How we keep your data safe
You're trusting us with compliance evidence — policies, certificates, and records that matter to your organisation and, in some cases, reference your staff. Here's exactly how it's handled.
Hosted in Australia
All application data and uploaded evidence is stored on servers in AWS's Sydney region, and your evidence never leaves Australia. A few service providers (email delivery, payments and live chat) handle limited contact details overseas. Our Privacy Policy lists them.
Encrypted everywhere
Your data is encrypted at rest in our database and file storage, and encrypted in transit over HTTPS on every connection to FitForAudit.
Your organisation's data stays yours
Every organisation's checklist, evidence, and team data is isolated — no other organisation on FitForAudit can see or access it.
Private file access
Uploaded evidence is never publicly accessible. Download links are generated on demand and expire automatically.
Full audit trail
Every upload, download, deletion, and status change in your account is logged, so your organisation always knows who did what and when.
No card data on our servers
Billing is handled by Stripe, a PCI-DSS compliant payment processor. FitForAudit never sees or stores your card details.
What we ask you to be mindful of
FitForAudit is built to store your organisation's compliance evidence — policies, certificates, training records, and similar documents. Please avoid uploading documents containing unredacted information about NDIS participants where it isn't needed for the compliance evidence itself.
Questions about how your data is handled? Read our Privacy Policy or email support@fitforaudit.com.au.