NDIS providers hold some of the most sensitive information there is: health details, behaviour support plans, finances and family information. Your software provider shares responsibility for protecting it.
Questions to ask
- Where is our data stored, and does it ever leave Australia?
- Is data encrypted in transit and at rest?
- Is multi-factor sign-in available for every user?
- Can we control access by role, location and participant?
- Is every change logged in an audit trail?
- How are backups made, and how quickly can data be recovered?
- Who provides support, and from where?
- Is our data used to train AI models?
How Innovara iQ answers
Innovara iQ data is hosted only in Australia and supported only from Australia. It is encrypted in transit and at rest, protected with multi-factor sign-in and detailed permissions, and every change is logged. Our local cyber security professionals manage backup and recovery, your data is never used to train public AI models, and we are preparing for ISO/IEC 27001 certification.
This guide is general information only and is not legal, payroll or compliance advice. Always check current requirements with the NDIA, the NDIS Quality and Safeguards Commission or Fair Work.