Security, built into the engine.
How Setoff seals each company’s data, keeps Protas inside your controls and leaves the record with you.
Access to company records is controlled by assigned roles and permissions.
Isolation, sign-off and a full trail, for your people and Protas agents alike.
Think you’ve found a vulnerability? Write to us with the details at hello@setoff.tax
Isolated by design
Full-stack tenant isolation
Sessions are pinned to one tenant, the permission engine authorises every API call, and Postgres row-level security filters every row.
One set of layers
Protas agents pass through the same three layers as the people they work for.
Scope per person
Each person, and each agent working for them, sees only the entities, jurisdictions and periods they cover.
Encrypted on AWS
Setoff runs on AWS, with data encrypted at rest and in transit.
Protas, inside your controls
The same permissions
Agents work with the permissions and scope of the person they work for.
People decide
Returns, filings and payments wait for a named approver. Agents prepare; people decide.
Every tool call on the record
Every action and every tool call is logged with who, when and on what evidence.
Sources you can open
Each figure, and each rule Protas relied on, links back to its source.
Your data, your control
Bring your own storage
Keep documents in a storage account you own, in the region your regulators require.
Data residency
Residency options come with Enterprise and Managed Enterprise.
Export everything
Every record exports to your own tools.
Never sold
We do not sell personal information. Ask for access, correction, export or deletion; some tax and audit records must be kept.
Trail and oversight
Audit trail
Who did what, when and on what evidence, for every action.
Evidence behind every figure
Each number links back to the entry or document it came from.
Review and approval
Sign-off steps you define, with comments kept on the work itself.
Controls and monitoring
Access controls, monitoring and internal data handling restrictions protect customer data.
Identity and access
Single sign-on (SAML)
Okta, Microsoft Entra ID or any SAML 2.0 provider, with your own two-factor rules.
Strong sign-in without SSO
Users not on SSO sign in with an authenticator app or a security key.
Locked to your network
Allow sign-in only from your office, VPN or data-centre IP ranges. Attempts from anywhere else are refused.
Roles you set
Who can prepare, review, approve, file and pay, set per person and per role.