What we do with your data, and what we deliberately cannot do.
Tax data is the most sensitive financial record most people own. This page says exactly how ClearBasis handles it — including the parts that are not finished. Anything on this page can be checked from outside: view the page source, read the response headers, or look at what the network tab does and does not send.
The short version
| Claim | Status | How you can check it | |
|---|---|---|---|
| No third-party scripts, trackers or analytics on any page | Live | View source, or watch the network tab: one stylesheet, one small script, both ours | verifiable |
| Content-Security-Policy and a frame-ancestors deny | Live | Read the response headers; the site refuses to be embedded in an iframe | verifiable |
| We never ask for a seed phrase, private key or exchange withdrawal permission | Live | There is no field for one anywhere, and no API key flow that requests withdrawal rights | verifiable |
| Unsaved scans and their raw files are destroyed after seven days | Live | A purge job nulls the file and the computed result; the row survives only so the link can say "expired" instead of vanishing | live |
| No password exists to steal | Live | Accounts are email plus a single-use link; there is no password field and no password column | live |
| Every data access is written to an audit log | Live | Server-side; you cannot check this from outside, so treat it as a claim, not a proof | our word |
| Payments and any handling of an SSN | Not enabled | There is no checkout and no field that accepts a government identifier — deliberately, until the entity and the reviews behind it exist | not yet |
| SOC 2 or an external penetration test | Neither | We have not done these. Anyone claiming a certification they do not hold is telling you something else about themselves | not yet |
What a scan actually touches
Read-only, always
A scan reads a file you export yourself. There is no path in this product that can move funds, place an order, or authorise anything on an exchange — not because we promise not to, but because the capability does not exist in the code.
Free tools send nothing
The letter decoder, the wash-sale date check and the withholding calculator run entirely in your browser. The September 15 check posts figures to our server to compute and returns the answer without storing it — no scan row, no email, no cookie.
Your link is your key
A saved scan is reachable by its own unguessable id, with no login — that is what makes "no account to start" possible. It also means the link is worth protecting: anyone holding it can open the scan. Treat it like a document, not a password-protected folder.
Leaving is a feature
The Basis Passport export is free, always, and it is a published open format. Your reconstructed cost basis is yours to take to a competitor, an accountant, or a spreadsheet. A product that is hard to leave is telling you it expects to stop being worth staying for.
Where we are weaker than we would like
Written down here because you will not find it anywhere else, and because a security page that only lists strengths is marketing.
- The accountant share link is a view, not a lock. It hides the controls that write; it does not stop somebody technical who holds the link from reaching the editable page. A real per-share capability arrives with the accountant seat.
- Backups live on the same host as the database. Nightly, rotated, and restore-tested — but they survive a bad migration, not a lost machine. Off-site copies need a destination we have not set up yet.
- We run on a shared server. Fine for a product with no payments and no government identifiers, which is exactly why those two things stay switched off until the infrastructure behind them is not shared.
- No formal certification. No SOC 2, no ISO 27001, no third-party penetration test. Those are real work and real money, and they come when there is a business to justify them.
Found something?
If you find a vulnerability, we want to hear about it before anyone else does. Contact details are on the legal page. We will not threaten you, and we will credit you if you want the credit.
This page is maintained by hand and dated when it changes. Last reviewed 27 August 2026.