Cookie Policy

Scope of the Information Security Policy and Regulatory Compliance:

• Our Information Security Policy establishes a comprehensive framework to protect sensitive data, systems, and networks from potential security threats.
• It applies to all employees, contractors, and third parties who access or manage the organization's information systems and ensures adherence to the IRS and FTC Safeguards Rule.

Data Protection and Security Framework for FTE-Managed Information:

• The policy safeguards Personally Identifiable Information (PII), financial records, and critical systems from unauthorized access, alteration, or destruction, encompassing data stored in cloud environments, physical media, and all endpoints.

Roles and Responsibilities in Maintaining Information Security:

• Senior Management is responsible for defining the security strategy, allocating necessary resources, and overseeing security performance.
• The Information Security Officer is tasked with implementing the security program, conducting regular audits, ensuring compliance, managing incident response, and maintaining close coordination with senior management to uphold the highest security standards.

‍

FTE offers clients the option to use their own security controls or adopt FTE's established framework.

• If clients choose their own controls, they must ensure compliance with security standards.
• By selecting FTE’s controls, FTE takes full responsibility for maintaining and managing them to meet industry standards and regulatory requirements.

Client-Implemented Security Controls:

• Clients may choose to implement their own security controls tailored to their specific needs. In this case, clients are completely responsible for enforcing and maintaining their security posture and are accountable for documentation and evidence of their security controls.
• FTE may conduct regular audits and assessments to ensure compliance with these standards.

Adoption of FTE’s Security Controls:

• Clients may opt to adopt the security controls implemented by FTE. By choosing this option, clients agree to adhere to the security policies and controls established by FTE.
• FTE is responsible for facilitating the integration and implementation of security controls for the client and providing support and guidance to help clients maintain these controls effectively.

‍

The following security controls are enforced as a minimum standard:

Access Control:

• Uses Role-Based Access Control (RBAC) with least privilege principle. Quarterly access reviews and Just-In-Time access for sensitive data.

User Authentication:

• Mandatory multi-factor authentication (MFA) for critical systems. Uses VPNs and enforces strong password policies and account lockout thresholds.

Network Security

• Employs firewalls with stateful and deep packet inspection. Uses network segmentation, Intrusion Detection and Prevention Systems (IDS/IPS).

Data Encryption:

• Encrypts sensitive data at rest with AES-256 and in transit with TLS 1.2+. It also mandates email encryption and enables DRM for sensitive information.

Endpoint Security

• Protects endpoints with Endpoint Detection and Response (EDR) solutions and anti-malware software. Restricts USB devices and uses endpoint firewalls.

Patch Management

• Centralized system for regular updates. Critical patches are performed within 24 hours, and routine updates are made monthly. Scans for out-of-date software and quarantine unpatched systems.

Mobile Device Security:

• The company uses mobile device management (MDM) for company-issued devices. It enforces encryption, remote wipes, and app installation and restricts app installation. It also encrypts internal communications.

Logging and Monitoring:

• This department uses security information and Event Management (SIEM) systems for real-time alerts. Logs are retained for a year and reviewed quarterly.

Vulnerability Management:

• Regular vulnerability scans and ad-hoc penetration testing. Tracks and prioritizes vulnerabilities for remediation.

Backup and Recovery:

• Regular encrypted backups stored onsite and offsite. Uses MFA for backup protection and conducts bi-annual disaster recovery exercises.

Data Management:

• Data is classified, and strict protocols are in place for handling sensitive data. Retention follows regulatory requirements, and secure deletion methods are used for data beyond its retention period.

Employee Training and Awareness:

• Mandatory security training during onboarding and annually thereafter. Phishing and social engineering education with regular simulations.

Incident Response Plan:

• Procedures for handling security incidents, using SIEM tools for monitoring. Incident Response Team (IRT) manages containment, analysis, and reporting.

‍

Identity Verification:

• Our process includes verifying government-issued identification and collecting Nepalese Permanent Account Numbers (PANS).
• These numbers, similar to Social Security Numbers (SSNs) in the U.S., are used for payroll and to confirm the identity of each team member.
• PANs can be verified with an online database.

Criminal Record and National Database Check:

• We require team members to provide a “Clean Police Report” as confirmation of identity through national or regional databases where applicable.

International Watchlists Screening:

• While most of our team members are recent college graduates, we can conduct searches on international or local watchlists, including sanctions lists, if required.

