The Risk Nobody Mentions About Cloud Tax Tools
When you enter financial information into a cloud-based tax calculator, the sequence is simple: your data travels to a server, gets processed, and a result comes back. The convenience is real. So is the privacy exposure — and most people don't think about the second part.
Your provisional tax information — income figures, deduction amounts, retirement contributions, business structure details — contains enough specificity to be useful to someone who shouldn't have it. Identity theft and targeted fraud are more effective when the attacker already knows your financial profile. Cloud tools that store user data, even temporarily, create a target that didn't need to exist.
This isn't a theoretical concern. Significant breaches have occurred at organisations far larger and better-resourced than most tax software providers. The question isn't whether the service is reputable. It's whether putting your financial data through their infrastructure creates a risk that outweighs the convenience.
What Offline-First Actually Means
Offline-first is a design decision, not a marketing label. It means the application is built so that all processing — every calculation, every scenario, every projection — happens on the device in your hand. No data is transmitted to reach a result.
The consequence is structural: there is nothing to intercept in transit, and nothing stored on a server that could be compromised. The two largest attack surfaces in software security — network transmission and remote storage — simply don't exist in an offline-first architecture.
For provisional tax planning, this approach fits the actual workflow. You're estimating annual income, modelling deduction scenarios, and projecting your IRP6 payment. None of that requires a server connection. A well-built local application processes this faster than a cloud tool that requires a round-trip, and it does so entirely within your control.
AES-GCM-256 for Saved Calculations
If you choose to save your calculations, InspiredTax encrypts them using AES-GCM-256. This is the same standard used by banks, government departments, and intelligence agencies — not because it's fashionable, but because it has been subjected to decades of cryptographic analysis and remains secure.
AES-GCM-256 provides two guarantees simultaneously. Confidentiality: the contents of your file cannot be read without the correct encryption key. Integrity: if someone tampers with the encrypted file, the tampering is detectable when you next open it. This combination is what makes it suitable for sensitive financial data at rest.
In practice, even if someone gains access to the storage on your device — through theft, malware, or a shared machine — they cannot read your tax calculations without the key. The file is genuinely protected, not just hidden.
POPIA and Architecture
South Africa's Protection of Personal Information Act places obligations on any organisation that collects, processes, or stores personal information. Financial data falls clearly within scope. For cloud-based tax tools serving South African users, this means data retention policies, breach notification procedures, and a designated responsible party.
InspiredTax's architecture makes most of this redundant. When your data never leaves your device, there is nothing for us to report if a breach occurs on our infrastructure — because your financial information doesn't exist in our infrastructure. This isn't a policy position; it's a structural one.
An Honest Note on Limitations
Offline-first creates friction in specific workflows. If you need your calculations across multiple devices, or want to share projections with an accountant in a collaborative environment, your data living on one device becomes a constraint. It's the trade-off of the architecture.
The practical solution is selective export — sharing a summary or specific figures rather than the raw file. You decide what leaves your device and when. For most people doing their own provisional tax planning, this limitation never materialises. Your calculations live on the device where you do the work, and they stay there.
The alternative — putting all your financial data through someone else's server for convenience — is a trade-off too, just one that runs in the other direction.