Security & data

Your compliance data.
Kept in Australia.
Kept secure.

RTOSure handles sensitive compliance data for Australian colleges — trainer records, student welfare files, audit evidence, governance documentation. We take that responsibility seriously.

Our commitments

What we do to protect your data

Australian hosting

All RTOSure data is stored on Australian servers. We do not host or process compliance data offshore.

Encryption

Data encrypted in transit (TLS 1.2+) and at rest. Audit evidence, personal records, and governance documents are protected at every layer.

Access controls

Role-based access control means staff only see what they need to. Admins manage permissions. All access is logged.

Privacy Act compliant

RTOSure is designed to support compliance with the Australian Privacy Act 1988 and the Australian Privacy Principles.

Security detail

Where is our data stored?

RTOSure data is hosted on Australian servers. [Specific hosting provider and region to be confirmed — e.g. AWS Sydney, Azure Australia East.] We do not store or process your compliance data offshore.

How is data encrypted?

All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256. This includes all compliance documents, student records, trainer credentials, and governance files stored in your evidence register.

Who can access our data?

Access is controlled at the college level. Your nominated administrator manages user roles and permissions. RTOSure staff do not access your data without your explicit permission, except for the purposes of support and system maintenance (logged).

What happens to our data if we cancel?

On cancellation, you can export all your evidence, registers, and compliance records in standard formats before your account closes. Data is retained for 90 days after cancellation, then permanently deleted.

Is RTOSure compliant with the Australian Privacy Act?

RTOSure is designed to support your obligations under the Privacy Act 1988 and the Australian Privacy Principles. Our Privacy Policy details how we collect, store, and handle personal information. [Link to privacy policy once published.]

Security detail is v1 — to be reviewed by technical team and legal counsel before launch.

Your compliance data.Kept in Australia.Kept secure.