Security

Sensitive fields — such as tax file numbers and banking details — are encrypted at rest. Connections to the portal are encrypted in transit, and documents are stored in private storage that is never publicly accessible.

• Every user signs in with a personal account; credentials are never shared.
• Access is role-based — people only see the records their role permits.
• Sensitive payroll details are restricted to authorised HR and payroll staff.
• Additional verification can be required for privileged accounts.

Privileged actions — including revealing sensitive data and downloading documents — are written to an immutable audit log, so access can be reviewed and accounted for.

• Choose a strong, unique password and keep it private.
• Sign out on shared or public devices.
• Only access records you are authorised to view.
• Report anything suspicious straight away.

If you spot a vulnerability or suspect a security issue, please tell us immediately via the Contact page. See also our Privacy Policy and Acceptable Use Policy.