Skip to main content
06SECURITY · PRIVACY · TRUST

Trust you can check. Verifiably so.

We don’t display certifications we haven’t earned. Here’s what’s true today, and what we’re working toward, in plain English.

01Data residency

Your data is stored and processed in Sydney.

Hosted on AWS in ap-southeast-2. Inference runs on the Amazon Bedrock Australia-only profile, so prompts and responses stay on Australian infrastructure. Two of our providers are incorporated in the United States, and both are named on our sub-processor list.

02Encryption

Encrypted at rest. Encrypted in transit.

AES-256 at rest, TLS 1.3 in transit. Keys managed in AWS KMS, rotated automatically, scoped to least privilege.

03Privacy Act

Built to the Australian Privacy Act 1988.

Designed and operated to align with the Australian Privacy Act 1988 and APP guidelines for health information. Architected for IRAP assessment. No assessor has been engaged.

04Sub-processors

You can see everyone who touches your data.

Two companies, both named, with the service each one provides and where the data sits. No analytics, no advertising, no tracking, and no third-party scripts anywhere on this site.

Read the sub-processor list
05No resale

We don’t sell or share your data.

Not to advertisers, not to insurers, not to recruiters. Veteran data is not a product. Ever.

06AI guardrails

Source-cited answers, safe by default.

Every response carries citations to the underlying source: DVA, MRCA, VEA. Crisis keywords surface Open Arms and Lifeline immediately.

Hosted on AWS · ap-southeast-2 · Sydney
Read our privacy policy