Australian Data Sovereignty

All data stored in AWS Sydney (ap-southeast-2). Never leaves Australian jurisdiction.

  • AWS Sydney region only
  • No offshore processing
  • Privacy Act compliant
  • Data residency guaranteed

End-to-End Encryption

AES-256 at rest, TLS 1.3 in transit. Your data is encrypted every step of the way.

  • AES-256 encryption at rest
  • TLS 1.3 in transit
  • Encrypted database backups
  • AWS KMS key management

Role-Based Access

Granular permissions, MFA, SSO via SAML 2.0. Control who sees what.

  • Role-based access control
  • Multi-factor authentication
  • SAML 2.0 single sign-on
  • Granular permission sets

Compliance Standards

ISO 27001 aligned. SOC 2 Type II in progress. Meets Australian Privacy Act requirements.

  • ISO 27001 aligned framework
  • SOC 2 Type II in progress
  • Privacy Act 1988 compliant
  • Annual penetration testing

Audit & Monitoring

Comprehensive audit logs, real-time monitoring, 7-year log retention.

  • Real-time event monitoring
  • Comprehensive audit trails
  • 7-year log retention
  • Automated anomaly alerts

Backup & Recovery

Daily automated backups, 4-hour RTO, 99.99% uptime SLA.

  • Daily automated backups
  • 4-hour recovery time (RTO)
  • Point-in-time recovery
  • Quarterly DR testing

Compliance & Certifications

Meeting and exceeding industry security standards.

ISO 27001Aligned
SOC 2In Progress
Australian Privacy ActCompliant
Notifiable Data BreachesCompliant

Trusted by Australian Care Providers

Security isn't just a feature — it's the foundation of everything we build.

Australian hosted — AWS Sydney
99.99% uptime SLA guarantee
Zero-knowledge architecture options
Regular third-party security audits

Your Data, Protected

Join Australian care providers who trust NovoCove with their most sensitive compliance data.

Join the Waitlist