Enterprise-grade security
Your clients' financial data is your most valuable asset. We protect it with the same rigor you'd expect from a regulated financial institution.
The gold standard for information security
ISO 27001 is the internationally recognised standard for information security management systems (ISMS). Achieving certification means our security controls, risk management processes, and people practices have been independently audited and verified.
For your clients' data — loan files, credit histories, personal financial records — this means a documented, tested, and auditable chain of custody from the moment your offshore team touches it.
Our Manila facility is registered with the Philippine Economic Zone Authority (PEZA) — a government agency that oversees and regulates economic zones with strict compliance, audit, and infrastructure requirements.
Data Handling Policies
Six core controls protecting your clients' data at every layer.
End-to-End Encryption
All data in transit is encrypted via TLS 1.3. Data at rest uses AES-256 encryption across all storage systems. No plaintext storage of sensitive financial data.
NDA-Bound Staff
Every team member signs a comprehensive Non-Disclosure Agreement before accessing any client system or data. Legal recourse is backed by Philippine and Australian law.
Access Controls
Role-based access control (RBAC) ensures staff only see the data they need to do their job. Multi-factor authentication is mandatory on all client-connected systems.
Audit Logs
Comprehensive audit trails are maintained for all data access events. Logs are immutable, timestamped, and available for client review at any time.
Incident Response
A formal incident response plan with defined SLAs. Any security events are notified to affected clients within 24 hours, in line with Australian Privacy Act obligations.
Data Segregation
Client data is fully segregated at the infrastructure level. No data commingling between clients. Each team operates in an isolated environment.
Australian Financial Services Compliance
Our teams are trained on the specific regulatory requirements of the Australian financial services industry.
Have questions about
our security?
We're happy to walk through our security documentation, compliance posture, and data handling practices in detail before you make a decision.