Yes, GSTN does whatever it can to ensure that personal and company data supplied by taxpayers remain confidential on the GST Common Portal. This is achieved by Role-Based Access Control (RBAC) and the encryption of taxpayers’ sensitive data, both during transit and in storage. The data can be used and read-only by the approved tax authorities.