Tax360 Trust Center: security, privacy and assurance for critical tax operations

Tax360 Trust Center: security, privacy and compliance with concrete evidence

Why the Trust Center matters now

In tax technology, trust is not just about application availability or processing speed. It depends on governance, information security, privacy, operational continuity and the ability to demonstrate controls objectively to Tax, IT, Compliance, Legal and Procurement teams that need to qualify vendors, respond to audits and make evidence-based decisions, especially in a landscape under pressure from Brazil's consumption tax reform.

The Trust Center brings this conversation together in a single place, with clear language and concrete evidence. Instead of scattering information across corporate pages, sales materials and one-off responses to due diligence requests, MaterImperium consolidates here the policies, commitments and assurance roadmap that support the Tax360 platform as enterprise SaaS tax infrastructure.

Information security and operational continuity

MaterImperium's Information Security Policy sets the objective of protecting information and personal data with a focus on confidentiality, integrity, availability and privacy, as well as reducing incidents, losses and operational disruptions. The document formalizes business continuity, continuous improvement and governance roles, with an Information Security Management Committee already in operation. The security controls are active, and the ISO/IEC 27001:2022 certification is the formalization of this system, not its starting point.

At Tax360, this guideline translates into architecture and operations decisions: security by design, modern APIs with OAuth 2.0 , authentication with MFA (Multi-Factor Authentication) or SSO (Single Sign-On) , a zero trust approach , per-component failover, automated backup with configurable retention, ERP integrations built securely and a design built for high volume. The Tax360 platform operates with a high-availability commitment and per-component failover, with continuous monitoring and a documented incident response plan. For the corporate client, this means less reliance on improvised solutions and more predictability to run critical tax routines at scale.

Privacy, LGPD and governance

On the privacy front, MaterImperium maintains its own policy to demonstrate its commitment to personal data protection, describing legal bases, security of personal information, restricted access, a confidentiality commitment and communication in the event of relevant incidents, in line with the LGPD (Brazil's General Data Protection Law). The document also provides the DPO (Data Protection Officer) channel and the data subject request form, which reinforces transparency and governance.

To give public visibility to this commitment and facilitate the due diligence process, the Tax360 website already has dedicated Privacy Policy pages , which serve as permanent resources for clients, partners and audit teams to consult guidelines, responsibilities and contact channels, accessible at any time, with no need for a formal request. This reduces rework in RFPs, vendor approval processes and internal audits.

The certifications and assurance roadmap

MaterImperium is the developer of Tax360, so the certifications, audits and policies associated with the security and privacy environment belong to the company and are reflected in the platform. This point matters for procurement and vendor assessment, because it makes clear where formal responsibility, governance and evidence of controls lie.

ISO/IEC 27001:2022

The Tax360 platform is developed and operated under an ISO/IEC 27001:2022 certified management system, the main international standard for information security management systems. In practice, it sets out requirements to structure, operate and continually improve an ISMS, with a focus on risk management, data protection and operational resilience. Its importance lies in showing that security is not treated as an isolated task, but as a continuous management system.

ISO/IEC 27701:2019

The same management system is also certified to ISO/IEC 27701:2019, which extends this logic to privacy. It provides a structured framework for managing personal information, accountability for PII and continual improvement of privacy practices, which helps demonstrate maturity to clients, partners and internal teams that need to assess the processing of personal data in greater depth.