Data Security

One of the core design principles of GlobalTaxAI is simple: financial documents should only be processed where and for as long as they are genuinely needed.

Browser-side processing

The current financial-analysis engine processes uploaded annual-report PDFs primarily in the user’s browser. This architecture reduces the need for persistent central storage of potentially sensitive business documents.

Payment data

Card payments are handled in the Barion environment. GlobalTaxAI does not store complete payment-card numbers or CVC codes.

Access control

Paid applications are linked to an order-specific, time-limited access right. In production, access is verified server-side before a paid report can be generated.

Data minimisation

We do not request information that is not needed for the service. Billing and order information is retained in line with legal requirements, while technical logs and any temporary processing data are kept only for the period necessary for operational and security purposes.

Ongoing security development

The service applies file validation, rate limiting, secure order tokens and security-oriented logging designed to avoid unnecessary financial-data leakage. Retention and deletion practices follow the Privacy Notice and applicable legal requirements.