The internet is in turmoil. In extreme cases, a simple method can be used by hackers to take control of servers running the log4j framework. Companies such as Apple, Google and Amazon, as well as some German public authorities, use precisely such servers. The Federal Office for Information Security (BSI) has therefore issued the Red alert has been declared – the highest alert level, 4. Does this also pose a risk to law firms and clients who use Opti.Tax Cloud?

Sensitive data is not something to be taken lightly. That is why we focus on ensuring the highest possible level of data security in our software solutions. The recent log4j security vulnerability demonstrates just how essential this is. A serious security vulnerability was discovered in an older version of log4j, which was – and still is – used on many servers. This vulnerability can be exploited by hackers to execute commands on the servers.

For example, servers have already been used remotely to mine cryptocurrencies illegally. In the worst-case scenario, servers can be completely taken over. Whilst security experts predict significant repercussions on the internet, Opti.Tax users can rely on the technical expertise of the hsp development team. Opti.Tax and the Opti.Tax Cloud operate with a whole range of stringent security measures.

Protector TaxoSecurity features of the Opti.Tax Cloud

  • The Opti.Tax Cloud runs on the latest, most secure version of log4j, which does not contain the affected bug
  • Opti.Tax does not use log4j and is therefore not affected either
  • We use German servers exclusively
  • Communication via secure HTTPS (Hypertext Transfer Protocol Secure) only
  • Users can only be created from within Opti.Tax
  • Login for registered users only
  • Password-based login
  • Passwords are stored only as hashes and are therefore impossible to reconstruct; to ensure this, the currently most secure recommended algorithm is always used
  • Protecting the login against brute-force attacks
  • External users can only view and edit those tasks that have been explicitly assigned to them by law firm staff
  • The assignment data is deleted from the cloud as soon as you either retrieve the answers from the cloud in Opti.Tax or delete the assignment
  • Every company uses its own encrypted database

The key documents are held at the law firm

For good reason, Opti.Tax is designed in such a way that data sovereignty lies with the company using the service. The Opti.Tax Cloud is only used for individual steps. Once these have been completed, the data is deleted – in other words, all traces are erased. This means there are no massive databases full of sensitive data on the internet.

We protect your sensitive data using this comprehensive combination of the strictest measures. Good to know: just because your data is secure today doesn’t mean we’re resting on our laurels. The development team is constantly on the lookout for new security measures to ensure your data remains absolutely secure in the future too.