- Deployment
- Single-tenant, inside a cloud account you control, onshore in Australia. No shared infrastructure and no co-tenancy. Data never leaves the country.
- Encryption
- AES-256 at rest, TLS 1.3 in transit. Secrets are encrypted with a key stored in your own Key Vault, and sensitive fields carry authenticated encryption (AES-256-GCM) on top.
- Access
- Single sign-on through your existing identity provider, with role-based access control. Multi-factor authentication is enforced for admin accounts, and idle sessions time out automatically.
- Tenant isolation
- Row-level security at the database. Staff see only the records their organisation, facility and role permit, enforced on every query rather than just in the interface. Multiple organisations can share one deployment with each one's data logically walled off.
- Audit
- Every record change is captured with the user, the timestamp and the before and after values. Append-only, queryable, kept for seven years. Nothing is ever hard-deleted.
- Privacy
- Built against the Australian Privacy Principles. Consent management and data minimisation are part of the platform, not a policy document.
- Resilience
- Daily automated backups with point-in-time recovery, restricted administrative privileges and network segmentation, following the ACSC Essential 8 maturity model.
- Certification
- Being built to support ISO 27001 certification: an information security management system, risk register, Annex A control mapping and evidence packs are the target artefacts of that work.