Javascript is required

Data security

All data is encrypted that goes between you and My Tax Digital Accounting by industry-standard TLS (Transport Layer Security). Your data is also encrypted when it is stored on our servers.

There are multiple layers of security controls including firewalls, intrusion protection systems and network segregation. These security services are configured, monitored and maintained according to industry best practice. Our security team monitors events, notifications and alerts from all systems to identify and manage threats.

Your data is held within enterprise-grade hosting facilities in the UK that employ robust physical security controls to prevent physical access.

Data protection and privacy

See our Privacy Policy for details about the collection, use, disclosure, retention and protection of any personal or business information that is collected by the Open Answers My Tax Digital application.

Where your data is hosted and who processes it

Open Answers Ltd is the data controller for My Tax Digital and is registered with the Information Commissioner's Office (ICO).

  • Hosting: My Tax Digital runs on Amazon Web Services (AWS) in the UK (London region). Your core account data is stored and processed on UK-based servers only.
  • Email: Emails sent by My Tax Digital, such as sign-in codes and password resets, are sent through Amazon Simple Email Service (SES) in the London region.
  • AIsha: AIsha queries are processed within UK/EEA infrastructure, using AWS in the London region. The AI model is accessed through Amazon Bedrock. Using AIsha is optional. When you use it, your query text is processed, along with some general account context if you are signed in. Your financial figures, individual transactions and full submission details are never shared with AIsha, and your input is not retained or used to train the AI model.
  • Google Analytics: Google Analytics only loads after you accept the analytics prompt. Nothing is loaded or sent to Google before you make that choice, and if you decline, no analytics data is shared.
  • HMRC: We send summary figures to HMRC only when you press 'Submit'.

Requests about your data

You can ask us for a copy of the personal data we hold about you (a subject access request), or ask us to correct or delete it. Contact support@mytaxdigital.co.uk. We respond to subject access requests within one calendar month of receiving them.

For anything not covered here, such as a full list of sub-processors or our data breach procedure, contact support@mytaxdigital.co.uk.