Security

Last updated: September 19, 2026

Renshi CodaraFlow is built for sensitive tax and corporate data. We run a dedicated instance for your firm in Canada. This page describes the controls it provides.

Where Your Data Lives

Your firm’s data sits on its own dedicated instance in Canada, one firm per instance and per database, never combined with other firms’ records.

Encryption

Connections are served over HTTPS. The database is kept on an encrypted volume in Canada. The data itself is a standard, portable file, never locked into a proprietary or vendor-held format, and your administrators can download a complete copy at any time.

Backups

The admin Backup page produces a consistent snapshot of the database at any time, without stopping the app, as a single file any administrator can download and keep wherever your firm keeps its records. Your firm can also schedule backups to run automatically.

Access Controls

• Two-factor authentication. Firms can require an authenticator-app code in addition to a password for every user.
• Brute-force protection. Repeated failed sign-ins lock an account for a cool-off period.
• Email-domain restriction. Only addresses on the firm’s own email domains can be added as users or sign in.
• Single active session. A new sign-in ends older sessions for that account.
• Audit log. Key actions are recorded so the firm can see who did what and when, including administrators’ own actions.

Questions

Email us at [email protected].