AI & Model Training Policy

Taxably Connect uses AI to recognize and read tax documents and support preparation of workpapers for your firm's review. This policy explains how customer information is used in that process. It supplements the Privacy Policy, Data Processing Addendum, and Subprocessor List.

1. No training on customer tax content

Taxably does not use customer tax documents, their contents, or prep-sheet outputs to train or fine-tune shared AI models. It does not authorize its document-reading provider to use that content to train, tune, or refine the provider's models. Customer content is processed to provide the service to the firm, not pooled into a training corpus for other customers.

The reading service uses Google Cloud Vertex AI. Google's published terms restrict training and fine-tuning on customer data without permission or instruction. Taxably does not grant that permission for customer tax content. See Google's data-governance guidance.

Using a model to read a document, or reusing a previous reading within the firm's local workspace, is different from training the model. A correction in your firm's workpapers does not, by itself, train a shared model.

2. What is sent for processing

Connect sends document pages to the reading provider to recognize the document and return structured results. Pages can contain taxpayer names, tax IDs, financial figures, and other sensitive information. File names and folder structure can also be sent to understand how your firm's connected files are organized; names in those paths may identify clients. Identifier filtering does not make a document anonymous.

Results return to the firm's computer for local processing and prep-sheet generation. Hosted account, billing, device, and operational records are separate from this document-reading process. They include information needed to operate and support the service, as described in the Privacy Policy.

3. Retention and temporary copies

The current installer defaults to individual-document reading: document pages travel from the firm's computer to the reading provider without passing through Taxably's hosted account service. Bulk processing is off by default. Where separately enabled, content is temporarily held in United States storage administered by Taxably while the job runs. Authorized Taxably personnel may have administrative access to that storage. The product includes cleanup and deletion checks for these temporary copies; the DPA describes the applicable commitments.

No training is not the same as zero retention. Provider retention can depend on service terms, project settings, abuse monitoring, caching, and the features used. Google's general training restriction is not proof of a project-specific zero-retention configuration. This page does not certify that every provider-side retention exception has been disabled. Firms requiring that evidence should request the applicable assurance materials before relying on an absolute zero-retention claim.

Google's abuse-monitoring guidance describes conditional prompt logging for up to 90 days for customers governed by its standard Cloud terms. An applicable agreement or an approved exception can exclude that logging. On September 28, 2026, Google notified Taxably that it approved an exception to abuse-monitoring prompt logging for Google Cloud project 172352099670. Taxably has retained the approval as evidence. The effective time, covered models, production request coverage and other storage settings are still being verified. This project-specific approval does not establish blanket zero retention or extend to other projects or providers. Google's zero-data-retention guidance describes additional feature-specific conditions; a no-training restriction alone does not establish that those conditions are met.

Local working records, caches, source files, and exported workpapers have their own retention requirements under the firm's control. Deleting a temporary processing copy is not deletion of all customer records. This explanation does not waive or reduce Taxably's obligations under the DPA.

4. Firm separation and access

The hosted service scopes customer access to the firm, and supported bulk processing restricts temporary storage access by firm. Customer tax content is not made available to another firm for its use or included in a shared customer knowledge base.

These are access and use restrictions. They do not represent a dedicated physical server, private model instance, or separately trained model for every firm. Operational identifiers and metadata remain protected information even when real names are replaced.

5. Processing location and connected assistants

Configured bulk storage is restricted to United States locations. Taxably Connect sends documents to be read only to the reading provider's United States endpoints, and refuses the provider's global endpoint, which does not guarantee that a request is processed in the United States. The provider does not report where an individual reading request is processed. The current providers and their roles are disclosed in the Subprocessor List.

If your firm connects an external AI assistant, information returned through that connection reaches the assistant provider you select. An assistant connects to Taxably Connect on your firm's own computer, and the questions it asks and the answers your computer returns do not pass through Taxably's servers. Taxably no longer offers a connection through your firm's Taxably account or from outside your computer. The assistant may suggest an action, and Taxably Connect does nothing with a suggestion until a person at your firm approves it. An answer can contain client information from your firm's records. Its retention, training settings, user access, and contract are separate from Taxably's document-reading arrangement. Review those terms and authorize only the access your firm intends to grant. Taxably's no-training statement does not change another provider's terms for a service your firm independently chooses.

6. Human review and questions

AI results can be incomplete or incorrect. Your firm must review the source documents, extracted figures, and resulting prep sheets before relying on them. Taxably does not make a filing decision or replace the preparer's professional judgment.

For processing instructions, a security questionnaire, or supporting provider evidence, email legal@taxably.ai. Do not attach taxpayer documents or tax IDs. Security incidents can be reported to security@taxably.ai.