Reference Verification:

• We verify the legitimacy of references provided by team members. This process includes confirming their authenticity through a Clean Police Report and PAN, with final approval from the Notary Public Office of Nepal.

‍

Code of Conduct and Ethics:

• Our team must follow a strict code of ethics to maintain privacy and confidentiality.
• Team Members are required to act with respect, integrity, and fairness at all times.
• Unauthorized sharing of client data or company information is strictly prohibited.
• Conflicts of interest are not tolerated, and all team members must ensure their actions align with the company's mission and ethical standards.

Confidentiality and Data Protection:

• At FTE, we prioritize protecting confidential client data by securely managing all sensitive information and limiting access to authorized personnel only.
• We follow a digital-only policy, with no data printed or stored physically. Communication is conducted via secure platforms, ensuring encrypted exchanges.
• Strong security measures, including the use of industry-standard malware protection and secure VPN services for internet connections, are in place to prevent unauthorized access.
• We regularly update our protocols to maintain data integrity, and sharing information without permission is strictly prohibited.

IT, Internet, Email, Mobile & Social Media Use:

• When using IT systems, the Internet, email, mobile devices, or confidential information, team members must follow best practices to protect confidential information.
• Personal use of social media is allowed, but it must not compromise the company’s reputation or disclose any sensitive information.
• Team Members representing the company online should maintain professionalism, ensure no confidential data is shared, and separate personal opinions from official company views.

Compliance and Monitoring:

• Violations of this policy may result in disciplinary action, up to and including termination.

Expert Tax Teams:

• Our Success Managers, Tax Preparers, and Reviewers deliver high-quality tax services collaboratively. Success Managers are the main point of contact, ensuring smooth communication and alignment with client goals.
• Our Tax Preparers in Nepal organize clients' documents and prepare the initial tax return, which Associate 2 then reviews for accuracy.
• The process continues with two levels of detailed review by Senior 1 and Senior 2, who conduct final checks and contact clients if additional information is needed.

Uncompromised Security:

• Our team follows a detailed Code of Conduct emphasizing integrity, confidentiality, and zero tolerance for unauthorized data sharing.
• Every team member undergoes annual police checks, comprehensive reference verifications, and regular ethics training to reinforce these standards.
• Communication is conducted on secure platforms, with client data protected through strong encryption and continuous monitoring.
• A dedicated IT Security Specialist enforces our Written Information Security Policy (WISP) that is required by us government to uphold rigorous data protection and compliance protocols at every level of the organization.

Seamless Integration into the Tax Prep Cycle:

• Our team in Nepal organizes client documents, prepares the initial draft, and performs multiple levels of quality review for accuracy.
• The US managers then step in to finalize the return, suggest tailored tax strategies, and identify opportunities for deduction maximization based on your unique needs.
• Once the review is complete, FTE manages e-signature requests, billing, and organizes the final return for electronic filing, ensuring a smooth, end-to-end process that optimizes your tax outcomes.

Learning and Development Support:

• We have a dedicated full-time who schedules ongoing training and professional development sessions.
• This specialist offers ongoing training sessions covering key topics like Tax Planning, Tax Rules, Financial Statements, Income Statements, Balance Sheets, and Cash Flow Statements through curated resources.
• Your team will gain a thorough understanding of financial statement structures, account classifications, revenue vs. expenses, asset management, CAPEX vs. OPEX distinctions, liabilities, and cash flow types.
• With access to these learning materials and specialized support, your team will continuously enhance their skills to deliver accurate, high-quality financial work.

Tax Planning Software in Development:

• We're building cutting-edge tax planning software, TaxMD.com, set to launch by December 2024 or early 2025.
• Your team members will receive specialized training on its use, enabling them to add more value to your practice through advanced tax planning strategies.

Access to a Comprehensive Talent Pool:

• In addition to our tax professionals, we provide skilled team members for marketing, business support, IT security, and software development to meet your firm's diverse needs.
• Our Marketing Team offers social media management, email marketing, SEO, content creation, blogs, multimedia production, and graphic design.
• The Business Success Team handles proposals, business emails, contracts, project management, and client onboarding.
• For IT Security, our specialists enforce the Written Information Security Policy (WISP), conduct risk assessments, and ensure data protection.
• Our Software Development Team includes backend and frontend developers, along with full deployment support for robust software solutions.
• With this talent pool, we seamlessly integrate into your operations, enhancing your firm's efficiency and growth.

‍

With us, you get the expertise of a full-time team without the overhead, allowing you to focus on growing your business.

