Security Overview

OPIE Platform — Security Overview

This page is a summary for customers, distributors and procurement teams. It is not a policy document and does not describe specific technical controls. For full details, see our Information Security Policy and related Trust Centre documents.

Summary version 2026.1 · Last updated 30 June 2026

At a glance

Topic	Summary
Data encrypted in transit	Yes — encrypted communications are used for platform services and customer-facing applications.
Encryption at rest	Where appropriate — applied to platform and service-provider environments handling customer and business data.
Role-based access control	Yes — access is limited to authorised users based on business role and need.
Multi-factor authentication for privileged accounts	Yes, where implemented — stronger authentication applies to privileged and administrative access.
Regular backups	Yes — backup processes support recovery of critical platform and business data.
Incident response process	Yes — documented procedures for investigation, containment and recovery. See our Information Security Policy.
Responsible vulnerability disclosure	Yes — see our Vulnerability Disclosure Policy for how to report security issues.
Australian-hosted where feasible	As appropriate for the service — data residency depends on service type, provider architecture and operational requirements.
Privacy Policy available	Yes — Master Privacy Policy and Cookie Policy published in the Trust Centre.
Acceptable Use Policy	Yes — operational use rules for platform features, AI services and accounts.

At a glance

Related documents