Sovereign deployment, customer-held encryption keys, and compliance frameworks built in from day one — not added later.
Book a demoSingle-tenant, inside a cloud account you control. All data onshore in Australia. No shared infrastructure, no co-tenancy.
AES-256 encryption at rest and TLS 1.3 in transit. Bring-your-own-key support — you hold the keys and can revoke access at any time. Cryptographic integrity checks on every record write.
Built against the Australian Privacy Principles. Privacy impact assessments, consent management and data minimisation are part of the platform.
Every record change captured with user, timestamp and before/after values. Immutable, queryable and always available.
Data access enforced at the database row level. Staff only see records for their organisation, facility and role — enforced on every query, not just the UI.
Multiple organisations, facilities and care settings inside one deployment. Each organisation's data is logically isolated — row-level policies guarantee no cross-tenant visibility.
Single-tenant, onshore, customer-keyed. Essential 8, APP and ISO 27001 controls built into the architecture.
HealthOS is designed against the Australian Cyber Security Centre's Essential 8 maturity model. Application whitelisting, patching, multi-factor authentication, restricted admin privileges, daily backups and network segmentation are built into the deployment architecture.
Designed for ISO 27001 certification with evidence packs included. Risk registers, control matrices and policy templates are part of the deployment — not an afterthought.
Role-based access control with single sign-on. Every API call is authenticated, authorised and logged. Row-level security ensures staff see only the data their role and organisation permits — enforced at the database layer, not just the application.
A 45-minute walkthrough covering deployment architecture, encryption, access controls and compliance evidence.