Skip to content

Data Security Measures

Last updated: August 13, 2026

At Evolved Finance, protecting your financial and personal information is a core responsibility. We maintain administrative, technical, and physical safeguards designed to protect the confidential information entrusted to us.

We regularly review and update our systems, vendors, and procedures as technology, regulatory obligations, and risks change. Our security approach focuses on four areas: our people, technology and access controls, responsible use of artificial intelligence, and secure client interactions.

Our People

Our employees are a primary line of defense in protecting client information.

  • Team members with access to confidential or sensitive information are United States-based employees and undergo an independent background check appropriate to their role.
  • Access to client documents, systems, passwords, and financial information is limited to team members who need it to perform their responsibilities.
  • Team members receive security training covering phishing, password security, secure document handling, acceptable use of artificial intelligence, and incident reporting.
  • Suspected security incidents, lost devices, phishing attempts, unauthorized access, and accidental disclosures must be reported promptly so we can contain risk.

Technology and Access Controls

Evolved Finance uses company-managed devices and approved business systems to reduce the risk of unauthorized access.

  • Company computers are encrypted, password-protected, and configured to lock automatically after no more than 10 minutes of inactivity.
  • Company computers are managed through Jamf mobile device management, which allows us to enforce security settings and remotely manage or wipe devices when appropriate.
  • Malwarebytes provides endpoint protection, including anti-malware and related security monitoring. Firewalls, operating-system protections, and timely software updates provide additional safeguards.
  • LastPass is used to generate, store, and share strong, unique passwords.
  • Multi-factor authentication is required for systems that support it. Hardware security keys, including YubiKey, are used for designated high-risk systems.
  • Approved business systems, including Google Workspace, TaxDome, QuickBooks, and other company-authorized platforms, are used to store and process information according to business need and approved access levels.
  • Before a company device is reassigned, returned, sold, or decommissioned, company and client information is securely removed.

Responsible use of Artificial Intelligence

Evolved Finance may use artificial intelligence to support efficient, accurate, and responsible client service. AI assists our professionals; it does not replace professional judgment or human accountability.

  • Only company-approved business or enterprise AI systems may be used for client work. These systems are reviewed for appropriate privacy, security, access, retention, and model-training protections.
  • Personal or consumer AI accounts may not be used for client or company information.
  • Identifiable client information may be used only when necessary for an authorized business purpose and only within an approved system. We minimize the information shared and use anonymized, redacted, or summarized information when identifiable details are not needed.
  • Client passwords, authentication codes, private encryption keys, and security answers are not entered into general AI prompts.
  • AI-assisted work is independently reviewed by a qualified team member before it is relied upon, entered into client records, or shared with a client or third party.
  • AI-generated tax, accounting, legal, or compliance conclusions are verified against authoritative sources and the client's actual facts.
  • AI systems are not permitted to autonomously send client communications, file tax returns, change accounting records, or modify user permissions without an approved workflow and appropriate human review.

Secure Client Interactions

  • We will never ask you to send a username or password through ordinary email, and we ask that you refrain from doing so as well.
  • Sensitive documents and information should be shared through your secure account information spreadsheet, TaxDome, or another approved secure method provided by Evolved Finance.
  • Whenever possible, we request delegated, accountant, or view-only access rather than your primary login credentials.
  • If a two-step verification code is necessary for an authorized task, we will request it through an established company communication channel. Our two-step verification phone number is (424) 261-2751, and company email will come from an @evolvedfinance.com address.
  • Material or unusual requests involving payments, banking information, payroll, account access, or changes to contact information are verified through a separate trusted communication method.
  • Please save our main phone numbers, (424) 241-3350 and (424) 261-2751, so you can recognize communications from Evolved Finance.
  • If you are ever unsure about a request from us, please call us at (424) 241-3350 before responding or sharing information.

Incident Response

If a suspected security incident occurs, Evolved Finance acts promptly to contain and investigate the issue, disable or reset access when appropriate, preserve relevant information, notify affected parties or authorities when required, document the response, and improve safeguards to reduce the risk of recurrence.

Questions

For questions about these security measures, please contact info@evolvedfinance.com.