Identification of all locations where PII (Personally Identifiable Information) is processed.
| Data Asset/System | Data Type | Storage Location | Encryption Status |
|---|---|---|---|
| QiVault / Client Portal | SSNs, Tax Docs, Bank Info | Cloud (AWS/Azure) | AES-256 / Encrypted at Rest |
| Tax Prep Software | Tax Returns, E-file info | SaaS (Vendor) | MFA Enabled / TLS 1.3 |
| Local Hardware (Laptops) | Temporary working files | BitLocker/FileVault | Full Disk Encryption |
| Email (Google/O365) | Client Communications | Cloud | TLS / Forced MFA |