All data is stored and processed in Australia, enforced at the infrastructure level. The detail that Legal, Procurement, and enterprise IT actually ask for.
All data is stored and processed exclusively in Australia. Enforced via Azure Policy at the infrastructure level. No configuration option, administrative override, or contractual arrangement can move data outside the country. Azure Policy rules enforce data egress restrictions at the network layer, not at the application layer and not through contractual commitment alone. This is the technical specificity enterprise IT and security teams require.
Data at rest is encrypted with AES-256. All data in transit is encrypted with TLS 1.3. There is no unencrypted path to your data.
Single sign-on and multi-factor authentication are enforced via Microsoft Entra ID using OIDC and SAML 2.0. No Synthrics-native credential store. Authentication is delegated to your organisation's existing identity provider.
Each customer operates in a completely isolated database schema. Cross-tenant data access is architecturally impossible, not policy-governed. This is the model that ensures your bid content never touches another organisation's data.
Synthrics does not use customer data to train, fine-tune, or improve AI models. This commitment is enforced in the platform architecture and reflected in the Terms of Service.
Synthrics is based on an ISO 27001 aligned information security management system with certification well underway and SOC 2 and IRAP to follow.