Security

Last updated: 19 June 2026

1. Our Commitment

Bosh handles sensitive financial and tax information, and protecting it is fundamental to everything we do. Eris AI Limited, trading as Bosh, builds security into the design of our app and infrastructure. This page explains the measures we take to keep your data safe. It should be read alongside our Privacy Policy.

2. Encryption

All data transmitted between the Bosh app, our servers, and the third-party services we rely on is encrypted in transit using industry-standard TLS (Transport Layer Security). Data stored on our infrastructure is encrypted at rest. Sensitive credentials are never stored in plain text.

3. Open Banking

Bosh connects to your bank using Open Banking, the UK’s regulated framework for secure financial data sharing. This means:

  • We never see or store your online banking username or password - you authenticate directly with your bank.
  • Access is read-only. Bosh can view transaction data to help categorise expenses and calculate your tax, but cannot move money or make payments.
  • Bank connections are provided through an FCA-regulated Open Banking provider, and you can revoke access at any time from within the app or through your bank.

4. HMRC Submissions

Bosh is recognised by HMRC for Making Tax Digital (MTD). Submissions to HMRC are made over secure, authenticated connections. We follow HMRC’s fraud-prevention and security requirements for every submission made on your behalf, and HMRC authentication tokens are stored securely and used solely to file on your instruction.

5. Payments

Subscription payments are processed by Stripe, a PCI-DSS Level 1 certified payment provider. Bosh does not store your full card details on our systems.

6. Infrastructure & Access Controls

  • Your data is hosted with reputable cloud providers using data centres located in the UK and EU.
  • Access to production systems is restricted to authorised personnel on a least-privilege basis and protected by strong authentication.
  • We apply security updates promptly and monitor our systems for unusual activity.

7. Your Role in Staying Secure

Security is a shared responsibility. We recommend you keep your device and the Bosh app up to date, use a secure screen lock, and never share your verification codes with anyone. Bosh will never ask you for your bank password.

8. Reporting a Security Issue

If you believe you have found a security vulnerability or have concerns about the security of your account, please contact us immediately at support@bosh.tax. We take all reports seriously and will respond as quickly as possible.