Business Continuity & Disaster Recovery Policy

Taxably Connect keeps the firm's working records and generated workpapers on the firm's computer. Hosted services support sign-in, device authorization, billing, operational reporting, and AI reading. Recovery therefore has two parts: Taxably's hosted services and the firm's local workspace. Neither is a backup of the other.

1. What your firm retains

Your source documents remain in the folders your firm controls. Generated PDFs, workbooks, and other exports remain wherever your firm saves them. Existing readable exports can be used independently of the hosted service.

New AI reading requires connectivity and the relevant hosted services. Assistant access to local records also depends on the designated Connect computer being available. An outage may interrupt those features even when your files remain accessible.

2. Hosted backups and recovery

As of September 17, 2026, the production account and operational database is encrypted at rest, has automated backups retained for seven days, and has an available point-in-time recovery window. These backups cover hosted records, not the source documents, complete local working records, or exports on your firm's computer.

Taxably's documented recovery procedure restores hosted records into a separate environment and checks access restrictions and data compatibility before returning the restored service to use. It calls for an annual restore rehearsal. A configured backup and an available recovery window do not establish that a full recovery exercise has been completed; this page does not claim a completed rehearsal or a measured recovery time.

Backup expiration and deletion obligations remain governed by the Data Processing Addendum. Temporary copies created for AI processing are not recovery backups and are subject to the processing cleanup requirements described there.

3. Workstation loss, replacement, or corruption

Your firm is responsible for protecting and backing up its source documents, delivered workpapers, and local Connect environment, including with its own full-disk encryption and Windows account controls. Connect keeps its local records as ordinary files and does not lock them to the computer. Copying the application data folder to another computer or Windows profile is not a supported way to move Connect's records.

Before replacing the computer, reinstalling Windows, deleting its profile, or clearing Connect's data, retain your source files and readable exports and arrange a recovery or migration review with support. Test your firm's backup method before relying on it.

If local records cannot be recovered, reprocessing retained source documents may recreate some work. It may not reproduce review decisions, manually entered information, or the exact previous outputs. Reprocessing depends on service availability and the applicable usage terms. It is not a substitute for tested backups.

Local recovery copies that remain on the same computer are not protection against loss of that computer or ransomware.

4. Interrupted processing and data integrity

Connect is built to recover from interruptions where it can; they do not guarantee that every interrupted job resumes automatically or that no work can be lost.

After an interruption, confirm the client's processing status and review the resulting prep sheet before using it. Retain source documents until your firm has verified the work and applied its own retention policy. Contact support before deleting local records as a troubleshooting step.

5. Incident response and communication

Taxably's incident procedure assigns an incident lead and covers evidence preservation, containment, investigation, recovery, and review. If an incident involves a personal information breach, customer notification follows the DPA, including its notice deadline measured from awareness, and applicable law. Security recovery is not limited to restoring service availability.

Check service status for published service updates, and use Help and support for assistance with your firm's situation. Report suspected unauthorized access to security@taxably.ai. Do not send taxpayer records in ordinary email.

6. Recovery objectives and service commitments

Taxably does not publish a guaranteed recovery time objective (how quickly service is restored) or recovery point objective (how much recent work could be lost) for the complete Connect workflow. The seven-day hosted backup window is a retention setting, not either of those guarantees.

Availability commitments, exclusions, and credits are governed by the Service Level Agreement. This policy does not expand or reduce those commitments or promise uninterrupted offline processing. For recovery requirements or current evidence, email legal@taxably.ai.