Question 1

Is Loctax SOC 2 compliant?

Accepted Answer

Loctax is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Loctax ISO 27001 certified?

Accepted Answer

According to Loctax's public trust center, Loctax is ISO 27001 certified. On SOC2C this listing is Listed.

Question 3

Is Loctax GDPR compliant?

Accepted Answer

According to Loctax's public trust center, Loctax is GDPR compliant. On SOC2C this listing is Listed.

Question 4

Is Loctax SOC 2 Type I or Type II?

Accepted Answer

Loctax is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 5

Can I use Loctax's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Loctax's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 6

Is Loctax penetration tested?

Accepted Answer

Yes — Loctax undergoes third-party penetration testing as part of its security program. The pentest vendor is listed on its SOC2C profile.

Question 7

Does Loctax have a penetration test report?

Accepted Answer

Loctax publishes a penetration test summary on its trust center. You can request access to it through SOC2C.

Question 8

Is Loctax secure?

Accepted Answer

Security isn't a single yes/no, but Loctax is SOC 2 Type II compliant and holds ISO 27001, SOC 2 Type II, GDPR, and undergoes third-party penetration testing. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 9

Does Loctax have a bug bounty or vulnerability disclosure program?

Accepted Answer

Loctax hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@loctax.com or via a /security page (Loctax lists a security contact).

Question 10

Who are Loctax's subprocessors?

Accepted Answer

Loctax lists 11 subprocessors on its trust center, including Amazon Web Services, Microsoft Azure, Cloudflare, Sentry, Better Stack. Buyers use this for fourth-party risk review.

Question 11

Where does Loctax host or store data?

Accepted Answer

Loctax hosts on AWS, Azure. Data residency details are on its trust center.

Question 12

Where is Loctax's trust center or security page?

Accepted Answer

Loctax's trust center is at https://trust.loctax.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 13

What is the hosting location for Loctax's solution?

Accepted Answer

Loctax's main environment operates on AWS in the Frankfurt region (eu-central-1), ensuring secure data storage and back-end processing. Our user-facing web application is globally accessible, thanks to hosting on Cloudflare Pages.

Question 14

Do you support Single Sign-On (SSO)?

Accepted Answer

Absolutely! Loctax offers seamless SSO integration compatible with any SAML or OIDC identity provider. The integration process is self-service and user-friendly, complete with detailed screenshots and guidelines for the most widely used identity providers.

Question 15

How does Loctax ensure data encryption both at rest and in transit?

Accepted Answer

Loctax prioritizes data security with robust encryption methods: - Encryption at Rest: - We employ the AES-GCM algorithm, utilizing 256-bit symmetric encryption keys. - All customer data, including automated backups, snapshots, and replicas, are secured using these encryption standards. - Encryption in Transit: - We use TLS v1.3 to secure data during transmission, ensuring the highest level of security and privacy. Our encryption keys are securely managed outside the application architecture through AWS Key Management Service (KMS), enhancing our security framework.

Question 16

Are integrations required to use Loctax?

Accepted Answer

Integrating with Loctax is optional. Our platform supports integrations through our Open API 3.0. However, we recommend that new users start using Loctax without setting up integrations initially. Often, the tax-related data Loctax centralizes is not readily available in an existing system within an organization. It's typically dispersed across various file storage systems, like Excel spreadsheets or within emails. Loctax serves to fill this gap by bringing all your tax-related data into one centralized, easily accessible location.

Question 17

Does Loctax support Multi-Factor Authentication (MFA)?

Accepted Answer

Yes, Loctax offers robust security features including MFA. While Single Sign-On (SSO) is our primary method for user authentication, we also provide MFA as an additional security layer. This is especially beneficial for external users, such as advisors or contractors, who may not utilize SSO. Our clients have the flexibility to set up MFA to ensure enhanced security for all user types on our platform.

Loctax

About

Compliance & infrastructure

Documents

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

1099-Prep

Octopus Deploy

Ask Ai