Data security

Your data, locked down.

Security is built into everything we do, from our platform and infrastructure to our processes and our people. We meet global benchmarks so your information stays protected, available and handled responsibly.

  • ISO/IEC 27001 certified and independently audited
  • Hosted on Microsoft Azure, with your data kept in Australia
  • Encrypted at rest and in transit
See our ISO 27001 certification → or read the FAQs
Data security and compliance

ISO/IEC 27001 certified

The global standard for information security management. We've been independently audited across our data handling, internal processes, risk management and operational controls. Learn more

Independently tested

Third-party experts run penetration tests, vulnerability scans and security audits, so we can find and fix risks before they become problems.

Hosted on Microsoft Azure

World-class cloud security, compliance with over 90 global standards, built-in encryption and reliable, scalable hosting.

Australian owned and operated

Your data is handled under Australian privacy law by a local team. Got specific data residency needs? We'll work with you to meet them.

Ask IndyAI stays onshore too.

Ask IndyAI uses Anthropic's Claude through Amazon Web Services (AWS) Bedrock, hosted in Australia. Your data stays in Australia and is covered by the same strict privacy and data-handling standards as the rest of the platform. It's never used to train AI models.

Meet Ask IndyAI →

“Every layer of our platform, our organisation and our people is built with one goal: to keep your data safe, secure and accessible only to those who need it.”

Security across people, processes and infrastructure

It's woven into the whole organisation, from leadership decisions to daily operations.

Data security and encryption

  • Sensitive data encrypted at rest and in transit
  • Clear retention policies
  • Secure deletion when data is no longer needed

Access control

  • Role-based access, so people only see what they need
  • Multi-factor authentication on critical systems
  • Unique logins and regular access reviews

Infrastructure

  • Network segmentation
  • Firewalls and intrusion detection
  • Regular patching and real-time monitoring

Incident response

  • Documented incident response plan
  • Routine backups with secure recovery
  • Disaster recovery plans tested every year

Policies and governance

  • Documented security policies, reviewed regularly
  • Security training for every employee
  • Vendor risk reviews and regular audits

Our people

  • Confidentiality agreements for all staff and contractors
  • Security responsibilities acknowledged by everyone
  • Lessons from every incident fed back in

Security FAQs

What does ISO/IEC 27001 certification mean for me?

It means IndyForms follows globally recognised standards to protect your data, reduce risk and stay in line with best practice.

How does IndyForms handle my data in the cloud?

IndyForms is hosted on Microsoft Azure, giving you reliable, scalable and secure cloud infrastructure, with your data kept in Australia.

How often are security checks performed?

Our systems are monitored continuously, penetration tested at least once a year, and access is reviewed at least every quarter.

Make the paperwork as easy as possible.

Try IndyForms free for 14 days. No credit card, and AI turns your existing forms into smart forms to get you started.

Start my free trial →