Platforms & Sub-processors
We rely on a small number of established business platforms to deliver our services. Clients may restrict us to their own systems, in which case no client data is held on our platforms at all.
| Category | Purpose | Typical providers |
|---|---|---|
| Productivity, email and cloud storage | Business email, restricted client folders, document collaboration | Google Workspace or Microsoft 365, as configured for the engagement |
| Website hosting and security | Hosting finextaxadvisory.com, protection against attacks, enquiry storage | Cloudflare |
| Accounting, tax and payroll software | Performing the services | The client's own platforms, for example QuickBooks, Xero, NetSuite, Sage, MYOB, Zoho Books, Tally, Drake, Lacerte, UltraTax, CCH; access granted by the client |
| Online payments (Academy and packages) | Processing course and package payments | Razorpay (card and UPI details never reach our servers) |
Before using a platform we review its security and privacy terms and enable the security features it offers. The specific platforms used on your engagement are confirmed in your engagement security plan, and we give advance notice before adding a new platform that will process your personal data, as set out in our Data Processing Agreement.
Questions about security?
We are happy to complete your vendor-security questionnaire and walk your team through our controls.