Security & compliance
Financial-grade security. Australian-held data.
Novated leasing runs on salary, tax and identity data. We treat all of it accordingly.
Our controls
Security is the default, not an add-on.
Australian data residency
All customer data is stored and processed in Australian Azure regions.
ATO-aligned calculations
FBT, ECM and residual logic follows current ATO guidance and is updated as legislation changes.
MFA & SSO
Multi-factor authentication on every account; SAML/OIDC single sign-on for enterprise customers.
Full audit logs
Every quote, rate change, approval and data access is logged, timestamped and attributable.
Encryption everywhere
TLS 1.2+ in transit and AES-256 at rest, with managed key rotation.
ISO-style practices
Security controls modelled on ISO 27001: access reviews, least privilege, vendor assessment and incident response.