Data Storage on Non-US Servers Policy
GFIS LLC
Data Storage on Non-US Servers Policy
1. Purpose
To ensure compliance with U.S. tax regulations and safeguard
sensitive taxpayer information, Remote Business Services LLC strictly prohibits
the storage, processing, or transmission of tax return data outside the United
States.
2. Policy Statement Unless the Taxpayer requests otherwise by
written request (see Storing Tax Payer Data Outside of the US Policy), all tax
return data collected, processed, or maintained by Remote Business Service must
be stored exclusively within U.S.-based data centers or infrastructure.
No
such data may be transferred, backed up, or accessed from servers or systems
located outside the United States unless explicitly authorized under applicable
laws (e.g., IRS requirements or written consent from the taxpayer).
3. Scope This policy applies to: - All tax return data
(including but not limited to federal, state, and local filings). - Any
electronic or physical records containing taxpayer personally identifiable
information (PII), financial data, or supporting documentation. - All systems,
cloud services, third-party vendors, and subcontractors handling such data on
behalf of Remote Business Services LLC.
4. Requirements
4.1 Data Storage & Hosting - Tax return data must only
reside on U.S.-based servers or cloud providers with contractual guarantees of
U.S.- only data residency. - Any third-party service providers (e.g., cloud
storage, payroll processors) must certify in writing that they comply with this
policy.
4.2 Data Transfers - International transfers of tax return
data are prohibited unless encrypted and approved by the Compliance Officer for
legally permissible purposes (e.g., taxpayer-directed disclosures).
4.3 Employee & Contractor Obligations - Remote access to
tax return data from outside the U.S. is permitted only through secure, company-approved
VPNs with U.S. endpoints. - Employees must not store tax return data on
personal devices or non-compliant platforms (e.g., unapproved cloud drives).
4.4 Vendor Management - Vendors handling tax return data must
sign agreements affirming U.S.-only data storage and processing. - Regular
audits will verify vendor compliance.
5. Enforcement & Violations - Violations may result in
disciplinary action, termination, or legal consequences. - Suspected breaches
must be reported immediately to the Compliance Officer.
6. Review & Updates This policy will be reviewed annually
or as needed to align with changes in U.S. tax laws or data protection
standards. If you have any questions or concerns about this policy, please
contact our Compliance Officer at this link.
Rev Date: 08/31/2025
Doc. No.: 1003
Rev: 1.0.0.0
Approved: Compliance Officer – Signature on File
Remote Business Services LLC
Comments
Post a Comment