Keeping your data safe and secure is our priority. It's a responsibility we take very seriously. Here are a few important things to know.
How we keep your data safe
The traffic sent between our server and your web browser is encrypted. Your data is also encrypted when we send your return to the CRA and when it’s at rest in our database.
You can choose to enable two-factor authentication, adding an additional layer of security to your SimpleTax account.
What you can do to help
Here are some things you can easily do to help safeguard your data:
- Create a long password that’s hard to guess
- Use unique passwords, don’t use a password for more than one site or app (consider using a password manager)
- Never share your password with anyone
- Keep your password stored in a secure place
- Avoid CRA scams
How to report a security issue
If you've discovered a bug in our security, please send an email to firstname.lastname@example.org. We will investigate and get back to you with a personal response as quickly as possible.
Please use common sense when looking for bugs. We ask that vulnerabilities not be disclosed publicly until fixed. Never test accounts that are not your own. Do not run automated vulnerability scanners or brute-force attacks. We do not recognize denial of service, spam, social engineering, or third party application vulnerabilities.