Security

How e1099f protects your data · LEIRAD GROUP LLC

e1099f handles Taxpayer Identification Numbers and payment information, so security is built into the platform rather than bolted on. Here is what we do.

Encryption

• At rest: Taxpayer Identification Numbers, connected-account OAuth tokens, and the IRS XML we transmit are encrypted in the database.
• In transit: all traffic is served over TLS.

Account isolation

Your data is scoped to your account. Payers, recipients, forms, and documents are accessible only to users on your account, enforced on every request.

Authentication

We support strong passwords, two-factor authentication, and passkeys. Recipient document links are access-controlled and rate-limited against guessing.

Payments

Card payments are processed by Stripe. We never store full card numbers — only a payment reference and the last four digits needed for your receipt.

IRS transmission

We transmit as an authorized IRS information-return transmitter over the IRS IRIS Application-to- Application channel, with the credentials and software identifiers the IRS issues.

Reporting an issue

If you believe you have found a security vulnerability, please contact us so we can investigate promptly. Please do not publicly disclose it before we have responded.