Who has access to my data?

In short, and as security practitioners ourselves, we know that platform security is critical. SECTARA leads security assurance in this this class of SaaS application and has the following arrangements to preserve data confidentiality, integrity and assurance:

  • Data that you create within SECTARAis encrypted at rest and in transit using TLS and AES.
  • By design, only two System Administrators have access to SECTARA’s live data environment; both are Australian citizens and hold high-level Government security clearances.
  • Policy controls restrict those System Administrators from accessing subscriber assessments and most other account information.
  • Other than through customer use/access, there are no circumstances where assessment data leaves the production environment.
  • All users are able to apply multi-factor authentication to their accounts.

In order to facilitate commercial activities, such as providing support to SECTARAsubscribers, SECTARAadministrators have strictly controlled access to other information (names, email addresses etc.)

Our SECTARA Website and Service Terms and Conditions define security arrangements more generally.