Security & Data Handling

1. Secure infrastructure

Client data is held on SOC 2 Type II infrastructure.

2. What our forms collect

Website forms collect contact details only.

• No SSNs, EINs, ITINs, dates of birth or account numbers in forms
• No advertising pixels on request pages
• Form entries deleted after 90 days

3. Sharing documents

Documents are exchanged only through the secure client portal — never by email attachment.

4. Review and quality

Work goes through multi-tier CPA review before it is delivered or filed.

5. Third-party requests

We share CPA letters and reports with third parties only with your written consent.

6. Reporting a concern

If you think you have received a suspicious message claiming to be from NexusWorks, contact us using the details below before responding.