Transport encryption
Every request is encrypted with 256-bit TLS 1.3. We do not accept fallback to weaker ciphers.
Security
Your tax data. Fort Knox security.
Tax records hold almost everything about your financial life. We protect them with the discipline a bank applies to deposits, and we publish exactly what we do.
- Files via NRS Rev360
- Built to the NDPA
- 256-bit TLS
- Encrypted at rest
- Never holds your funds
How we protect your data
Six core controls. Each documented, each enforced in the product.
Security you can point at: behaviour built into the platform, not a badge on a page.
Encryption at rest
All records and documents are encrypted with AES-256 in Postgres and object storage.
Server-authoritative math
Every tax calculation, every fee, every receipt is computed on our servers. The client never decides what you owe.
Row-level security
Database-enforced access. You see your own data. Your accountant sees only what you share. No exceptions.
Audit trail
Every filing, payment, and document touch is logged with actor, time, and IP. Exportable for your records.
We never hold funds
Money flows from you, through a licensed provider, to government. MiTax does not custody your money. We are not a wallet.
Your rights as a taxpayer
Under the NDPA, your data is yours.
We honour your rights in the product, not just in the policy.
Export, delete, restrict.
Export your full record set in CSV or JSON from your account at any time. Request deletion in writing and we complete it within 14 days, except where Nigerian law requires retention. Email privacy@mitax.io for any rights request. Read the detail in our NDPA Compliance Statement.
Responsible disclosure
Security questions? Ask us.
Our security team responds to disclosure requests within 24 hours. Found something? Tell us before you tell anyone else.