Data protection

Security built into every automation

We handle your data under a written Data Processing Agreement, aligned to the Australian Privacy Act. Here is plainly how we protect it.

Our data commitments

  • Encryption everywhere. Your data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256) across the platforms we use.
  • Least-privilege access, revoked at the end. We request only the access needed to deliver the work, use scoped and delegated access where possible, and revoke all access when the engagement ends.
  • Logins collected securely, never by email. When we need access to one of your systems, you enter the login through a secure single-use link that goes straight into our encrypted vault. Passwords are never sent to or stored in an inbox.
  • Clear limits on AI. AI is used to assist our own work in delivering your automations. AI inputs are not used to train models (per Anthropic's commercial API terms) and are deleted within the provider's stated retention period. How your data is handled is set out in your Data Processing Agreement.
  • Multi-factor authentication. MFA is enforced on our accounts and systems, and credentials are rotated on a regular schedule.
  • Breach notification you can rely on. If a data breach affects your information, we notify you within 24 hours and assist with your obligations under the Notifiable Data Breaches scheme.

Handled under a written agreement

On every engagement, OpFlow acts as your data processor under a Data Processing Agreement that sets out exactly what data is processed, by which providers, and how it is protected and retained. You own your data at all times. The full list of the providers we use, and where your data is processed, is set out in your agreement and available on request.

Questions about data security?

If you have specific questions about how your data would be handled, or if your industry has particular compliance requirements, we are happy to walk you through the detail.

Get in touch

Automation you can trust with your data

Let's talk about what you want to automate, and how we would protect the data involved.

Book a free call