Does the price ever change?

No. $59 covers your federal return and every federal form we support. You see this price before you enter any numbers, and it stays the same at checkout.

Are all the tax forms included?

Yes. Every IRS form your return needs is included in the flat price. There is no add-on charge to unlock a form.

Is TaxPad affiliated with the IRS?

No. TaxPad is an independent company. We prepare and file your federal return; the IRS processes it.

Security

Draft — This policy is a working draft written alongside the product. It has not yet been reviewed by counsel and is not the final agreement. It is published now because the practices it describes are the ones we are building to, and because we would rather be checkable than vague.

Tax preparers are treated as financial institutions under federal law, which means we operate a written information security program and are audited against it. Here is what that means in practice.

Last updated: September 12, 2026

How your data is protected

Everything is encrypted in transit and at rest. Social Security numbers carry a second layer of encryption with separately managed keys, so reading the database is not the same as reading the numbers.

Access is scoped per taxpayer and enforced in the data layer itself, not only in application code.

Multi-factor authentication

Multi-factor authentication is required, for you and for us. The IRS treats it as a requirement for tax software, and we agree.

We do not use identity quizzes that ask you to remember a past address or a former car loan. They are weak security, and they exclude people with memory and cognitive disabilities. We use passkeys and links sent to you instead.

Testing and monitoring

Our systems are scanned for vulnerabilities every week by an independent certified vendor, and the reports are retained. We monitor for unusual filing patterns, because organized refund fraud is a real and constant pressure on every tax product.

Documents you upload are scanned for malware, and checked for hidden content designed to manipulate the systems that read them.

Reporting a problem

If you believe you have found a security issue, tell us. We will not pursue legal action against anyone who reports a genuine vulnerability in good faith and gives us a reasonable chance to fix it.

Back to the home page