Security & Compliance

Enterprise-grade security for NDIS provider operations.

Every action is tracked, every access is controlled, and every record is protected. Inclusify is built from the ground up for the security and privacy requirements of disability service providers.

AES-256 EncryptionData at rest and in transit
SOC 2 CompliantControls and processes audited
Australian DataStored within Australia
NDIS ReadyBuilt for compliance requirements
Our approach

Security built into every layer.

From infrastructure to access controls, every aspect of Inclusify is designed to protect participant data and maintain provider compliance.

Role-Based Access Control

Granular permissions for every role: administrators, service managers, roster teams, support workers, and finance teams. Each role sees only what they need.

Full Audit Trail

Every action is timestamped and attributed to a specific user. Complete visibility into who did what, when, and from where, for full accountability.

Data Isolation

Strict multi-tenant data boundaries ensure participant information is isolated between provider organisations. No cross-tenant data access is possible.

Time-Limited Access

Set temporary access grants with automatic expiry for contractors, auditors, and temporary staff. No more lingering permissions after engagement ends.

Incident Governance

Structured incident reporting, investigation workflows, and escalation paths. Every incident is documented, reviewed, and resolved within a controlled process.

Document Control

Version-controlled document repository with access tracking. Every document view, edit, and download is logged for compliance and audit purposes.

Compliance

Aligned with NDIS practice standards.

Privacy & Dignity

Role-based access ensures only authorised personnel can view participant information. All data handling follows Australian privacy principles.

Governance & Oversight

Complete audit trails, approval workflows, and compliance evidence management support provider governance obligations.

Documentation

Structured progress notes, incident reports, and service records that meet NDIS evidence requirements for audit and review.

Infrastructure

Secure, reliable, Australian-hosted.

AWS Australia

All data stored in AWS Sydney region. Australian data sovereignty guaranteed.

99.9% Uptime SLA

Redundant infrastructure with automated failover and continuous monitoring.

Daily Backups

Automated encrypted backups with point-in-time recovery. Retention and restoration procedures documented.

Want to learn more about our security practices?

Contact our team for a detailed security review or to request our security documentation.


Contact our security team