How Plain Dot protects TINs and filings.
Every control on this page is in place today.
What is in place.
Stored in the US
Data encrypted and stored on Amazon AWS servers in the US.
TINs masked
Every screen masks the TIN to its type and last four digits.
Every full-TIN view logged
We log each full-TIN view with who and when. Owners and Admins read the Activity Log.
Roles for each company
Owner, Admin, Edit Access (for named companies) and View Only. Only the Owner changes a plan.
Records kept seven years
We keep IRS statuses, receipt IDs, corrections and match records for seven years while your account is open. We delete all data for closed accounts.
Encryption and backups
We encrypt data in transit (TLS 1.2 or higher) and at rest. We take encrypted backups each day and keep the latest seven.
IRS programs and audits.
| Program | Status |
|---|---|
| IRS e-file | Registered IRS e-file provider · files through IRIS under our own Transmitter Control Code (TCC) · IRS e-file provider listing |
| IRS TIN Matching | TIN Matching authorized agent. Checks run under Plain Dot's IRS account, with each payer's written authorization. |
| ATS testing | We are 2025 and 2026 ATS tested and verified by the IRS to transmit data. |
| SOC 2 Type II | No, not yet. Planned for 2027. |
Who handles your data with us.
| Subprocessor | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting and storage | US East |
| Stripe (Stripe Link) | Card and bank (ACH) payments | US |
| Lob | Printing and mailing recipient copies | US |
| Loops | Account and notification email | US |
Tell us about a security problem.
- If you find a security problem, send an email to hello@plaindot.com. Tell us what you found and how to reproduce it. A person reads each message.
- If a breach affects your data, we tell you within 48 hours after we confirm it.