Terms & Conditions

Scope of the Information Security Policy and Regulatory Compliance:

• Our Information Security Policy establishes a comprehensive framework to protect sensitive data, systems, and networks from potential security threats.
• It applies to all employees, contractors, and third parties who access or manage the organization's information systems and ensures adherence to the IRS and FTC Safeguards Rule.

Data Protection and Security Framework for FTE-Managed Information:

• The policy safeguards Personally Identifiable Information (PII), financial records, and critical systems from unauthorized access, alteration, or destruction, encompassing data stored in cloud environments, physical media, and all endpoints.

Roles and Responsibilities in Maintaining Information Security:

• Senior Management is responsible for defining the security strategy, allocating necessary resources, and overseeing security performance.
• The Information Security Officer is tasked with implementing the security program, conducting regular audits, ensuring compliance, managing incident response, and maintaining close coordination with senior management to uphold the highest security standards.

‍

FTE offers clients the option to use their own security controls or adopt FTE's established framework.

• If clients choose their own controls, they must ensure compliance with security standards.
• By selecting FTE’s controls, FTE takes full responsibility for maintaining and managing them to meet industry standards and regulatory requirements.

Client-Implemented Security Controls:

• Clients may choose to implement their own security controls tailored to their specific needs. In this case, clients are completely responsible for enforcing and maintaining their security posture and are accountable for documentation and evidence of their security controls.
• FTE may conduct regular audits and assessments to ensure compliance with these standards.

Adoption of FTE’s Security Controls:

• Clients may opt to adopt the security controls implemented by FTE. By choosing this option, clients agree to adhere to the security policies and controls established by FTE.
• FTE is responsible for facilitating the integration and implementation of security controls for the client and providing support and guidance to help clients maintain these controls effectively.

‍

The following security controls are enforced as a minimum standard:

Access Control:

• Uses Role-Based Access Control (RBAC) with least privilege principle. Quarterly access reviews and Just-In-Time access for sensitive data.

User Authentication:

• Mandatory multi-factor authentication (MFA) for critical systems. Uses VPNs and enforces strong password policies and account lockout thresholds.

Network Security

• Employs firewalls with stateful and deep packet inspection. Uses network segmentation, Intrusion Detection and Prevention Systems (IDS/IPS).

Data Encryption:

• Encrypts sensitive data at rest with AES-256 and in transit with TLS 1.2+. It also mandates email encryption and enables DRM for sensitive information.

Endpoint Security

• Protects endpoints with Endpoint Detection and Response (EDR) solutions and anti-malware software. Restricts USB devices and uses endpoint firewalls.

Patch Management

• Centralized system for regular updates. Critical patches are performed within 24 hours, and routine updates are made monthly. Scans for out-of-date software and quarantine unpatched systems.

Mobile Device Security:

• The company uses mobile device management (MDM) for company-issued devices. It enforces encryption, remote wipes, and app installation and restricts app installation. It also encrypts internal communications.

Logging and Monitoring:

• This department uses security information and Event Management (SIEM) systems for real-time alerts. Logs are retained for a year and reviewed quarterly.

Vulnerability Management:

• Regular vulnerability scans and ad-hoc penetration testing. Tracks and prioritizes vulnerabilities for remediation.

Backup and Recovery:

• Regular encrypted backups stored onsite and offsite. Uses MFA for backup protection and conducts bi-annual disaster recovery exercises.

Data Management:

• Data is classified, and strict protocols are in place for handling sensitive data. Retention follows regulatory requirements, and secure deletion methods are used for data beyond its retention period.

Employee Training and Awareness:

• Mandatory security training during onboarding and annually thereafter. Phishing and social engineering education with regular simulations.

Incident Response Plan:

• Procedures for handling security incidents, using SIEM tools for monitoring. Incident Response Team (IRT) manages containment, analysis, and reporting.

‍

Identity Verification:

• Our process includes verifying government-issued identification and collecting Nepalese Permanent Account Numbers (PANS).
• These numbers, similar to Social Security Numbers (SSNs) in the U.S., are used for payroll and to confirm the identity of each team member.
• PANs can be verified with an online database.

