Data security
Your assessment data is sensitive. Here is how we protect it.
Where your data is stored
All data is stored in Supabase, hosted on Amazon Web Services (AWS) in the ap-southeast-2 (Sydney) region. Your data stays in Australia.
Encryption
Data is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256. Database backups are also encrypted.
Row-level security
Every data table uses Supabase Row Level Security (RLS) to isolate data by organisation. Users can only access data belonging to their own organisation — enforced at the database level, not just the application layer.
No third-party data sharing
We do not sell, rent, or share your assessment data with third parties. Your responses are used only to deliver the service and generate your results.
Rules-based processing
All scoring, gap identification, and recommendations are generated by deterministic TypeScript logic that runs in your browser. No AI APIs or external services process your assessment responses.
Data export and deletion
You can request a full export of your assessment data or request deletion of your account and all associated data at any time. Contact privacy@isoselfcheck.com.au.