Data & Security

This draft page describes intended data handling in general terms. It does not claim a certification, audit result, security guarantee, or compliance status.

The application prepares the submission payload in the browser and sends it directly to the configured webhook endpoint using a text/plain JSON body.

Uploaded files are converted to raw Base64 content with file name, size, type, and lastModified metadata for inclusion in the application payload.

EIN and SSN inputs are masked for format guidance. Production review should confirm hosting, webhook, retention, access control, logging, and incident response practices.

This draft must be reviewed and adapted by qualified legal and security professionals before production publication.