IRS Pub 1075–Aligned Security and WISP-Ready Controls
Send tax documents securely on XyloDocs' AI client communication platform for tax firms. Controls are built to align with IRS Publication 1075 and to support a Written Information Security Plan (WISP) under the FTC Safeguards Rule — see WISP requirements for tax firms and how to send tax documents securely. Firms writing a WISP should also follow IRS Publication 4557 (Safeguarding Taxpayer Data).
Your clients trust you with their financial lives.
You trust us with their documents. Here's exactly how we protect that trust.
Security program overview
Hosting, encryption, product controls, and compliance status — organized by topic below.
🏢 INFRASTRUCTURE
Hosting
AWS (Amazon Web Services)
Region
US East (Primary)
Uptime
Monitored continuously, with alerting on failure
Backups
Daily automated backups, 30-day retention
Redundancy
Multi-region deployment
🔐 ENCRYPTION
In Transit
TLS 1.3 (latest standard)
At Rest
AES-256 (military-grade)
SSL Labs Rating
Overall Grade: A
Certificate
100
Protocol Support
100
Key Exchange
100
Cipher Strength
100
🛡️ SECURITY FEATURES
Automatic link expiration
Shared links automatically expire after set time periods
Password-protected shares
Add password protection to any shared document
Virus/malware scanning
All uploads are automatically scanned for threats
Audit logs
Track every access and action with comprehensive logging
Rate limiting
Prevent abuse with intelligent rate limiting
Email verification
All accounts require verified email addresses
Session timeouts
Automatic session expiration for enhanced security
Private AI for documents
Your clients' documents are read by private AI that runs on XyloDocs's own servers or on hardware in your own office. They are never sent to an outside AI company, never sold, and never used to train AI models. Our Privacy Policy explains how we handle personal information.
📋 COMPLIANCE
❓ QUESTIONS?
Security concerns: security@xylodocs.com
General inquiries: hello@xylodocs.com