We don’t display certifications we haven’t earned. Here’s what’s true today, and what we’re working toward, in plain English.
01Data residency
Your data is stored and processed in Sydney.
Hosted on AWS in ap-southeast-2. Inference runs on the Amazon Bedrock Australia-only profile, so prompts and responses stay on Australian infrastructure. Two of our providers are incorporated in the United States, and both are named on our sub-processor list.
02Encryption
Encrypted at rest. Encrypted in transit.
AES-256 at rest, TLS 1.3 in transit. Keys managed in AWS KMS, rotated automatically, scoped to least privilege.
03Privacy Act
Built to the Australian Privacy Act 1988.
Designed and operated to align with the Australian Privacy Act 1988 and APP guidelines for health information. Architected for IRAP assessment. No assessor has been engaged.
04Sub-processors
You can see everyone who touches your data.
Two companies, both named, with the service each one provides and where the data sits. No analytics, no advertising, no tracking, and no third-party scripts anywhere on this site.