Use outsourcing with confidence
With a clear emphasis on measuring process effectiveness and performance, QX follows the globally accepted ISO 9001:2015 quality management system (QMS). In addition to giving us access to industry best practices, the adoption of a BSI-accredited, ISO framework helps us continually monitor and improve our procedures and processes.
To maintain rigorous quality control, we undertake regular training and audits. Our internal auditors verify the efficiency and effectiveness of our procedures and revise them, wherever needed. Moreover, to ensure that business objectives continually feed into our processes we validate our quality management system by third-party auditors.
Following a successful audit by the British Standards Institution (BSI), QX earned the internationally recognised ISO 27001:2022 certification for its information security management system. The British Standards Institute’s ISO 27001:2022 is the current best-in-class standard for Information Security Management Systems.
QX follows security guidelines such as:
QX recognises the need for such certification and acknowledges that ISO 27001:2022 indeed ensures appropriate controls to securely protect information and intellectual property. As an ISO 27001:2022 compliant organisation, we treat information as the most valuable asset and continually assesses our systems to ensure the highest level of information security.
QX is now Cyber Essential certified, which demonstrates that the company has vigorous IT defences that are designed to contest cyber-attacks. The scheme has been designed by the UK Government to help organisations mitigate internet-based risks.
The five basic controls within Cyber Essentials were chosen because, when properly implemented, they will help to protect against unskilled internet-based attackers using commodity capabilities – which are freely available on the internet. The scheme addresses five key controls (below), that when implemented correctly can prevent 80% of cyber-attacks.
QX has now started to establish and grow its business across different countries, and considering the diversity of stringent privacy law requirements, it was imperative for us to implement controls and measures that are in alignment with these requirements. That’s where QX implemented the ISO 27701 standard for global privacy management followed by a successful audit by the BSI.
ISO 27701 is the best practice structure for a privacy information management system that is aligned with the core principles of data protection. It is a privacy extension to the international Information Security Management Standard, ISO 27001. It specifies the requirements for – and provides guidance for establishing, implementing, maintaining and continually improving – a PIMS (Privacy Information Management System). It is based on the requirements, control objectives and controls of ISO 27001, and includes a set of privacy-specific requirements, controls and control objectives.
The British Standards Institute (BSI), conducted a very thorough audit of the internal control framework at QXAS US and vetted our system and organization controls that were deployed with respect to the ‘5 trust principles’. The SOC 2 report offers detailed information and assurance vis-à-vis the set of controls in place at QXAS relevant to aspects such as security, availability, integrity of the system processing client data and also the confidentiality and privacy of all data processing.
The audit determined that QXAS is a SOC 2 Type II compliant organization. In SOC 2 parlance, Type I is a description of all the systems deployed by the vendor and the auditor assesses whether system design is in perfect sync with the required trust principles. Type II goes one step beyond and describes the effectiveness of all the systems that the organization has implemented to meet SOC 2’s trust principles.
QX Robo 1040, your go-to solution for personal federal income tax returns for U.S. residents, proudly meets the rigorous AICPA SOC2 standards. Developed by QX Accounting Services, This intuitive software simplifies the tax filing process, making the complex Form 1040 straightforward and stress-free. QX Robo 1040 is compliant with AICPA SOC2 requirements. With SOC2 compliance, QX Robo 1040 ensures the highest levels of security and reliability, making your tax season straightforward and worry-free.
We are continuously hearing reports of data breaches in some of the biggest organizations across diverse sectors. Customer data is now a prime currency and criminals are after sensitive customer data including Personally Identifiable Information (PII), financial information and any other information that is valuable to the customer and the organization.
QXAS has earned its SOC 2 report on the back of its focus on ensuring complete data security and seamlessly efficient data management. This means, our clients are rest assured their data is managed securely and will not be accessed in an unauthorized manner.
Get the monthly QXAS newsletter with curated content just for you2837
