Skip to content

Trust

Where your data lives, and who can reach it.

Australian hosting, Privacy Act-aligned controls, and an honest status against every framework we name. If something is in progress, this is where it says so.

Where your data lives

Client records are stored in AWS Sydney (ap-southeast-2), and clinical AI runs only in Australian AWS regions. Overseas services are named on our sub-processor list.

How it is governed

Aligned to the Privacy Act 1988 Australian Privacy Principles.

How it is protected

Encryption at rest, TLS in transit, MFA, role-based access and clinical audit logging.

Where certification stands

Not ISO 27001 certified. Our internal assessment records 69 of 93 controls implemented, 22 partial and 2 planned.

The detail

Each page carries its own review date.

Security controls

Encryption, access control, network security and incident response, as built.

  • Encryption
  • Access control
  • Incident response

Certifications

Where each framework stands. In Progress, Planned and Self-attested are written as such.

  • ISO 27001 (In Progress)
  • Essential Eight
  • Medicare approval pending

Compliance

Our posture across the Privacy Act 1988, Essential Eight, Services Australia and AHPRA alignment.

  • Privacy Act 1988
  • AHPRA alignment
  • Data sovereignty

Sub-processors

Every supplier that processes data on our behalf, with role, purpose, jurisdiction and DPA status.

  • Australian infrastructure
  • Payments
  • AI

Breach notification

What we commit to telling you, and when, if a data breach ever occurs.

  • NDB scheme
  • OAIC

System status

Live service status, recent incidents, and our availability and recovery targets.

  • Live status
  • Recent incidents
  • Recovery targets

Client data export

What a client can take with them, field by field, and how a practice exports it.

  • APP 12
  • Right of access
  • JSON and CSV

For practitioners

What we handle, and what stays yours.

AI Transparency Statement

What each AI feature does, what it never does, and where your data is processed.

Professional obligations notice

What Praxi handles for you, and what stays your professional responsibility.

Privacy Policy

How we collect, use and protect personal information under the Privacy Act 1988.

Terms of Service

The agreement governing your use of Praxi.

Ask the person who built it.

Praxi is founder-operated. Questions about our practices, certifications or documentation come straight to the founder, not a queue.

Request documentationEmail hey@praxi.au