Onsite combines Australian data hosting, encryption, tested recovery practices, and tightly controlled access to keep your building and community information safe.
Our safeguards cover how Onsite is built and operated, as well as how our team and devices access internal systems.
HTTPS/SSL protects data in transit, while data at rest is encrypted using the AES-256 encryption standard.
A complete database backup runs every 24 hours and is retained for at least 14 days. We rehearse disaster recovery every year.
System access is role-based, limited to job responsibilities, and reviewed regularly. Staff with access complete background checks and security training.
Security is built into our software development, deployment, and monitoring practices using proven, widely adopted frameworks and infrastructure.
Our hosting providers maintain SOC 2, ISO 27001, and GDPR compliance certifications, supporting our alignment with industry best practices.
Company devices are centrally managed through MDM. A zero-trust network layer adds extra protection around access to our internal systems.
Australian data residency and transparent service monitoring give customers a clear view of where their data is hosted and how the platform is operating.
Onsite uses DigitalOcean to host our frontend, backend, and database in its Sydney SYD1 data centre. Bucket file storage is provided by Google Cloud in its australia-southeast1 region.
DigitalOcean SYD1
Application and database infrastructure.
Google Cloud
Bucket files in australia-southeast1.
We monitor platform health, maintain recovery procedures, and publish service information so customers do not have to guess when something goes wrong.
Monitoring and logging track platform availability and support our service level commitment.
Our public status page shows current service health, recent incidents, and restoration updates.
Daily backups and annual disaster recovery rehearsals help us restore services safely.
We use established providers for specific operational functions. These are the subprocessors most relevant to platform security and reliability. See our privacy policy for more information.
