Trust is built in,
not bolted on.
Last updated: 3 October 2026
You’re giving us access to the systems your business runs on. This page shows how we protect them: the standards we follow, the controls we use, and how we handle AI and your data. If you need more, ask. We’ll show you.
Standards we follow
Australian Privacy Principles. How we collect, use, store and delete personal information is guided by the Australian Privacy Principles, including how we’d respond to a data breach.
Australian Cyber Security Centre guidance. We use the ACSC’s Essential Eight as a guide for how we set up and secure systems.
How we protect your data
Secure sign-in. We use strong, unique logins and secure sign-in options wherever a platform offers them.
Role-based access. We limit access to what each role on your project needs.
Secure connections. We connect through official, authorised integrations, never shared passwords.
Encryption. We build on platforms that encrypt data in transit and at rest.
Access reviews. We review access and remove it when a project ends.
Australian team. Our team is based in Australia, and we don’t offshore your work.
Where your data goes
We tell you upfront which platforms your project uses and where each one stores data. Where a tool you already use stores data overseas, we’ll tell you before we connect it.
AI and your data
We choose business-grade AI services whose terms say customer data isn’t used to train their models, and a person approves anything that matters before AI acts on it.
Data and AI, your questions answered
Will AI be trained on my business data?
We choose business-grade AI services whose terms say your data isn’t used to train their models.
Who can see my data?
Only the people who need it to do the job. Access is set by role and removed when it’s no longer needed. We don’t share your data with third parties for any other purpose.
Where is my data stored?
It depends on the tools your project uses. We tell you upfront where each platform stores data, and flag anything held overseas before we connect it.
Will AI make decisions without us?
Only if you want it to. By default, anything that matters (sending to a client, changing a record, spending money) waits for a person to approve it. You decide where the line sits.
What if the AI gets something wrong?
We build checks in from the start: AI drafts and suggests, and people approve anything that matters before it goes ahead.
Do you need our passwords?
No. We connect through each platform’s official, secure connection method, so you stay in control and can revoke our access at any time.
What happens to our data if we stop working together?
It’s yours. We hand over what we’ve built for you and remove our access.
What happens if there’s a security incident?
We tell you promptly and work through it with you, guided by Australian privacy requirements where they apply.
Can we see your security policies?
Yes. We’re happy to talk through our data handling practices and complete your security questionnaire before any work starts.
Questions about security?
Need more detail for your IT team or board? Get in touch and we’ll walk you through how we work and answer your questions.
Report a security concern
Found a potential security issue? Tell us through our contact page and we’ll respond promptly.
