What the application never saves

To protect taxpayer data and credentials, the application never writes any of these to disk or logs:

• Certificate passphrases
• OAuth access tokens, refresh tokens, and JWTs
• Private keys
• The XML payloads you transmit or any taxpayer data they contain
• IRS response bodies that contain taxpayer data