Kinatico
Get started

Trust Centre

Data Security, Safety and Trust Policy

Connecting you to the latest information on the security, reliability, privacy, and compliance of Kinatico's solutions and services.

The privacy of data is our highest priority

We’re committed to respecting the privacy of our customers, suppliers, visitors, applicants and anyone else who engages with Kinatico, and to protecting their personal information. 

Because our work involves handling of sensitive information about your organisation and your people, this page explains how we manage and protect that information. 

Placeholder

Compliance Certifications, Standards, and Regulations

We operate under industry-accepted certifications and comply with current industry standards and regulations so you can feel confident that your company, employee and contractor data remain secure and compliant. 

How we use AI 

Our document scanning runs on a closed-loop system with models trained on Kinatico-owned data. Customer data is never used to train models, no third-party large language models are used anywhere in the platform, and all AI processing happens in Australia. 

AI reads documents and fills in the details, flagging anything that needs a human to look at it. AI does not decide whether someone is compliant, that decision stays with your team, and the audit trail shows how that decision was made. 

Where your data lives 

All worker data is stored and processed on Australian infrastructure, and it doesn’t leave Australia under any circumstances. Data is encrypted, with additional field-level encryption on sensitive personal information. 

We comply with the Privacy Act 1988 and all thirteen Australian Privacy Principles. A documented retention policy sets how long each type of personal information is kept, and is reviewed as part of our annual information security audit. 

Frequently asked questions

  • Yes. Kinatico is certified to ISO/IEC 27001, and our Information Security Management System has been audited by an independent security auditor. Certification means our security processes, policies and controls meet international standards. 

  • Only people who have a need for business purposes in relation to the services we are providing to you. 

  • Kinatico stores your data in Amazon Web Services (AWS) and Microsoft Azure data centres located in Sydney and Melbourne. These data centres include a range of measures for protecting and preserving your data such as biometric access controls, redundant power and fire control systems, active security monitoring, and multiply redundant network and storage hardware. This ensures that our systems are highly available and affords your data the highest level of protection against loss and theft. 

  • Kinatico understands that data sovereignty is important to our customers. Accordingly, all Kinatico data is stored within Australia and is therefore protected under Australia’s legal jurisdiction. This means that authority and control over your data remains within Australian boundaries and your information is not subject to unvetted access by foreign governments or organisations. 

  • Yes. You have the right to access the personal information that you provide to us. Users can, subject to the Australian Privacy Principles or the New Zealand privacy principles, request a copy of, update or correct, the personal information provided to us by contacting us at privacy@kinatico.com. It is important to us, and essential in providing the Services, that the personal information you provide is accurate, complete and up to date. For privacy and security purposes, we may request specific information to verify the requestor’s identity. 

  • Yes, your information is stored using secure AES-256 encryption in the Microsoft Azure and Amazon Web Services (AWS) data centres located in Sydney and Melbourne. 

  • Yes. Our ISO/IEC 27001:2022 certification is independently audited every year, and independent penetration testing is carried out annually. 

  • No, we only share the results of any requirement back to the requesting organisation’s admin portal.  Workers and candidates are in control of their data and the use of it.  

  • If you wish to remain anonymous or to use a pseudonym when dealing with us, we may be able to provide you with limited information, such as general details about our Services. In nearly all cases, however, it will be impracticable for us to assist you if you wish to remain anonymous or use a pseudonym. Because of this, if you choose not to identify yourself or wish to use a pseudonym, we will be unable to provide you with the Services. 

  • If you have a complaint in relation to the collection, use or disclosure of your personal information, or privacy matters generally, contact are as follows:  

    The Privacy Officer 
    privacy@kinatico.com.au  
    +61 8 9226 0484 
    PO Box 7394  
    Cloisters Square PO  
    WA 6850. 

    If the matter is not resolved to your satisfaction you can then refer your complaint to: 

    • Australia – the Office of the Australian Information Commissioner at oaic.gov.au 

    • New Zealand – the Office of the Privacy Commissioner 

    If you have requested a NCCHC and you do not agree with the results of your NCCHC, you will have an opportunity to raise a dispute through the Kinatico mobile app. Kinatico will liaise with the National Police Checking Service and tell them you want to dispute the result.