Enterprise-grade security,
built into every migration.
We maintain the highest standards of security and compliance to protect your data. Independently audited and certified against global standards.
Certifications
Independent audits verifying our security posture.
Attested & Verified
AICPA Trust Services Criteria
Our SOC 2 Type II report demonstrates the operating effectiveness of our controls for Security, Availability, and Confidentiality.
Available under NDA
ISO 27001:2022
Information Security Management
Cert No: UQ-24933
Valid until Jan 2029
Scope: Information security management for design, development, operation, and support of SaaS platform.
ISO 9001:2015
Quality Management System
Cert No: QM-20025
Valid until Jan 2029
Scope: Quality management system supporting design, development, operation, and support of SaaS platform.
Data Handling & Transparency
Our certifications cover the full data lifecycle. We apply strict classification, handling controls, and encryption standards across our multi-product SaaS platform.
Built on Trusted Infrastructure
Amazon Web Services
Cloud Infrastructure
Our platform is hosted on AWS, utilizing their world-class security, compliance, and availability features.
Microsoft Entra
Identity & Access
We leverage Microsoft Entra for robust identity management, conditional access, and threat protection.
Continuous Security Monitoring
SonarQube
Code Quality & SASTContinuous static analysis to detect vulnerabilities and code smells.
Trivy
Container ScanningVulnerability scanning for containers and filesystems.
AWS Inspector
Vulnerability MgmtAutomated security assessments for deployed applications.
Comprehensive Control Environment
Our controls are designed and operated in alignment with SOC 2 Trust Services Criteria and ISO 27001 standards.
Access & Identity
Role-based access, strong authentication, and rigorous joiner–mover–leaver processes.
- Centralized IAM
- Privileged access reviews
- Hardened admin accounts
Data Protection
Data protected in transit and at rest using industry-standard encryption and classification.
- TLS encryption
- Data at rest encryption
- Data classification
Operational Security
Change management, monitoring, and incident response aligned with SOC 2 & ISO 27001.
- 24/7 Monitoring
- Incident response
- Change control
Risk Governance
Continuous risk assessments, policies, and internal reviews of our control environment.
- Risk assessment
- Security policies
- Internal audits
Ready to learn more about our security posture?
Our security team is available to answer detailed questions about scope, sub-processors, and technical controls.