Data security is our highest priority
International compliance: ISO 27001
We’re proud to be fully certified against ISO 27001, the leading global standard for developing and maintaining an ISMS. Maintaining our ISO 27001 involves annual audits from an accredited certification organisation,ensuring our team maintains the highest levels of Information Security. Through our ISMS and Data Security polices, we are following the industry best practice to:
- Protect client and employee information
- Manage risks to information security effectively
- Test and verify the reliability of backups and redundancies
Our team also operates under Australia’s only industry legislated privacy code, and is a member of the Australian Data and Insights Association (ADIA).
Responsible AI: ISO 42001
We're certified against ISO/IEC 42001, the first international standard for managing AI systems responsibly. It sets out how we govern the AI we build and use — from how we assess risk, to how we handle data, to how we keep people in the loop. Certification is independently assessed and audited, so it's not a claim we make about ourselves. Under our AI Management System, we:
- Assess and manage the risks of every AI feature before it ships
- Keep human oversight and accountability over automated decisions
- Protect the data that trains and powers our AI, under the same controls as ISO 27001
Our AI governance sits alongside our ISO 27001 certification and Australia's only industry legislated privacy code, so security, privacy, and AI are managed as one system — not three separate promises.
Data always stored in Australia
All our data is hosted in secure data centres in Australia through Microsoft Azure, providing our clients with safety, security and scalability.
Azure’s architecture is adjusted for the cloud environment in order to ensure 99.99% availability even in the cases of infrastructure failures. It also ensures:
- Auto scalability
- High resiliency and fast geo-recovery
- Advanced data corruption protection
We are constantly reviewing and updating our systems to the latest versions to protect against vulnerabilities, and modifying our code to make use of new and better methods.
