Trust
How we protect your data
You're handing us your bank activity, payroll and tax records. Here's the honest summary of how that information is handled.
A written information security program
MegaCFO maintains a written information security program covering how client data is accessed, stored, transmitted, retained and disposed of. It is reviewed periodically and updated as our systems change.
Access is controlled and logged
Access to client financial data is limited to the people who need it to do the work. Accounts are individual, protected by multi-factor authentication, and access is logged. Access is removed when someone no longer needs it.
Encryption
Client data is encrypted in transit and at rest across the systems we use to deliver services, including our accounting, payroll and document platforms and this website's form submissions.
Established platforms, not homemade tools
We rely on established accounting, payroll, document-exchange and hosting providers that maintain their own security programs, rather than building custom systems to hold your financial data.
How to send us documents
Use the secure document portal we set up during onboarding. Please do not email bank statements, payroll files, tax documents or account credentials. If you're unsure how to send something, ask us first.
Website form submissions
Information submitted through our contact and Financial Checkup forms is transmitted over HTTPS and written to a private, access-controlled database through server-side handlers. Those records are not publicly readable.
Your data stays yours
Your books live in an accounting file your business owns. If our engagement ends, your records and access go with you — we don't hold your data hostage.
Incidents
If we become aware of a security incident affecting your information, we will investigate, take steps to contain it, and notify you as required by applicable law.
What we don't claim
We are a small firm, and we're direct about that: MegaCFO does not hold SOC 2, ISO 27001 or any other security certification, and no security program eliminates all risk. We're happy to answer specific questions about our controls during an engagement discussion.
Reporting a concern
If you believe you've found a security issue with this site or with data we hold, contact us through our contact page and describe the issue. Please don't post details publicly before we've had a chance to respond.
See also our Privacy Policy and Terms of Service. Last updated: August 2026