Security Fundamentals

Security is not a feature. It is our foundation.

At Numberz, we understand that handling your business's financial data requires uncompromising trust. We fundamentally reject the concept of "good enough" security, employing a zero-trust architecture designed to proactively neutralize threats before they materialize.

1. Infrastructure & Hosting

Your data physically resides within Australia, safeguarded by redundant, enterprise-grade facilities.

• AWS Sydney Region: Our entire core production environment is hosted exclusively on Amazon Web Services (AWS) within the ap-southeast-2 (Sydney) region, ensuring stringent physical data sovereignty laws apply.
• High Availability (HA): Deployed across isolated Availability Zones (AZs) for immediate failover. In the event of catastrophic physical hardware failure, our databases auto-recover with near-zero RPO (Recovery Point Objective).

2. Cryptographic Data Protection

We utilize rigorous cryptography to render your data fundamentally inaccessible to unauthorized actors.

• AES-256 Encryption at Rest: Every single byte of client data—including databases, cached query responses, and uploaded documents—is symmetrically encrypted at the disk level. Keys are rotated dynamically via AWS Key Management Service (KMS).
• TLS 1.3 Encryption in Transit: When data moves between our servers or between our servers and your browser, it is encapsulated within strictly enforced Transport Layer Security (TLS v1.2 minimum, v1.3 preferred) tunnels, guaranteeing perfect forward secrecy against interception.

3. Rigorous Compliance Framework

Security without verification is merely a promise. Numberz subjects its infrastructure, policies, and personnel to continuous scrutiny by external compliance authorities.

• Australian Taxation Office (ATO): We adhere strictly to the ATO's Operational Framework for Digital Service Providers (DSPs), mandating multifactor authentication (MFA), detailed audit logging, and strict incident reporting.
• Australian Privacy Principles (APP): Our engineering and corporate culture is built around 'Privacy by Design'. We systematically minimize data collection, enforce strict data retention schedules, and rigorously apply the APPs to all architectural decisions.