Data processing agreement

Instructions

PrepDesk processes your clients’ information only on your firm’s instructions, to provide the service.

Location

Your clients’ information is stored and processed only in Australia.

Security

Two-step verification for everyone; firm data walled off in the application and in the database; files encrypted with a key tied to your firm; tax file numbers removed at intake; download links that expire within minutes.

PrepDesk staff see your data only through time-limited access that your admin grants, with every view recorded and shown to you.

Breaches

If your data is affected by a breach, we tell you within 72 hours of confirming it and help you meet your obligations under the Notifiable Data Breaches scheme.

Deletion on exit

When you cancel, you have 30 days after your access ends to export everything. Then all of your firm’s data is permanently deleted, backup copies expire within 35 days, and your admins get a written confirmation.

Providers

The providers that touch data are listed on the trust page, with what each does and where.

Contact

Questions about this document? Write to us: