What we can tell you today
Provider Shield uses Australian-region infrastructure for sensitive AI inference, document storage, database hosting and application compute. This page shows where that happens and which providers handle only non-sensitive account information. If you have a specific question, contact us before you sign up.
Encrypted Connections
Provider Shield is served over HTTPS with HTTP Strict Transport Security (HSTS) enabled, so data sent between your browser and the service is encrypted in transit.
Sign-In and Account Scoping
Participant records and notes require sign-in and are scoped to your account. Passwords are stored hashed.
Australian-Region Infrastructure
Provider Shield uses Australian-region infrastructure for sensitive AI inference, document storage, database hosting and application compute. This covers participant documentation, progress notes and uploaded service records, and the AI analysis of them.
Other Providers, Non-Sensitive Data Only
Specialist providers for payments, sign-in and account email may operate outside Australia. They handle account, authentication and billing information, not participant notes or uploaded documents.
Note Edit History
Saved progress notes keep a version history, so your team can see how a note changed over time.
Your Responsibilities
You remain responsible for your own privacy and record-keeping obligations. Only enter the participant information you need, and review all AI-generated suggestions before relying on them.
Where sensitive data is handled
- AI processing
- Microsoft Azure OpenAI, Australia East (regional deployment)
- Uploaded documents
- Microsoft Azure Blob Storage, Australia East, zone-redundant, private access only
- Database
- Neon PostgreSQL, AWS Sydney
- Application servers
- Vercel, Sydney region. Requests reach them through the hosting provider's network.
- Analytics in the signed-in product
- None
If AI processing is unavailable, analysis fails with a message. Your documentation is not sent to a different AI provider. Files saved before this change may no longer be available for download. Some provider-operated safeguards, such as Microsoft's service abuse monitoring and database backups, are governed by those providers' terms; we are confirming where they are held.
See the Trust Center, the Privacy Policy and the Privacy Act page for how personal information is collected and used.
Have a Specific Question?
Ask us how a particular type of information is handled before you decide whether Provider Shield is right for your organisation.