Trust centre
Security and privacy, by design.
CarePartner handles care records, worker details and visit evidence for organisations that answer to regulators. We treat that responsibility as the product, not a feature.
- Hosted in Australia
- Privacy Act and APPs
- Essential Eight aligned
All systems operationalUpdated 2 min ago
Status page
90 days ago99.98% uptimeToday
- Provider consoleOperational
- Agency portalOperational
- Worker linksOperational
- AlayaCare syncOperational
How we protect your data
Six controls behind every visit.
Australian data residency
All customer data stored and processed in Australian regions. Backups stay onshore.Encryption everywhere
TLS 1.2+ in transit and AES-256 at rest, with keys managed in a dedicated service.Enterprise access control
SSO via SAML or OIDC, enforced MFA, role-based access and least-privilege defaults.Append-only audit trail
Every action time-stamped by our server. Amendments need a reason and keep the original.Privacy for workers
Location read only at check-in and check-out. Workers see what the visit needs, nothing more.Resilience
Continuous backups, tested recovery and offline-first worker links that sync when back in range.
Privacy principles
Proof of the visit, not surveillance of the worker.
Verified visits only work if workers trust them. These principles are built into the product and can't be switched off.
Two moments only
Location is read at check-in and check-out. Never in between, never off shift.Notice first
Agencies give workers written notice before verified visits begin.Need to know
Workers see a client's first name and initial, and only for their visit.Audio deleted
Voice recordings are deleted once the worker confirms the note. The words stay with the note.Links expire
Every worker link stops working 24 hours after the visit ends.
Compliance
Frameworks and standards
| Privacy Act 1988 and Australian Privacy Principles | Supported |
|---|---|
| Aged Care Act 2024 record keeping | Supported |
| ACSC Essential Eight | Aligned |
| ISO/IEC 27001 | Certification in progress |
| Independent penetration testing | Annual |
Documents
Request the security pack
- Security overviewArchitecture, controls and policies.(request access)
- Data processing agreementOur standard DPA for providers.(request access)
- Penetration test summaryLatest independent findings.(request access)
- Security questionnairePre-completed, to save you time.(request access)
Request access
Request received
Thanks. We'll email the security pack within one business day.
Bring your security team into the conversation
We'll walk your IT and privacy leads through our architecture, controls and data flows, and answer your questionnaire.