Security & Compliance
Your participants' data
deserves enterprise-grade protection.
Australian-hosted, encrypted, and built to meet NDIS Practice Standards from day one.
Australian Data Residency
Care records hosted in Sydney on DigitalOcean SYD1 servers. Aligned with Australian Privacy Principles (APPs).
Encrypted in Transit & At Rest
Encrypted in transit (TLS) and at rest (DigitalOcean managed). All database backups encrypted. API keys rotated regularly.
Designed around the NDIS Practice Standards
Built to meet NDIS Quality & Safeguards Commission requirements including incident reporting, case note management, and credential tracking.
Full Audit Logging
Every action is logged — login, data access, record changes, exports, and administrative actions. Complete audit trail for NDIS audits.
Role-Based Access Control
Granular permissions for admins, coordinators, finance, and workers. Workers only see their assigned participants. Coordinators see their teams.
Automatic Daily Backups
Automated daily backups with point-in-time recovery. 30-day backup retention. Tested recovery procedures.
Multi-Tenant Data Isolation
Your organisation's data is fully isolated from other tenants at the database level. No shared tables, no data leakage.
Monitored Infrastructure
Hosted on DigitalOcean in Sydney, monitored 24/7 with daily encrypted backups.
Regulatory Compliance
NDIS Quality & Safeguards
Incident reporting, restrictive practices tracking, and worker screening aligned with Commission requirements.
Australian Privacy Principles
Data collection, use, disclosure, and storage practices comply with the Privacy Act 1988.
SCHADS Award Interpretation
Payroll calculations apply penalty rates directly from timesheets to reduce underpayment risks.
Australian Data Residency
Your organisation's care records and database are stored in Sydney, Australia (DigitalOcean SYD1). Third-party sub-processors (email, payments) are strictly documented.