Criminal Record and National Database Check:

• We require team members to provide a “Clean Police Report” as confirmation of identity through national or regional databases where applicable.

International Watchlists Screening:

• While most of our team members are recent college graduates, we can conduct searches on international or local watchlists, including sanctions lists, if required.

Reference Verification:

• We verify the legitimacy of references provided by team members. This process includes confirming their authenticity through a Clean Police Report and PAN, with final approval from the Notary Public Office of Nepal.

‍

Code of Conduct and Ethics:

• Our team must follow a strict code of ethics to maintain privacy and confidentiality.
• Team Members are required to act with respect, integrity, and fairness at all times.
• Unauthorized sharing of client data or company information is strictly prohibited.
• Conflicts of interest are not tolerated, and all team members must ensure their actions align with the company's mission and ethical standards.

Confidentiality and Data Protection:

• At FTE, we prioritize protecting confidential client data by securely managing all sensitive information and limiting access to authorized personnel only.
• We follow a digital-only policy, with no data printed or stored physically. Communication is conducted via secure platforms, ensuring encrypted exchanges.
• Strong security measures, including the use of industry-standard malware protection and secure VPN services for internet connections, are in place to prevent unauthorized access.
• We regularly update our protocols to maintain data integrity, and sharing information without permission is strictly prohibited.

IT, Internet, Email, Mobile & Social Media Use:

• When using IT systems, the Internet, email, mobile devices, or confidential information, team members must follow best practices to protect confidential information.
• Personal use of social media is allowed, but it must not compromise the company’s reputation or disclose any sensitive information.
• Team Members representing the company online should maintain professionalism, ensure no confidential data is shared, and separate personal opinions from official company views.

Compliance and Monitoring:

• Violations of this policy may result in disciplinary action, up to and including termination.

Expert Tax Teams:

• Our Success Managers, Tax Preparers, and Reviewers deliver high-quality tax services collaboratively. Success Managers are the main point of contact, ensuring smooth communication and alignment with client goals.
• Our Tax Preparers in Nepal organize clients' documents and prepare the initial tax return, which Associate 2 then reviews for accuracy.
• The process continues with two levels of detailed review by Senior 1 and Senior 2, who conduct final checks and contact clients if additional information is needed.

Uncompromised Security:

• Our team follows a detailed Code of Conduct emphasizing integrity, confidentiality, and zero tolerance for unauthorized data sharing.
• Every team member undergoes annual police checks, comprehensive reference verifications, and regular ethics training to reinforce these standards.
• Communication is conducted on secure platforms, with client data protected through strong encryption and continuous monitoring.
• A dedicated IT Security Specialist enforces our Written Information Security Policy (WISP) that is required by us government to uphold rigorous data protection and compliance protocols at every level of the organization.

Seamless Integration into the Tax Prep Cycle:

• Our team in Nepal organizes client documents, prepares the initial draft, and performs multiple levels of quality review for accuracy.
• The US managers then step in to finalize the return, suggest tailored tax strategies, and identify opportunities for deduction maximization based on your unique needs.
• Once the review is complete, FTE manages e-signature requests, billing, and organizes the final return for electronic filing, ensuring a smooth, end-to-end process that optimizes your tax outcomes.

Learning and Development Support:

• We have a dedicated full-time who schedules ongoing training and professional development sessions.
• This specialist offers ongoing training sessions covering key topics like Tax Planning, Tax Rules, Financial Statements, Income Statements, Balance Sheets, and Cash Flow Statements through curated resources.
• Your team will gain a thorough understanding of financial statement structures, account classifications, revenue vs. expenses, asset management, CAPEX vs. OPEX distinctions, liabilities, and cash flow types.
• With access to these learning materials and specialized support, your team will continuously enhance their skills to deliver accurate, high-quality financial work.

Tax Planning Software in Development:

• We're building cutting-edge tax planning software, TaxMD.com, set to launch by December 2024 or early 2025.
• Your team members will receive specialized training on its use, enabling them to add more value to your practice through advanced tax planning strategies.

