Enterprise security and data privacy for Australian businesses
Download our Security Strategies Policies Document
Trust in Robust Australian Data Privacy and Security
We take data security seriously.
Swift Digital is Australian-owned, ISO 27001 certified, and pen-tested. All data is held securely in Australia, not offshore, making us APP 8 compliant.
We are also WCAG 2.2 approved and a NSW government-approved supplier.
ISO 27001 Certified
The Swift Digital platform is ISO 27001 certified. ISO 27001 is the world’s best-known standard for information security management systems (ISMS). It defines the requirements an ISMS must meet.
-
Worldwide recognised standard
-
Reduces vulnerability to the growing threat of cyber-attacks
-
Ensures that assets are entrusted by third parties remain undamaged, confidential, and available as needed
-
An accreditation body has provided independent confirmation of the certification body’s competence
WCAG 2.2 Certified
The Swift Digital platform and its modules are WCAG 2.2. certified. WCAG 2.2 makes the web more accessible for people with diverse abilities and needs, focusing on people with cognitive or learning disabilities and people with diverse abilities using mobile devices.
-
The Swift Digital platform satisfies all Level A and AA success criteria of the web
-
Content Accessibility Guidelines (WCAG) 2.2 specification
-
International recognised standard
-
An accreditation body has provided independent confirmation of the certification body’s competence
Australian Government Accreditations
The Swift Digital platform is deployed across all levels of the Australian Government. Federal Government agencies can also procure our services without needing to go through panels.
Swift Digital is an approved supplier in NSW, Victoria and Queensland
-
NSW ICT Services Registered Supplier List
-
Victorian Government Services Register Approved Supplier
-
Qassure
Data security is a priority
Our server infrastructure is operated from world-class centres to ensure the utmost levels of security, connectivity and availability at all times.
Enterprise data centre security
We use state-of-the-art web servers facilitated by Amazon Web Services (AWS). AWS utilises leading security technology to guard its server centres.
Australian hosted data storage
Our servers are geo-locked to Australia. Your data remains within Australia, and is thereby bound by Australian privacy law–not foreign legislation.
Regular penetration tests
We perform third-party penetration tests every 6 months, to ensure platform vulnerabilities are patched and can stand up to emerging security threats.
Data ownership
You maintain full control and ownership of your data. Full-stop. You’ll find this in black and white, in section 17 of our terms and conditions.
Staff background checks
We perform thorough background checks as part of our hiring process. All staff have been required to provide national police checks as well.
Log in security
A few conditions must be meet when setting a secure password. We recommend every user have their own log in, and offer secure password reset functionality.
Platform security
We’ve developed a litany of technologies and security techniques to secure our platform. Many clients are government or financial organisations requiring bank-grade security.
No spam policy
We have a zero spam tolerance policy. We carefully vet clients of their email marketing intentions, and have a server reputation score to prove so.
Two-factor authentication
Two-factor authentication is activated for greater security and requires users to verify their authenticity.
SSO implementation
SSO implementation allows you to control your Swift account’s user logins and access controls directly from your SSO environment.
Frequently asked security questions
Where is my data stored?
Our state-of-the-art Amazon Web Services (AWS) web servers store your data in server locations that are geo-locked to Australia. Your data remains your property and remains under Australian jurisdiction.
Is Swift PCI complaint?
Payment Card Industry (PCI) compliance. At no point in our payment processes do we control or process funds–this is handled directly between the consumer and your bank (via a payment gateway). Because we do not directly control or process funds, PCI compliance is not applicable.
Does Swift Digital have Accreditations?
Yes, Swift Digital has several accreditations and is approved across all levels of the Australian government. Federal Government agencies can also procure our services without needing to go through panels. Find out more about our accreditations here.
Is Swift Digital 27001 Certified?
Yes, Swift Digital is ISO 27001 certified meaning our company, people, policies and technology have been closely vetted by an international standard in data security and we have appropriate and approved security procedures in place to protect critical information assets and comply with applicable legal and regulatory requirements. More info on ISO 27001 here.
