How Send2290 Protects Your Data
Your tax data deserves the same level of protection as your bank account. Send2290 uses bank-level encryption, IRS-authorized filing channels, and PCI-compliant payment processing to keep your information safe at every step.
Bank-Level 256-Bit Encryption
Every piece of data you enter on Send2290 — your EIN, business name, vehicle information, and payment details — is protected with 256-bit AES encryption, the same standard used by major banks and financial institutions.
All data transmitted between your browser and our servers is secured with TLS (Transport Layer Security) encryption. This means your information cannot be intercepted, read, or tampered with during transmission.
Sensitive form data is encrypted at rest using our draft encryption service, so even stored drafts are protected. Documents stored in our system use AES-256 server-side encryption on Amazon S3.
PCI-Compliant Payment Processing
Send2290 processes all payments through Stripe, a PCI DSS Level 1 certified payment processor — the highest level of certification in the payment card industry. Stripe processes hundreds of billions of dollars annually for companies like Amazon, Google, and Shopify.
Your credit card or debit card information is never stored on our servers. Card data is sent directly to Stripe and is never visible to or accessible by Send2290 employees. We only receive a secure payment confirmation token.
This means even in the unlikely event of a security incident on our platform, your payment information would remain completely safe because it was never in our possession.
IRS Publication 1075 Compliance
We operate in compliance with IRS Publication 1075, which governs the handling of Federal Tax Information (FTI). This publication sets strict standards for how tax return data must be stored, accessed, transmitted, and disposed of.
Our systems comply with IRS Publication 4164 (e-filing provider requirements) and Publication 5830 (acceptable file formats), ensuring every filing meets the IRS's technical and security standards.
All IRS communication uses WS-Security authenticated SOAP with digital certificates, providing mutual authentication between Send2290 and IRS systems — the same protocol used by every authorized e-file provider.
7-Year Audit Trail & Records Retention
Every action on Send2290 is recorded in a comprehensive audit trail: form submissions, document downloads, payment processing, Schedule 1 deliveries, resubmissions, and status checks. This protects both you and us.
Audit logs are shipped daily to tamper-proof, object-locked storage on Amazon S3 with a default retention period of 7 years, in accordance with IRS recommendations under Publication 583. These logs cannot be modified or deleted, even by Send2290 administrators.
If the IRS ever requests documentation of your filing, we can produce a complete, verifiable record of exactly when your return was submitted, when it was accepted, and when your Schedule 1 was delivered.
Authentication & Access Control
User authentication is powered by Google Firebase, a battle-tested identity platform used by millions of applications worldwide. Every API request is authenticated with secure JWT tokens that are validated on every call.
For team accounts, Send2290 provides role-based access control with four distinct permission levels: Owner, Admin, Preparer, and Viewer. This ensures that team members can only access the features appropriate to their role — preparers cannot submit filings, and viewers have read-only access.
All sensitive operations are protected by rate limiting to prevent abuse, and our systems include malicious pattern detection and content-type validation to block common attack vectors.
Privacy & Data Handling
We never sell, rent, or share your personal information with third parties for marketing purposes. Your tax data is used exclusively for filing your Form 2290 with the IRS and providing you with your stamped Schedule 1.
Third-party services we use are limited to essential operations: Google Firebase (authentication), Amazon Web Services (infrastructure and storage), Stripe (payments), and Twilio (optional SMS notifications). Each of these providers maintains their own rigorous security certifications.
You can request deletion of your account at any time. When you delete your account, your login access is permanently removed. Filing records are retained for the IRS-recommended 7-year period as required by Publication 583, after which they are securely disposed of.
Reliability & Error Prevention
Send2290 maintains a 99.9% IRS acceptance rate, meaning virtually every filing we transmit is accepted on the first attempt. Our built-in validation catches common errors — VIN format mistakes, weight category mismatches, and missing required fields — before your return reaches the IRS.
If your filing is ever rejected by the IRS, we provide free resubmission at no additional cost. Simply correct the issue and resubmit — there is no extra charge for corrections or refilings.
Our infrastructure is hosted on Render with automatic scaling, and critical services like file storage and document delivery use Amazon Web Services with built-in redundancy. Your filings and Schedule 1 documents are always available when you need them.
Trusted by Thousands of Truckers Nationwide
4.9 out of 5 stars based on 1523 customer reviews
"Filed my 2290 in under 5 minutes and had my stamped Schedule 1 in my inbox before I finished my coffee. Best service I've used!"
"We file for 47 trucks and the bulk upload feature saved us hours. Got all our Schedule 1s stamped same day. Highly recommend!"
"Our company switched to Send2290 last year and we've never looked back. Fast, reliable, and great customer support."
"First time filing 2290 online and it couldn't have been easier. Step-by-step process, no confusion."
Join thousands of satisfied customers who trust Send2290 for their Form 2290 filing
File with Confidence
IRS-authorized and BBB listed for your peace of mind
File with Confidence
Your data is protected by the same level of encryption used by major banks. Join thousands of truckers and fleets who trust Send2290 for secure, IRS-authorized 2290 filing.