Your safety data, protected.
Compliance records are sensitive. Here's exactly how Ardmor keeps yours safe, private and available — in plain English, no jargon.
Your data stays in Australia
Every record lives in a database hosted in Sydney (AWS ap-southeast-2). Your compliance data never leaves the country.
Encrypted end to end
TLS 1.2+ on every connection, and AES-256 encryption at rest. Nobody reads your data in transit or on disk.
Your business, walled off
Row-level security plus application-layer isolation means one client can never see another's data. Multi-tenant, single-tenant safe.
We never hold your password
Sign-in runs through a dedicated identity provider (Clerk). Passwords and 2FA are handled by them — we never see or store them.
Certified infrastructure
We build on Vercel and Supabase — both independently SOC 2 Type II certified. We inherit their audited controls.
Backed up, automatically
Automated daily backups of the whole database, so your records survive mistakes, devices and dead zones.
Where your data lives
Hosted in Australia, for Australian manufacturers
Your database runs in Sydney. Your files sit in the same region. Nothing about your operation — incidents, injuries, employee records, SDS — is stored offshore. That keeps you aligned with Australian privacy expectations and keeps the data close to home.
How we keep it safe
The everyday practices behind it
Least-privilege access
Access is scoped to exactly what each person's role needs — worker, client admin, or your Ardmor advisor. Sensitive actions are written to an audit log.
Fail-loud monitoring
The Hub is continuously monitored. If something errors, it surfaces immediately in an operations dashboard rather than failing silently — so problems get fixed fast, not discovered late.
Private file storage
Documents, SDS and photos live in private storage and are served through short-lived signed links — never a public URL anyone could guess.
Secure by default
Security headers, private buckets and tenant scoping are the default state, not an add-on. New features are reviewed against the same bar before they ship.
Availability
The Hub runs on globally distributed infrastructure with automatic failover, and we monitor uptime and errors continuously. When you're out of signal on the floor, the worker app keeps working offline and syncs the moment you reconnect — nothing waits on a connection.
Responsible disclosure
Found something that looks off? We want to hear from you. Email info@ardmor.com.au with the details and we'll respond quickly. We don't pursue good-faith security researchers.
Compliance you can trust, on infrastructure you can trust
Start free on the Hub, or talk to our team about a managed rollout for your site.
Last reviewed: 12 July 2026