Infrastructure security

Are all servers and network equipment hosted within premises managed by you, or within a co-located data centre?

All servers and network equipment is co-located in a data centre provided by Microsoft Azure.  The primary data centre location is in Sydney, Australia.

For more information on Microsoft Azure, click here or visit Microsoft's website.

Is this service hosted on a cloud provider's infrastructure?

Yes.  Our applications are hosted in a Tier 1 data centre operated by Microsoft - http://azure.microsoft.com/. 66% of the Fortune 500 countries use Microsoft Azure.

Are these data centres physically secured? If yes, please outline the physical security measures which have been implemented (e.g. security cameras, presence of guards, visitor validation etc.)  

Yes, these are hosted with Microsoft Azure which has full physical security measures in place.

Has there been an independent review of the security and environmental controls implemented in these data centres? E.g. SOC 1 & SOC2, ISO27000 etc.

Microsoft Azure meets a broad set of international and industry-specific compliance standards, such as ISO 27001, HIPAA, FedRAMP, SOC 1 and SOC 2, as well as country-specific standards including Australia IRAP, UK G-Cloud, and Singapore MTCS.

Microsoft was the first company to adopt the uniform international code of practice for cloud privacy, ISO/IEC 27018, which governs the processing of personal information by cloud service providers.

For more information visit the website – click here

Is this a web-based application? If yes, please provide details of the technology stack for the front end (e.g. .NET or PHP) and backend database (e.g. Oracle or MySQL).

The front end of the application stack is built in ASP .NET and the backend is an SQL database.

Does the application support secure integration (transport) e.g. SSL?

Yes, our applications are hosted on https:// with an EV SSL certificate offers the highest available levels of trust and authentication to your website.

The green address bar prominently displays your company name and provides highly visual assurance to customers that your site is secure – immediately giving them the confidence to complete their transaction.