Back to blogSecurity
How TaxCorn Connects to HMRC, and Why It's Safe
TaxCorn Team5 March 20265 min read
When you click 'Connect HMRC' in TaxCorn, you're redirected to HMRC's own government.uk login page, not a page hosted by us. You log in there, directly with HMRC.
HMRC then asks you to approve the specific permissions TaxCorn is requesting (for example, 'submit VAT returns'). Once approved, HMRC gives TaxCorn a limited-scope access token, never your password.
That token is encrypted at rest with AES-256, can be revoked by you at any time from your dashboard, and only grants the exact permissions you approved.