- Home
- Trust centre
Trust centre
Australian owned, Australian hosted, accountable by name
Your phone system and your files are somebody's responsibility on a Tuesday afternoon when something breaks. Here is who that is, where your data lives, and what we commit to.
Controls
How we protect your data
The same controls we deploy for customers, applied to ourselves. Aligned to the Australian Signals Directorate's Essential Eight — a baseline we build to, not a certification we claim.
Multi-factor everywhere
Every administrative account that can reach a customer system is behind multi-factor authentication. No shared logins, no exceptions for convenience.
Least privilege, and it expires
Technicians hold the access their role needs and nothing beyond it. Access is reviewed when people change roles and removed the day they leave.
Patching on a schedule you can see
Operating systems, firmware and applications are patched to a defined cycle, with out-of-band updates for anything actively exploited. The monthly report shows what was applied.
Backups that are restored, not just taken
Backups run to a documented retention schedule and are test-restored, because a backup nobody has restored is a hypothesis.
Monitored around the clock
Endpoint protection and monitoring run continuously and alert our team, so most faults are raised by us rather than by you.
The people are vetted
Our engineers are employees, not a subcontracted pool. They are bound by confidentiality terms and are named on your account.
Data sovereignty
Where your data actually lives
Data sovereignty is a procurement question, not a marketing one. Hosted phone systems, servers and storage run in Australian data centres, and support is delivered by our own team in Adelaide — so your call recordings, files and tickets stay under Australian law and Australian jurisdiction.
- Hosted phone systems, servers and storage run in Australian data centres
- Support and account management are delivered from Adelaide by our own staff
- No offshore help desk and no offshore administrative access to your systems
- Call recordings and voicemail stay within the Australian hosting footprint
- We tell you which third-party platforms are involved in your service, and where they run
Service commitments
What we commit to when something breaks
Response targets are set in your service agreement and vary by service and coverage. Ask us for the current schedule and we will send the one that would apply to you — we would rather quote your agreement than a number off a web page. Ask for the service schedule.
Escalation
If the first answer is not good enough
Your help desk ticket
Every fault gets a ticket and an owner. You can see its status and history, and you are talking to the engineer working it, not a queue.
Your account manager
A named account manager who knows your environment, not a rotating contact. Ask them to escalate and they can, without raising a second ticket.
The director
We are a business where the director takes the call. If an issue is not moving, it goes to the top of a short organisation chart the same day.
Accredited, and happy to be checked
Titanium 3CX Partner
3CX's highest partner tier, and one of only six in Australia. It means certified engineers in-house and escalation direct to the vendor rather than through a distributor.
Questions procurement usually asks
Where is our data stored?
Hosted phone systems, servers and storage run in Australian data centres, and your support and account management are delivered from our Adelaide office. Call recordings and voicemail stay within that Australian hosting footprint. If a service depends on a third-party platform, we will tell you which one and where it runs.
Does anyone offshore have access to our systems?
No. Support is delivered by our own employees in Adelaide. We do not use an offshore help desk, and no offshore contractor holds administrative access to customer systems.
Are you certified against the Essential Eight or ISO 27001?
We build and operate to the Australian Signals Directorate's Essential Eight — multi-factor authentication, least-privilege access, patching to a defined cycle, tested backups and continuous monitoring. That is an alignment, not an audited certification, and we will not claim otherwise. If your procurement process requires a certified supplier, tell us early and we will be straight with you about where we sit.
Will you complete our security or vendor questionnaire?
Yes. Send it through and we will complete it — including the questions where the honest answer is "not applicable" or "we do not do that". We would rather be ruled out early than discovered later.
Who do we escalate to if an issue is not moving?
Your ticket has a named owner, your account has a named manager, and above that is the director. It is a short organisation chart on purpose — escalation takes hours, not weeks, and does not require raising a second ticket.
What happens to our data if we leave?
Your data is yours. On termination we provide an export of your hosted data and, where you are moving to another provider, we work with them on the cutover. Number porting away from us follows the same process as porting in — we do not use it as leverage.
What happens if there is a security incident?
You are told. We contain the incident, tell you what we know and what we do not, and work the notification obligations under the Notifiable Data Breaches scheme with you rather than around you.
Still have questions? Talk to a local specialist — no call centre, no scripts. Contact us
Need this in a supplier questionnaire?
Send us your security or procurement questionnaire and we will complete it — we do this often enough to have the answers ready.