Security
How Altego handles data that, by its nature, is sensitive
Hosting
Altego is hosted in Australia. Data does not leave Australian infrastructure as part of normal operation.
Encryption
Data is encrypted in transit and at rest.
Access control
Role separation is enforced at the data layer, not only in the interface. Tipping-off partitions restrict who can see that a report exists or is contemplated.
Audit trail
Every alert, parameter change, screening decision and report action is written to an append-only audit log. Nothing that fires is ever deleted.
Identity verification
Identity is established by the business's own staff, who record the document and the check in Altego. No electronic verification provider is connected, so no identity data leaves Altego for one.
Monitoring and testing
Production systems are monitored continuously, and the platform is reviewed through periodic security testing.
Incident response
Suspected security incidents are triaged immediately. Where personal information is affected, they are handled under our data breach notification process.
Sub-processors
We use a small number of Australian-hosted infrastructure and service providers, each bound by contract to the same security standard as Altego itself.
Reporting a concern
If you believe you have found a security issue, contact hello@altego.com.au and we will respond.