Certifications
Our current status, including approvals and assessments still outstanding.
ISO 27001:2022
Praxi is not ISO 27001 certified. Our internal assessment, approved on 21 June 2026, records 69 of 93 Annex A controls as implemented, including inherited controls; 22 are partial and two planned. This is not an independent assessment of effectiveness.
Privacy Act 1988
Our privacy programme addresses the Australian Privacy Principles through policies, access and correction processes, and Notifiable Data Breaches response procedures. This is not an independent certification of compliance.
Essential Eight
The Essential Eight informs our security work, including access controls, patching and backups. We have not completed an independent maturity assessment and do not claim an assessed maturity level.
AHPRA Alignment (PsyBA 2025)
Platform features align with AHPRA and PsyBA 2025 Code of Conduct requirements: clinical note signing workflows, supervision and CPD tracking, and advertising safeguards.
Medicare approval pending
Services Australia Notice of Integration: our Medicare claiming integration is built and is being conformance-tested against the Services Australia vendor environment. The NOI has not yet been lodged, so Medicare claiming is not yet certified for production use. We will say so plainly here when it is.
How we talk about certifications
Security and compliance badges are easy to over-claim and hard to earn. We distinguish internal implementation records from independent assessment and certification. A programme or policy is not proof that every requirement has been met. If a status moves, this page is the source of truth.
Last reviewed: 2026-09-14.
Security documentation
Our security whitepaper, ISMS policy index and Privacy Impact Assessment are available now. An independent penetration test is planned before our first paying customer; ask to be notified when the report is on file.