Your trade data, locked to your business.
When you save shipments to your taxHub workspace, here is exactly how that data is protected — no more, no less.
Your own encryption key
Each company gets its own encryption key. Your saved shipment data is encrypted with that key before it ever reaches our database.
Isolated by design
Every database query is scoped to your company at the database level, so one tenant's data path never crosses another's.
Decrypted only for you
Your data is decrypted only to serve your own signed-in requests. Every time your company key is unlocked, Google Cloud records it in an audit log.
Deleted means gone
Deleting your data destroys your encryption key. Backups age out within 7 days.
Where your data lives
Workspace data, including its backups, is stored in Google Cloud, in the Mumbai region (asia-south1).
Legal requests
We disclose tenant data only in response to a valid legal order under Sri Lankan law. We challenge requests that are overbroad, and we notify the affected customer unless the law prohibits it.
What we don't claim
Some metadata stays visible even though your content is encrypted — for example record ids, timestamps and counts. taxHub is a server-operated service, so it can be subject to a lawful order like any other, and the service itself decrypts your data only to serve your own signed-in requests. We don't claim otherwise.
Within your own workspace, the service can tell when two of your lines use the same tariff code: it keeps a keyed fingerprint of each code to power tariff-change alerts. So which of your lines share an HS code is not hidden from the service.