Trust Centre
Security & Compliance
Your Trust is Our Priority
MEDD is committed to maintaining the highest standards of security, privacy, and compliance. We protect your data with enterprise-grade security measures and transparent practices.
Data Encryption
All data encrypted at rest and in transit using AES-256 and TLS 1.3
Continuous Monitoring
24/7 security monitoring with automated threat detection and response
Access Controls
Role-based access with multi-factor authentication and audit logging
Compliance & Assurance
Our current assurance position, stated without inherited-certification overstatement.
Privacy Act 1988 (Cth)
Personal information handled in line with the Australian Privacy Principles
Notifiable Data Breaches
Documented assessment and notification process under the NDB scheme
Data Processing Agreement
Contractual processing terms, transfer schedule and subprocessor list
Documented control suite
Security, privacy, continuity and vendor policies, reviewed annually
Certification status
Connect The Docs Pty Ltd does not currently hold ISO/IEC 27001 certification or a SOC 2 Type II report. Assessing ISO/IEC 27001 alignment and prioritising controls according to customer and business risk is part of our assurance roadmap. Enterprise customers may request a questionnaire response, security briefing or controlled evidence review by contacting security@medd.com.au.
Infrastructure certifications held by our providers
The providers below maintain their own independent certifications and audit reports, such as ISO/IEC 27001 and SOC 2, covering the infrastructure and services they operate. Reports are available from each provider under their own terms.
Vultr
Hosting and infrastructure
Amazon Web Services
Infrastructure, storage, backup and delivery components
Vercel
Application hosting and delivery
Supabase
Authentication, database, storage and Edge Functions
These certifications cover each provider's own stated scope. They do not extend certification to Connect The Docs Pty Ltd, MEDD applications, configurations, personnel or processing practices.
Security Documentation
Access our complete security and compliance documentation
Security Overview
Comprehensive overview of our security infrastructure and practices
Data Privacy Policy
How we collect, use, and protect your personal information
Data Processing Agreement
Terms governing data processing activities
Certifications & Security Assurance
Our compliance certifications and security assurance measures
Third-Party Risk Management Policy
How we assess and manage third-party vendor risks
Vendor Register
Complete list of our vetted technology vendors and partners
Authorized access required