Is data encrypted in transit and rest?

HTTPS is used to provide encrypted communication between customer devices and CCH OneClick.

Communications between CCH OneClick and Third Party services, e.g. HMRC, Twinfield, Xero and Sage also use HTTPS to provide security of data in transit.

Encryption at rest is enabled for all Microsoft products that support it. Within CCH OneClick each customer has their own encrypted Azure SQL database. All files sent in messages are encrypted at rest. Open Integration stores data in Azure blob storage which is also encrypted.