Access to a Comprehensive Talent Pool:

• In addition to our tax professionals, we provide skilled team members for marketing, business support, IT security, and software development to meet your firm's diverse needs.
• Our Marketing Team offers social media management, email marketing, SEO, content creation, blogs, multimedia production, and graphic design.
• The Business Success Team handles proposals, business emails, contracts, project management, and client onboarding.
• For IT Security, our specialists enforce the Written Information Security Policy (WISP), conduct risk assessments, and ensure data protection.
• Our Software Development Team includes backend and frontend developers, along with full deployment support for robust software solutions.
• With this talent pool, we seamlessly integrate into your operations, enhancing your firm's efficiency and growth.

‍

With us, you get the expertise of a full-time team without the overhead, allowing you to focus on growing your business.

Cookie Policy Overview

Full Time Employee LLC uses cookies to enhance your experience on our website. This cookie policy explains what cookies are, how we use them, and how you can control them.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to the website owners.

How We Use Cookies

We use cookies to:

• Improve the functionality of our website.
• Analyze website traffic and user behavior.
• Remember your preferences and settings. .

Types of Cookies We Use

• Necessary Cookies: These cookies are essential for the website to function correctly. They enable basic functions like page navigation and access to secure areas.

• Performance Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. This will help us improve the performance of our site.

• Functional Cookies: These cookies allow the website to remember choices you make, such as your username, language, or the region you are in, to provide a more personalized experience.

• Advertising Cookies: These cookies deliver advertisements relevant to you and your interests.
  

Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer, and you can set most browsers to prevent them from being placed. However, if you do this, you may have to manually adjust some preferences every time you visit our site, and some services and functionalities may not work.

Changes to This Cookie Policy

We may update our cookie policy from time to time. We will notify you of any changes by posting the new policy on this page. We recommend checking this page periodically for any changes.

Contact Us

If you have any questions about our cookie policy, please contact us at info@ftemployee.com

Tax Compliance Privacy Policy

At Full Time Employee LLC, we are committed to protecting the privacy and confidentiality of our clients' personal and sensitive information. This Tax Compliance Privacy Policy outlines the standards and procedures we follow to ensure your data is handled securely and responsibly. By engaging with our services, you agree to collect, use, and disclose your information as described in this policy.

Information Collection

We collect various types of information to provide and improve our services, including:

1. Personal Information: Name, address, phone number, email address, Social Security number, and other identifiers.
2. Financial Information: Income details, tax returns, bank account details, and other financial documents.
3. Technical Information: IP addresses, browser type, access times, and pages visited.

Use of Information

The information we collect is used to:

1. Prepare and file your tax returns accurately.
2. Provide personalized tax planning and advisory services.
3. Communicate with you regarding your tax matters.
4. Comply with legal and regulatory requirements.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with third parties only in the following circumstances:

1. Service Providers: Trusted partners who assist us in delivering our services under strict confidentiality agreements.
2. Legal Requirements: When required by law, regulation, or court order.
3. Consent: With your explicit consent.

Data Security

We employ robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

1. Encryption: Use of encryption technologies to secure data transmission and storage.
2. Access Controls: Restricted access to your information is for authorized personnel only.
3. Regular Audits: Routine security audits and assessments to identify and mitigate risks.

Retention of Information

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law. Once your information is no longer needed, we securely dispose of it.

Your Rights

You have the right to:

1. Access your personal information and request corrections.
2. Withdraw your consent for data processing at any time.
3. Request the deletion of your information, subject to legal and regulatory constraints.

Changes to This Policy

We may update this Tax Compliance Privacy Policy periodically to reflect changes in our practices or regulatory requirements. We will notify you of any significant changes through our website or direct communication.

Contact Us

If you have any questions or concerns about this Tax Compliance Privacy Policy or our data practices, don't hesitate to get in touch with us at: Info@ftemployee.com

---

By adhering to this policy, Full Time Employee LLC ensures that your sensitive information is handled with the utmost care and integrity, providing you with the confidence and security you deserve.