Data and safety
Your data stays yours
A register is council information about real businesses and people. Here is what we ask for, where it is kept, who can see it, and how you leave.
- What we ask for
- One register export: a spreadsheet or CSV of the register you want checked. We never need access to your systems.
- Before anything is uploaded
- A data agreement between your council and us, and a privacy impact assessment. Nothing is uploaded until the agreement is signed.
- Where it is kept
- Registers and findings are stored in Sydney.
- Who can see it
- The officers your council names. Each person signs in with a code sent to their own work email: no passwords, and no shared logins. Nobody else can sign in to your workspace unless your council gives them a seat. Every decision on a finding records who made it.
- What it is used for
- Matching against the public record for your council, and nothing else. It is never sold, shared, or used for another council.
- Sign-in codes and the weekly summary go by email through Resend, our email provider, which keeps email records in the United States for 30 days.
- When you leave
- You get an export of your findings. Everything else is deleted, and we confirm it in writing.
- The public data
- Every fact comes from public, open data, with its source and date. The business register is filtered before anything is kept: individuals and sole traders are never stored.
What it never does
It never decides anything, never contacts a business, and never publishes a finding. Every finding is a prompt for one of your officers, who decides what happens.
Questions from your IT team
Send them with your pilot request, or any time after. They get written answers before anything is uploaded.