Security & data handling

Trust is the product.

PILOT handles your clients’ tax data. Here is exactly how we protect it — and every claim below maps to our Terms and Privacy Policy.

Encrypted in transit & at rest

TLS protects your data in transit; our database and file storage are encrypted at rest.

Never used to train AI

Fact-sheet content is processed only to generate your output. Anthropic does not train on it.

Private to your firm

Client data is isolated to your firm and never sold or shared — only the vetted providers that run PILOT ever touch it.

Authentication & access

Sign-in, sessions, and account access run through Clerk, with support for multi-factor authentication.

Your data, over time

You stay in control of the lifecycle.

01

While active

We retain your client data and output while your subscription is active and you are using PILOT.

02

180-day window

After cancellation you have a 180-day window to export all of your client data and output.

03

Then deleted

After the window we delete or de-identify your client data and output. Need it gone sooner? Email privacy@ any time.

Program & assurance

Held to the profession’s bar.

Written security program

We maintain a written information security program (WISP) and an incident-response plan — the same bar the tax profession is expected to meet.

Insured

Lodestar carries professional liability (E&O) and cyber-liability insurance — $1M of cover each.

Breach notification

If we confirm a breach affecting your data, we notify you without undue delay, so you can meet your own obligations.

Questions about security or data handling?

We answer them plainly. Reach our privacy team directly, or read the full terms.

Security · PILOT by Lodestar