Data sovereignty APP 11
Agent processing runs in Australian-region infrastructure by default. Your data is encrypted in transit and at rest, and it does not leave Australia unless you explicitly approve a documented exception.
Security & privacy
Built for Australian privacy law, not retrofitted to it
Our AI practice follows OAIC guidance and the Australian Privacy Principles. Here is exactly what that means - in plain language.
Training data & retention
Your business data is never used to train AI models - ours or anyone else's. Prompts and outputs are not logged or stored without your explicit, active consent, and anything you do consent to is retained only for the period you set.
Automated decisions, explained OAIC
Every action an agent takes is logged with the reasoning behind it. Decisions that meaningfully affect a person - pricing, eligibility, escalation - are flagged as automated, are reviewable, and always have a human appeal path.
Cross-border transparency APP 8
Our engineering team operates from Colombo, Sri Lanka. Development work uses no production customer data; where any overseas disclosure is required, it happens under APP 8 safeguards, contractual data-protection clauses, and your prior knowledge.
Our standing commitments
The promises we hold to on every engagement - and on this website.
-
1
Open privacy management (APP 1). Our Privacy Policy is public and plain-English, so you always know how your information is handled.
-
2
Data security by default (APP 11). Encryption in transit and at rest, Australian-region processing, and access limited to staff who need it.
-
3
Analytics stay off until you opt in. Google Analytics is fully blocked by default; when you do opt in, IP anonymisation is hardcoded.
-
4
Marketing only with express consent (Spam Act 2003). Every message identifies us and carries a working unsubscribe; opt-outs are processed within 5 business days.
-
5
Accessible to WCAG 2.2 AA. This site is keyboard-navigable, screen-reader friendly, and contrast-tested.