Terms and Conditions

These terms and conditions outline the rules and regulations for the use of our website and services. By accessing this website, we assume you accept these terms and conditions. Do not continue to use Full Time Employee LLC if you do not agree to all terms and conditions stated on this page.

Definitions

• Company: Refers to Full Time Employee.
• Client: Refers to the entity that signs up to use our services.
• Employee: Refers to the dedicated, full-time staff provided by Full Time Employee to the Client.
• Website: Refers to Full Time Employee's website.

Services

Full Time Employee LLC provides businesses with dedicated, full-time staff who work remotely to support their operations. Our services include, but are not limited to, administrative support, customer service, and IT support.

User Accounts

• Clients are required to create an account to access our services.
• You are responsible for maintaining the confidentiality of your account and password.
• You agree to notify us immediately of any unauthorized use of your account.

Payment and Fees

• Clients agree to pay all fees associated with the services provided by Full Time Employee LLC.
• Payment terms will be outlined in the service agreement between Full Time Employee LLC and the Client.
• All payments are non-refundable unless otherwise stated in the service agreement.

Client Responsibilities

• Clients must provide accurate information during the registration process.
• Clients must ensure that the tasks assigned to Employees comply with all applicable laws and regulations.
• Clients must not engage Employees in any activity that is illegal or harmful.

Employee Responsibilities

• Employees provided by Full Time Employee LLC will work exclusively for the Client during the agreed working hours.
• Employees will maintain confidentiality and protect any sensitive information provided by the Client.

Termination

• Either party may terminate the service agreement with prior notice as outlined in the agreement.
• Full Time Employee LLC reserves the right to terminate services immediately if the Client breaches any terms and conditions or engages in illegal activities.

Limitation of Liability

• Full Time Employee LLC shall not be liable for any indirect, incidental, or consequential damages arising out of or in connection with the use of our services.
• Our liability is limited to the amount paid by the Client for the services during the preceding three months.

Governing Law

These terms and conditions are governed by and construed in accordance with the laws of Nepal. Any disputes relating to these terms and conditions will be subject to the exclusive jurisdiction of the courts of Nepal.

Changes to Terms and Conditions

Full Time Employee LLC reserves the right to modify these terms and conditions at any time. Any changes will be posted on this page, and your continued use of the website and services will constitute your acceptance of the revised terms.

Contact Us

If you have any questions about these terms and conditions, please contact us at info@ftemployee.com

Tax Compliance Privacy Policy

At Full Time Employee LLC, we are committed to protecting the privacy and confidentiality of our clients' personal and sensitive information. This Tax Compliance Privacy Policy outlines the standards and procedures we follow to ensure your data is handled securely and responsibly. By engaging with our services, you agree to collect, use, and disclose your information as described in this policy.

Information Collection

We collect various types of information to provide and improve our services, including:

1. Personal Information: Name, address, phone number, email address, Social Security number, and other identifiers.
2. Financial Information: Income details, tax returns, bank account details, and other financial documents.
3. Technical Information: IP addresses, browser type, access times, and pages visited.

Use of Information

The information we collect is used to:

1. Prepare and file your tax returns accurately.
2. Provide personalized tax planning and advisory services.
3. Communicate with you regarding your tax matters.
4. Comply with legal and regulatory requirements.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with third parties only in the following circumstances:

1. Service Providers: Trusted partners who assist us in delivering our services under strict confidentiality agreements.
2. Legal Requirements: When required by law, regulation, or court order.
3. Consent: With your explicit consent.

Data Security

We employ robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

1. Encryption: Use of encryption technologies to secure data transmission and storage.
2. Access Controls: Restricted access to your information is for authorized personnel only.
3. Regular Audits: Routine security audits and assessments to identify and mitigate risks.

Retention of Information

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law. Once your information is no longer needed, we securely dispose of it.

Your Rights

You have the right to:

1. Access your personal information and request corrections.
2. Withdraw your consent for data processing at any time.
3. Request the deletion of your information, subject to legal and regulatory constraints.

Changes to This Policy

We may update this Tax Compliance Privacy Policy periodically to reflect changes in our practices or regulatory requirements. We will notify you of any significant changes through our website or direct communication.

Contact Us

If you have any questions or concerns about this Tax Compliance Privacy Policy or our data practices, don't hesitate to get in touch with us at: Info@ftemployee.com

---

By adhering to this policy, Full Time Employee LLC ensures that your sensitive information is handled with the utmost care and integrity, providing you with the confidence and security you deserve.