Security

Your clients' data,
protected.

Handling tax data is a responsibility we take as seriously as you do. Here's exactly how Tony.Online is built to earn that trust.

Australian dataAssisted by AWS in Australia
EncryptedIn transit & at rest
No AI-model retentionThe AI keeps nothing
Registered Tax AgentTPB No. 26364142
How it's protected

Built the way a firm handles data.

A clear picture of where your data lives and how it's looked after.

Stays in Australia

Processed by AWS servers in Australia. Your clients' data never leaves the country.

Encrypted end to end

Encrypted in transit and at rest, so data is protected on the way in, while it's reviewed, and at rest.

Tightly controlled access

Only the systems that need to touch your data can — and every action is logged, so there's always a record.

Full transparency

Every flag shows its reasoning and its source, so you can see exactly why it was raised.

The journey of a return

What happens to your data.

From the moment you send it, to the certificate that comes back — and what's left behind.

You send itThe return and your workings
→
EncryptedSecured in transit and at rest
→
Reviewed in AUAnalysed on Australian servers
→
Certificate backYou get the analysis back
The question everyone asks

“But what about the AI?”

Fair question. Here's exactly how the AI is kept on a short leash.

It doesn't train on your data

Your clients' information is never used to train public AI models.

It retains nothing

Once the review is done, the underlying AI providers keep none of it.

It's grounded, not guessing

Every finding is anchored to the return instructions and current ATO guidance, with a source.

You always sign off

Tony.Online reviews and flags — it never lodges, never changes anything, never replaces your judgment.

Compliance & obligations

Held to the same standards you are.

Registered Tax AgentTony.Online Developments Pty Ltd is a Registered Tax Agent (TPB No. 26364142), bound by the Code of Professional Conduct.
Privacy obligationsClient data is handled in line with the Australian Privacy Principles under the Privacy Act.
Australia onlyTony.Online is available only in Australia, and only to Registered Tax Agents — the profession it was built for.
Who's behind it

Built by tax accountants.

Tony.Online was made and proven inside a practising Australian firm — by people who handle client data every day and know exactly what's at stake. It wasn't a generic AI tool bolted onto tax; it was built for it.

Questions

The security detail.

Where exactly is my data hosted?
On AWS data centres in Australia. Your clients' data is processed and stored in-country and doesn't leave Australia.
Is my data encrypted?
Yes — encrypted in transit and at rest, so it's protected on the way in, while it's reviewed, and while it's stored.
Does the AI train on my clients' data?
No. Your data is never used to train public AI models, and the underlying AI providers retain none of it once the review is complete.
Who can access the data?
Access is least-privilege — scoped to only what's needed to run and support the review — and every action is logged in an audit trail.
Does Tony.Online lodge or change my returns?
Never. Tony.Online reviews and flags; you review, approve and lodge. It doesn't change anything on the return.
Is my data covered by the Privacy Act?
Client data is handled in line with the Australian Privacy Principles under the Privacy Act.
How long is my data kept?
The underlying AI models keep nothing once the review is done. We're happy to walk your team through our full retention and deletion policy on request.
Who can use Tony.Online?
Tony.Online is available in Australia, to Registered Tax Agents only.

Built to be trusted.

See exactly how a review works — try a sample return in the sandbox, no data of your own required.

Try demo now Questions about security? Get in touch