AI tools and client data
Is TaxDome AI safe for client data?
Short answer: Whether TaxDome AI is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On TaxDome subscription (AI features included) and on TaxDome AI add-on (US firms), TaxDome says it does not train its models on the client documents you upload, by default. Every fact on this page is TaxDome's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.
See which AI tools your staff usePlan by plan, in TaxDome’s own words
The AI inside TaxDome's practice-management platform: it reads and renames client documents, tags them and answers questions about the practice. The documents it reads are the ones clients uploaded — returns, statements, identity documents — so the question is what leaves TaxDome and for how long.
| What you are asking | TaxDome subscription (AI features included) | TaxDome AI add-on (US firms) |
|---|---|---|
| Trains the vendor's models by default | Not on personal data. TaxDome says it anonymises first and then uses the result to improve the service.“TaxDome AI models do not train on Personal Data; TaxDome only uses anonymized data with Personal Data removed…” source, read | Not on personal data. TaxDome says it anonymises first and then uses the result to improve the service.“TaxDome AI models do not train on Personal Data; TaxDome only uses anonymized data with Personal Data removed…” source, read |
| How to turn training off | Not found in the pages we read. | Not found in the pages we read. |
| How long data is kept | TaxDome publishes this for data sent to outside models. The 30-day monitoring note further down this page is TaxDome's too; ask TaxDome which applies to your plan.“Data sent to third-party LLMs is not stored on those providers’ AI servers beyond the processing of your request.” source, read | TaxDome publishes this for data sent to outside models. The 30-day monitoring note further down this page is TaxDome's too; ask TaxDome which applies to your plan.“Data sent to third-party LLMs is not stored on those providers’ AI servers beyond the processing of your request.” source, read |
| What an admin can see or control | It is one switch for everybody. There is no per-user enablement, so turning it on is a decision about every client file in the firm.“When enabled, TaxDome AI is active for the entire firm and for all of its clients.” source, read | It is one switch for everybody. There is no per-user enablement, so turning it on is a decision about every client file in the firm.“When enabled, TaxDome AI is active for the entire firm and for all of its clients.” source, read |
| Single sign-on | Not found in the pages we read. | Not found in the pages we read. |
| Business Associate Agreement | Not found in the pages we read. | Not found in the pages we read. |
| Where the data is processed | TaxDome says the AI data stays on its own servers, and separately names OpenAI, AWS and Google as the processors behind the features.“User data related to TaxDome AI is not stored outside TaxDome servers.” source, read | TaxDome says the AI data stays on its own servers, and separately names OpenAI, AWS and Google as the processors behind the features.“User data related to TaxDome AI is not stored outside TaxDome servers.” source, read |
An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the TaxDome pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask TaxDome before client information goes near it.
What this means for
The duty does not change because the tool is new. What changes is where the client information ends up.
- Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
- Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask TaxDome before any patient data goes in. See dental practices.
- CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
- Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
- Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.
How to tell which version your staff use
The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.
1. Ask
Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.
2. Look at the billing and the admin console
This finds what the business pays for. It does not find a personal account, which is the one that matters here.
3. Look on the computers
A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.
Settings to check today
From TaxDome’s own documentation. Each one is a change somebody can make this afternoon.
- Know which features you are actually paying for before you write them into a WISP. In the US two of them sit behind a separate paid add-on, so a firm can be governing a feature it has not bought.“For firms in the US, Rename documents and Assign tags require the AI add-on.” source, read
- Read the sub-processor list, and read it again later. TaxDome says it changes, and each name on it is somewhere client documents can go.“AI features within TaxDome are powered by technology provided by third parties as set forth in our sub-processor list…” source, read
- TaxDome limits what it sends out, which is worth knowing when a client asks what left the platform.“Only the essential amount of data is transmitted to OpenAI’s, AWS, and Google’s secure endpoints.” source, read
Worth knowing
- This sits under TaxDome's own “Zero retention” heading, and says processed data may stay up to 30 days in a monitoring environment. Both are TaxDome's own statements; ask TaxDome which applies to your plan.“certain processed data may be temporarily stored for up to 30 days in a secure monitoring environment…” source, read
- TaxDome's statement about outside models names commercial third-party models. Ask TaxDome which models it covers for your plan.“Personal Data will not be used to train commercial third-party AI models.” source, read
- TaxDome says the output is not necessarily yours alone, which matters if it goes into a client deliverable.“Information generated by TaxDome AI may not be unique.” source, read
Questions we get asked
Is TaxDome AI safe for client data?
Whether TaxDome AI is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.
On TaxDome subscription (AI features included) and on TaxDome AI add-on (US firms), TaxDome says it does not train its models on the client documents you upload, by default.
Every fact on this page is TaxDome's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.
Does TaxDome train its models on what we put into TaxDome AI?
On TaxDome subscription (AI features included) and on TaxDome AI add-on (US firms), TaxDome says it does not train its models on the client documents you upload, by default.
On TaxDome subscription (AI features included) and TaxDome AI add-on (US firms): Not on personal data. TaxDome says it anonymises first and then uses the result to improve the service.
TaxDome's own words: "TaxDome AI models do not train on Personal Data; TaxDome only uses anonymized data with Personal Data removed…" (read 2026-11-03).
How long does TaxDome keep what we put into TaxDome AI?
On TaxDome subscription (AI features included) and TaxDome AI add-on (US firms): TaxDome publishes this for data sent to outside models.
The 30-day monitoring note further down this page is TaxDome's too; ask TaxDome which applies to your plan.
TaxDome's own words: "Data sent to third-party LLMs is not stored on those providers’ AI servers beyond the processing of your request." (read 2026-11-03).
Can an administrator read what we put into TaxDome AI?
On TaxDome subscription (AI features included) and TaxDome AI add-on (US firms): It is one switch for everybody. There is no per-user enablement, so turning it on is a decision about every client file in the firm.
TaxDome's own words: "When enabled, TaxDome AI is active for the entire firm and for all of its clients." (read 2026-11-03).
Will TaxDome sign a Business Associate Agreement for TaxDome AI?
We didn't find a BAA statement in the pages listed below; ask TaxDome before any patient data goes in.
How do we find out which version of TaxDome AI our staff are using?
TaxDome sells this to practices rather than to individuals, so there is no personal account to find.
What decides the answers above is which plan your practice is on and what your own administrator has switched on, both of which are in your subscription and your admin console rather than on anybody's laptop.
Obsidian Ridge's free 30-day AI security assessment covers the tools nobody approved, which is the other half of the picture.
Sources
TaxDome’s own pages, with the date each was read. Nothing on this page comes from anywhere else.
All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.
Other tools people ask about
Same question, different answers. The ones in the same category are the ones staff swap between.
Is Freed Scribe safe for client data?
Clinical scribe · Freed
Is Intuit Intelligence safe for client data?
Accounting assistant · Intuit
Is ChatGPT safe for client data?
General assistant · OpenAI