Careful with your information.
Trust should come from controls you can check, not promises.
The free estimator
The PAYE estimator calculates in your browser tab. The figures you enter are not saved or sent to Flint. Our hosting provider processes standard access logs, such as IP address and browser type, to deliver and protect the site.
Customer accounts
- Sign-in uses one-time codes sent to your email, so there is no Flint password to steal or reuse.
- Database row-level security means an account can only read its own tax years.
- Staff can only open cases assigned to them, and must pass multi-factor authentication first.
- Changes are recorded in an audit trail, and saved calculations are kept as unchangeable snapshots.
- Account pages travel over encrypted connections and are never cached.
What we never ask for
Never give anyone your personal Revenue myAccount or ROS password, ROS certificate, or online banking credentials. Flint will never ask for them. An authorised tax agent uses their own Revenue access through Revenue’s agent-linking process.
Documents and bank data
Document uploads and live bank connections are not switched on. They will open only after malware scanning, private encrypted storage and access controls have been tested.
Report a security issue
Use the details on our Contact page. Please do not include personal tax information. Read our privacy policy for how personal data is used, kept and shared.