Security and data sovereignty

Your tender data stays in Australia. That is not a policy. It is an architectural fact.

All data is stored and processed in Australia, enforced at the infrastructure level. The detail that Legal, Procurement, and enterprise IT actually ask for.

The posture

Security, stated plainly.

Data Residency

In Australia. Every byte.

All data is stored and processed exclusively in Australia. Enforced via Azure Policy at the infrastructure level. No configuration option, administrative override, or contractual arrangement can move data outside the country. Azure Policy rules enforce data egress restrictions at the network layer, not at the application layer and not through contractual commitment alone. This is the technical specificity enterprise IT and security teams require.

Encryption

Everything encrypted when it needs to be.

Data at rest is encrypted with AES-256. All data in transit is encrypted with TLS 1.3. There is no unencrypted path to your data.

AES-256 at rest
TLS 1.3 in transit
Access Control

Access controlled by your environment.

Single sign-on and multi-factor authentication are enforced via Microsoft Entra ID using OIDC and SAML 2.0. No Synthrics-native credential store. Authentication is delegated to your organisation's existing identity provider.

Microsoft Entra ID
OIDC
SAML 2.0
Tenant Isolation

Be secure in your own space.

Each customer operates in a completely isolated database schema. Cross-tenant data access is architecturally impossible, not policy-governed. This is the model that ensures your bid content never touches another organisation's data.

AI Model Training

Your data is never used to train AI models.

Synthrics does not use customer data to train, fine-tune, or improve AI models. This commitment is enforced in the platform architecture and reflected in the Terms of Service.

Certifications

Security accreditation – on the way.

Synthrics is based on an ISO 27001 aligned information security management system with certification well underway and SOC 2 and IRAP to follow.

ISO 27001 aligned
SOC 2 to follow
IRAP-aligned design
Documentation

A full security overview for your IT and Legal teams.

Download Security Overview

Download the Security Overview

Thanks, your Security Overview is ready.

Open the PDF

Something went wrong sending your details. Please try again or email hello@synthrics.com.