The TAXFINAI review sheet
A dated orientation to the product’s security discussion, with evidence to confirm alongside the published Security page.
Practical templates
Software security sheet and vendor questionnaire
Prepare a security discussion with a practical document rather than a list of general assurances. The resource combines a dated TAXFINAI review sheet with a neutral twelve-question vendor questionnaire. Each question connects a topic with the evidence to request and leaves space for the vendor’s answer and your next action.
The short answer
A security questionnaire is a request for evidence. It is not a certification or an attestation that a control operates as expected. Use the PDF to read and share the questions, and the CSV to record answers, document references and follow-up actions. Keep a product’s public description separate from contractual commitments and test results.
Two parts with different purposes
The sheet directs the discussion to access, review decisions, the audit trail, integrations and AI processing. It does not replace the applicable contract or presume that a public statement answers every technical question. Keep the version and date with any completed assessment.
The neutral questionnaire
Twelve questions usable with any software vendor. Answer and follow-up fields are blank so your team can record the evidence received.
The twelve questionnaire topics
For each topic, ask for a concrete explanation and an identifiable document or test. Separate what is configured, what is optional and what has been tested. Assign an owner and date to any action left open. The twelve-question guide explains why each topic matters.
- Account access and invitations; MFA and recovery.
- Visibility and permissions; sensitive operations and offboarding.
- Audit trail; portability and exit.
- Imports and backups; hosting and subprocessors.
- Encryption and secrets; integrations.
- AI and data transmitted; commitments and external assurance.
Connect this method to your workflow.Request a demo
Preview of the answer grid
| Topic | Evidence to request | Vendor answer / action |
|---|---|---|
| Permissions | Role matrix and access-test evidence | To complete |
| Portability | Sample export and reuse procedure | To complete |
| AI processing | Applicable provider commitment and data-flow description | To complete |
| Incidents | Notification procedure and contractual responsibilities | To complete |
Scroll the table if needed.
Read the evidence in its actual context
The product’s Security page describes AI processing, human approval and the objects covered by the audit log. In a detailed review, connect those statements with the applicable provider commitment, configuration and product version. A commitment about AI requests should not be extended to website forms or every other processing activity.
Share the questions with the right people
Use the same grid with the firm’s decision-maker, IT adviser and the vendor. Record who answered, when and which version of a document was provided. The aim is an understandable acceptance decision, with evidence and follow-up responsibilities.
The files are available directly in English and French. To discuss TAXFINAI’s detailed controls and pilot terms, request the security questionnaire through the contact page. Keep client records and confidential financial documents out of an initial contact or WhatsApp message.
Direct access · No account needed
Security review sheet and twelve-question grid
PDF reading copy and CSV answer grid, with a dated TAXFINAI orientation and blank vendor-answer and action fields.
Common questions
Can we use the questionnaire with another vendor?
Yes. The question grid is neutral. It contains no prefilled vendor answers and can be adapted to your firm’s evaluation.
Does the sheet certify security or compliance?
No. It is a discussion and evidence-gathering resource. Examine contracts, actual configuration, test results and any applicable assurance report separately.
Where are TAXFINAI’s public answers?
Start with the Security page. For technical evidence and the terms applicable to your evaluation, use the security contact request.
Sources for further reading
Dated source checks do not replace review by the professional responsible for your engagement.
Let’s talk about your firm
A conversation about the way you work.
Tell us who you are, what interests you and what you want to organize. A few details are enough to start.
WhatsApp opens an external service. Use your business contact details only, without client information.
Talk on WhatsApp