Security & Privacy First
Built for NDIS providers with enterprise-grade security, Australian data residency, and strict privacy controls. Your compliance data is protected at every level.
Australian Data ResidencyEnterprise SecurityWCAG 2.2 AA Compliant
No Participant Documents Stored
AuditProof maintains strict data separation and privacy protection
We do not store participant documents in AuditProof. We link to your Document Management System (DMS) only, keeping Personal Health Information (PHI) completely separate. Auditor and Consultant access is scoped, time-bound, de-identified, and read-only with full audit logging.
Comprehensive Security Framework
Every aspect of AuditProof is designed with security and compliance in mind
AU Only
Australian Data Residency
All data hosted exclusively within Australian borders
- •Data centers located in Sydney and Melbourne
- •Full compliance with Australian Privacy Principles
- •NDIS data handling requirements met
- •No offshore data processing or storage
Encryption & Security
Enterprise-grade encryption for data protection
- •AES-256 encryption at rest
- •TLS 1.3 encryption in transit
- •End-to-end encrypted data transmission
- •Regular security audits and penetration testing
Role-Based Access Control
Granular permissions and access management
- •Multi-level user permissions
- •Site and module-based access controls
- •Audit trail for all user actions
- •Single Sign-On (SSO) support for Enterprise
Immutable Audit Logs
Complete audit trail with tamper-proof logging
- •All actions logged with timestamps
- •Immutable log storage
- •User activity tracking
- •Compliance reporting ready
Backup & Disaster Recovery
Comprehensive data protection and recovery
- •Daily automated backups
- •Multi-region backup storage
- •Point-in-time recovery capabilities
- •99.9% uptime SLA
Auditor Portal Security
Secure, controlled access for external auditors
- •Scoped access by registration group
- •Time-bound access controls
- •De-identified data presentation
- •Full watermarking and audit logging
Compliance & Standards
Privacy & Data Protection
- Australian Privacy Principles (APPs) compliant
- NDIS Practice Standards data requirements
- ISO 27001 security framework alignment
- Regular privacy impact assessments
Accessibility & Inclusion
- WCAG 2.2 AA compliance
- Screen reader compatibility
- Keyboard navigation support
- High contrast and reduced motion options
Auditor & Consultant Portal Security
Secure, Controlled, Auditable
External auditor access designed for maximum security and minimum data exposure
Access Controls
- • Time-bound access with automatic expiry
- • Scoped by registration group and site
- • Read-only permissions only
- • IP address restrictions available
Data Protection
- • De-identified data presentation
- • No participant information visible
- • Watermarked documents and screens
- • Complete audit trail of all access
Questions about security?
Our security team is available to discuss your specific requirements and provide detailed security documentation for your compliance needs.
Data Processing
All data processing occurs within Australian borders in compliance with local privacy laws.
Incident Response
24/7 security monitoring with immediate incident response and notification procedures.
Regular Audits
Quarterly security assessments and annual third-party penetration testing.