Security Overview

Security Overview

This overview outlines the security measures we’ve put in place to protect your information when you’re using J1 Summer Tax Back.

Secure Storage

We encrypt the files that you store on J1 Summer Tax Back using the AES-256 standard, which is the same encryption standard used by banks to secure customer data. Encryption is applied after data is uploaded, and we manage the encryption keys.

We store data in several large-scale data centers with restricted external access to the server environments. All staff members are carefully screened before being allowed physical access to any of the server environments. Personal access is further restricted by tight access controls within the server environments.

Our data centers are marked as restricted zones. Relevant policies are in place to ensure that nobody except authorized personnel can access them. In the event that an external party needs to access a data center they are accompanied at all times by a System Administrator.

Data Security

As we deal with sensitive information, we place the highest priority on ensuring that our data is securely stored, transmitted, and disposed of as required. We use several methods of encryption for data storage and transmission including:

Why is J1 Summer Tax Back Secure?

Ensuring the privacy and security of your data is a top priority for us. You can rest easy, knowing that we take every precaution to provide an online form service with high grade security.

256 Bit SSL

256 bit SSL (Secure Socket Layer) connection that uses a SHA256 Certificate. This is the same level of protection used by online banking or e-commerce providers. Read More


We use encrypted forms to ensure that submission data is transferred and stored in a secure format and no one else can read it. Submissions are encrypted with high-grade RSA 2048 right at user’s computer then transferred and stored in our servers securely.

PCI Certification

J1 Summer Tax Back is PCI DSS Service Provider Level 1 compliant, the highest security attainment you can have as a business that collects payments from, and integrates with, credit cards.

GDPR Compliance

J1 Summer Tax Back is fully compliant with the European Union’s General Data Protection Regulation (GDPR), the data protection law taking effect on May 25, 2018. This applies to any business that collects data in or from Europe.

CCPA Compliance

J1 Summer Tax Back is compliant with the California Consumer Privacy Act (CCPA), which protects California residents by requiring businesses to handle their online and offline data in a responsible manner. Read More

Spam Protection

In addition to the Captcha’s, we have several other options to protect your forms from spammers.

Form Privacy

Secure data disposal has always been handled in-house. The procedure for secure data disposal is based on US DoD 5220.22-M: National Industrial Security Program Operating Manual (NISPOM) and in particular the DSS Clearing and Sanitization Matrix.

Secure Transfers

Your data is sent from J1 Summer Tax Back Inc’s desktop clients to our servers over a secure channel using 256-bit SSL (Secure Sockets Layer) encryption, the standard for secure Internet network connections.

Data Backup

We have developed comprehensive plans for disaster recovery and business continuity in the event of a disaster.

We are using fully redundant and fault-tolerant server environments. All power to our data centers and critical equipment is backed up by uninterruptible power supplies

In addition, full and incremental backups are scheduled to ensure the availability of data in case of a disaster. Data backups are replicated between the main data centers as well as in off-site hosting. Our IT department has ensured that the security of off-site backups is in line with all internal security policies.

Our team has worked hard to ensure all your Data is secure. At J1 Summer Tax Back, protecting your privacy is our top priority, and we’ve succeeded in making sure our company and services are secure from start to finish. J1 Summer Tax Back

We have all the necessary documents and organizational measures in place to ensure a high level of personal data protection. Please read our Privacy Policy, and Cookie Policy to know more about how we process and protect personal data in accordance with data protection laws and good industry practice.

We offer a Secure Data Processing and reflects our data privacy and security. 

We use our carefully selected sub-processors in order to provide the highest-quality services to you according to secure requirements.

Our data center service provider provides all the necessary security measures for data protection and processing. Our services are hosted by a trusted and certified data storage center that has an information storage security certificate (ISO 27001). You can rest assured that your data and your subscribers’ data is safe with us.

If you have any questions about data protection, please contact us at and review our related blog posts and videos.