Data Storage on Non-US Servers Policy

GFIS LLC

 Data Storage on Non-US Servers Policy

1. Purpose


To ensure compliance with U.S. tax regulations and safeguard sensitive taxpayer information, Remote Business Services LLC strictly prohibits the storage, processing, or transmission of tax return data outside the United States.

2. Policy Statement Unless the Taxpayer requests otherwise by written request (see Storing Tax Payer Data Outside of the US Policy), all tax return data collected, processed, or maintained by Remote Business Service must be stored exclusively within U.S.-based data centers or infrastructure.

No such data may be transferred, backed up, or accessed from servers or systems located outside the United States unless explicitly authorized under applicable laws (e.g., IRS requirements or written consent from the taxpayer).

3. Scope This policy applies to: - All tax return data (including but not limited to federal, state, and local filings). - Any electronic or physical records containing taxpayer personally identifiable information (PII), financial data, or supporting documentation. - All systems, cloud services, third-party vendors, and subcontractors handling such data on behalf of Remote Business Services LLC.

4. Requirements

4.1 Data Storage & Hosting - Tax return data must only reside on U.S.-based servers or cloud providers with contractual guarantees of U.S.- only data residency. - Any third-party service providers (e.g., cloud storage, payroll processors) must certify in writing that they comply with this policy.

4.2 Data Transfers - International transfers of tax return data are prohibited unless encrypted and approved by the Compliance Officer for legally permissible purposes (e.g., taxpayer-directed disclosures).


4.3 Employee & Contractor Obligations - Remote access to tax return data from outside the U.S. is permitted only through secure, company-approved VPNs with U.S. endpoints. - Employees must not store tax return data on personal devices or non-compliant platforms (e.g., unapproved cloud drives).

4.4 Vendor Management - Vendors handling tax return data must sign agreements affirming U.S.-only data storage and processing. - Regular audits will verify vendor compliance.

5. Enforcement & Violations - Violations may result in disciplinary action, termination, or legal consequences. - Suspected breaches must be reported immediately to the Compliance Officer.

6. Review & Updates This policy will be reviewed annually or as needed to align with changes in U.S. tax laws or data protection standards. If you have any questions or concerns about this policy, please contact our Compliance Officer at this link.


Rev Date: 08/31/2025
Doc. No.: 1003
Rev: 1.0.0.0
Approved: Compliance Officer – Signature on File
Remote Business Services LLC

Comments

Popular posts from this blog

FinCEN Compliance Policy for Foreign Operations

Why Overseas Teachers Can’t Claim the Educator Expense Deduction on Their U.S. Taxes