Enterprise-Grade Security
for Healthcare Data
Built with Australian healthcare compliance at its core. SOC 2 aligned, APPs compliant, and hosted exclusively in Australian data centres.
Security pillars
Three pillars of trust
Every aspect of HSuite is designed around enterprise-grade security, real-time reliability, and Australian data sovereignty.
Enterprise Security
AES-256-GCMEvery layer of HSuite is built with security at its core. From MFA enforcement and role-based access control to AES-256-GCM encryption at rest and in transit, your data is protected by enterprise-grade controls aligned with SOC 2 standards.
Real-time Sync
Bi-directionalWebhook-driven PMS integrations with idempotent event processing, automatic retry with exponential backoff, and comprehensive sync logging. Every data movement is tracked, auditable, and recoverable.
Australian Hosted
AU Data ResidencyAll data stored exclusively in Australian data centres. Fully compliant with Australian Privacy Principles (APPs) and OAIC guidelines for healthcare data. Your patient data never leaves Australian shores.
Compliance
Standards we meet
Type II Aligned
Security, availability, and confidentiality controls
Compliant
Office of the Australian Information Commissioner
13 Principles
Australian Privacy Principles framework
AA Level
Web Content Accessibility Guidelines
GCM Mode
Military-grade encryption standard
Enforced
Latest transport layer security
Data residency
Your data stays in Australia
All patient data, practice information, and application records are stored exclusively in Australian data centres. We guarantee that your data never leaves Australian jurisdiction.
Primary data centre
Secondary data centre
Security features
Defence in depth
Multi-Factor Authentication
Enforced MFA for all user accounts with TOTP and SMS-based verification options.
Role-Based Access Control
Four granular roles (Admin, Manager, Staff, Viewer) with permission isolation across tenants.
Audit Logging
Every action is logged with user, timestamp, IP address, and change details. Immutable audit trail.
PII Encryption
All personally identifiable information encrypted at rest using AES-256-GCM with per-tenant key management.
Infrastructure Security
Edge-deployed on Vercel with DDoS protection, WAF, and automatic SSL certificate management.
Incident Response
24-hour incident response SLA with automated alerting, runbook procedures, and stakeholder communication.
Ready to transform your practice?
Join 500+ practices across Australia already using HSuite to streamline applications and grow revenue.