Customer data is hosted in Australia, in the Supabase Sydney region. Data is encrypted with TLS 1.3 in transit and AES-256 at rest.
Row level security is enforced at the database level on every table, so tenant separation does not depend on application code alone. Role-based access covers worker, supervisor, investigator, safety manager and organisation administrator, with single sign-on available through Microsoft Entra ID and SAML.
AI processing stays onshore in Australia. The information security management system is aligned to ISO 27001, with certification in progress.
SafetyPulse by ICAM Australia Pty Ltd. ICAM training and methodology.