How to talk to clients about data security 

We take data seriously - here’s how we protect it.

Your personal and business information is core to the advice we provide. We use a simple, proven approach to keep your data safe, private, and available when you need it.

What the Essential Eight is (in plain language)

The Essential Eight is a practical set of eight security habits recommended by the Australian Cyber Security Centre. 

Think of it as good hygiene for your data:

We follow these principles so client information stays protected without getting in the way of service.

Five talking points for client meetings

1. We use multi‑factor authentication (MFA) across our systems. MFA adds a quick extra step (like a code on your phone) when we log in. It’s one of the most effective ways to prevent unauthorised access to your information.
2. We keep software up to date automatically. Our systems update themselves to patch known issues and improve security. This helps prevent common cyber threats before they start.
3. We limit who can access client data. Only the right people in our business can see client information, based on their role. Access is reviewed and monitored, and changes are recorded.
4. We maintain secure, tested backups. We back up data automatically and test our restores regularly. If something unexpected happens, we can recover quickly and carry on.
5. We partner with independently certified providers. We use cloud software partners that meet rigorous security standards, including SOC 2 Type 2 (like JAVLN). This is an independent, ongoing audit that verifies strong security practices are in place and followed.

Client FAQs (with plain-English answers) 

Where is my data stored?

Your data is stored securely in accredited data centres in Australia/New Zealand with enterprise‑grade protections. We use reputable providers and enforce strict controls over where and how data is stored.

Who can access it?

Only authorised team members who need it to serve you. Access is controlled by role, protected by MFA, and monitored with audit logs. We also remove access promptly when roles change.

How quickly can you recover if something happens?

We keep automatic backups and run regular recovery tests. Our goal is to restore access quickly with minimal disruption, so your renewals, claims, and service continue smoothly.

How do you monitor for threats?

We use layered security, including 24/7 monitoring from our technology partners, regular updates, and alerts for unusual activity. We also have a documented incident response plan if an issue occurs.