Back to blogSecurity

How TaxCorn Connects to HMRC, and Why It's Safe

TaxCorn Team5 March 20265 min read

When you click 'Connect HMRC' in TaxCorn, you're redirected to HMRC's own government.uk login page, not a page hosted by us. You log in there, directly with HMRC.

HMRC then asks you to approve the specific permissions TaxCorn is requesting (for example, 'submit VAT returns'). Once approved, HMRC gives TaxCorn a limited-scope access token, never your password.

That token is encrypted at rest with AES-256, can be revoked by you at any time from your dashboard, and only grants the exact permissions you approved.