Security Fundamentals

Security is not a feature. It is our foundation.

At Numberz, we understand that handling your business’s financial data requires clear, verifiable safeguards. We focus on encrypting sensitive information, limiting access to people who need it, and keeping an audit trail around important actions.

1. Infrastructure & Hosting

Numberz uses managed cloud infrastructure and secure document storage for client files, identity documents, service records, and lodgement support material.

• Secure cloud storage: Uploaded documents are stored in controlled cloud storage with server-side AES-256 encryption enabled on upload.
• Access controls: Access to client files and records is limited through authenticated accounts, role-based permissions, and service-specific document links.

2. Cryptographic Data Protection

We use encryption in the places where sensitive information is stored or transmitted.

• AES-256-GCM field-level encryption: Sensitive profile fields such as TFNs, identity details, BSB/account details, and document numbers are encrypted before storage using versioned AES-256-GCM encryption.
• AES-256 document storage encryption: Uploaded client documents are stored with AES-256 server-side encryption.
• HTTPS/TLS in transit: Data submitted through Numberz forms and portals is transmitted over encrypted HTTPS/TLS connections.

3. Rigorous Compliance Framework

Numberz is a registered tax agent and handles client data under Australian privacy and tax-practitioner obligations.

• Audit trail: Important document, signing, and service actions are logged so activity can be reviewed when needed.
• Privacy controls: We limit data collection to the information needed to provide accounting, tax, business registration, and related services, and we do not sell client data.