Your documents.
Clear access boundaries.

Where data is handled

Private practice database records and document originals use the Supabase Sydney region (ap-southeast-2). Cloudflare serves the website and app from its network. Public enquiries and waitlist records use Cloudflare D1 with an Oceania location preference, which does not guarantee Australian residency. The configured sign-in email service is Resend; its handling is described in the privacy notice.

Encryption and individual sign-in

Website and app connections use HTTPS. Hosted database and object storage use their providers’ encryption at rest. Each staff member signs in using an emailed link. There are no shared practice passwords.

Practice separation

Database row-level security checks active practice membership, capabilities and audiences. Drafts and retained originals are limited to document managers or approvers. Staff use permitted current-approved policy versions. Removing membership blocks future reads; it cannot recall files already downloaded.

Provider access

Authorised project administrators have management access to the infrastructure and can access stored information where necessary. There is no general customer impersonation control in the app. Provider staff access is governed by their own security arrangements. We do not claim that administrators or infrastructure providers are technically unable to access the data.

Copies and recovery

A dated manual copy of the website database was restored and checked locally. Private record exports and retained originals were downloaded and checked. No separate automated external database-and-file backup schedule is configured. Supabase Free exports and original file bytes need separate recovery arrangements; a database backup does not contain Storage object bytes.

Reporting a suspected breach

Use the contact form to report a security concern without including passwords or patient information. A report must be reviewed, contained and assessed under the applicable privacy obligations. Where the Notifiable Data Breaches scheme applies, eligible breaches require notification to affected people and the OAIC. We do not claim a staffed 24-hour incident response service.

Export and deletion

Authorised users can download their permitted record archive and original files. Keep independent copies. Request access, correction or deletion through the contact form; the request must be verified before action. Audit evidence and any legal retention obligations are considered when processing deletion.

Supabase backup information · OAIC breach guidance · Privacy notice