Security and privacy
Client data, handled with care.
Clients trust law firms and immigration practices with identity documents, personal histories and confidential matters. Here’s how we protect that information when we work on your behalf.
Our commitments
How we handle data.
Data terms first
Data processing and confidentiality terms are signed before we access anything.
Least access
We ask only for the access each workflow needs, and list every login we hold.
Least data
Workflows move only the fields they need between systems.
De-identified testing
Everything is tested on de-identified or dummy data before go-live.
Your systems first
Data stays in your own tools wherever possible.
Logged and reviewable
Automations write to a run log you can inspect.
Card data with Stripe
Card payments are handled by Stripe. We never see or store card numbers.
Consent and opt-out
Marketing goes only to people who agreed, and opt-outs are honoured on every channel.
Clean exit
If you leave, we hand everything over and remove our access.
Assistants and AI
How our assistants behave.
- RuleThey say they are assistants at the start of every conversation
- RuleThey never assess eligibility or give legal or immigration advice
- RuleThey show a privacy notice and ask for consent before collecting details
- RuleThey hand to a person whenever the client asks or the question needs judgement
Privacy law
Designed with the Australian Privacy Principles in mind.
Your practice remains responsible for its clients’ personal information under the Privacy Act 1988. We support your obligations by documenting what data each workflow uses, where it is stored and who can access it, and we will answer your security questionnaire. We do not currently hold ISO 27001 or SOC 2 certification.
Start with a Practice Diagnostic.
A few short questions, then a free 30-minute conversation. You’ll leave knowing what’s worth connecting or automating first.