repeated failed login attempts trigger a temporary lockout to defend against unauthorized access.
• Session management: authenticated sessions are time-limited and require re-authentication.

5. Application & Infrastructure Security

Our servers and applications are configured, maintained, and monitored to reduce risk. This includes restricting administrative access, keeping systems updated, separating environments, and reviewing security configurations on an ongoing basis.

Hosting. Warrior Tax Pro Elite and Warrior Tax Pro Online run on DigitalOcean cloud infrastructure. DigitalOcean maintains a SOC 2 attestation for its platform and data centers, which covers physical security, environmental controls, network segmentation, and the operational safeguards of the underlying hosting environment. Data is hosted in United States regions. Application-level controls, including the encryption, access control, and retention practices described on this page, remain our responsibility under the shared-responsibility model.

6. Written Information Security Plan (WISP)

The FTC Safeguards Rule and the IRS require tax professionals to maintain a Written Information Security Plan. Our WISP designates responsibility for our security program, assesses foreseeable risks to taxpayer data, and defines the safeguards, monitoring, and response procedures we use to address them. It is reviewed and updated periodically.

7. Personnel Safeguards

Individuals with access to taxpayer data are bound by confidentiality obligations and are trained on the secure handling of sensitive information. Access is granted on a need-to-know basis and revoked promptly when a role changes or ends.

8. Third-Party & Vendor Management

We use a limited set of service providers to operate our services, such as SMS delivery, e-file transmission, and, where you elect them, bank-product partners. We share data with these providers only as necessary to deliver the service you requested, and only under confidentiality and security obligations. We do not sell taxpayer data, and we do not share it for third-party marketing.

9. Data Retention & Secure Disposal

We retain tax return data and related records for the period required by IRS regulations (generally a minimum of three years) and for as long as needed to provide continued tax preparation services, such as prior-year data rollover. When records are no longer required and no legal obligation to retain them applies, they are securely deleted or destroyed.

10. Incident Response & Breach Notification

We maintain an incident response process to detect, contain, and remediate security events. In the event of a data security incident affecting taxpayer information, we will notify affected individuals and the appropriate authorities, which may include the IRS, state tax agencies, and state regulators, as required by applicable law and IRS guidance, without unreasonable delay.

11. Business Continuity & Backups

We maintain backups of critical data and recovery procedures designed to restore service in the event of a disruption. Backups are protected with the same safeguards applied to production data.

12. Shared Responsibility

Security is a partnership between us and the professionals who use our software. As a tax preparer, you are also required by the FTC Safeguards Rule and the IRS to maintain your own Written Information Security Plan and safeguards. We strongly recommend that you:

• Enable multi-factor authentication on your account
• Use a strong, unique password and never share your credentials
• Keep your devices, browsers, and operating systems updated
• Restrict access to client data to authorized staff only
• Train your team on recognizing phishing and social-engineering attempts

13. Reporting a Security Concern

If you believe you have discovered a security vulnerability, or that your account or client data may have been compromised, please contact us immediately so we can respond:

14. Changes to This Page

We may update this Security & Compliance statement as our practices, technology, or legal obligations evolve. Material changes will be posted here with an updated effective date.