Keeping your data safe

Blinx is certified to SMB1001 Gold through CyberCert, so the controls we assess in your business are ones we maintain in our own.

We don't sell products, remediation or managed services, so your assessment data is used only to deliver your assessment and reporting.

Our own security policies, aligned to SMB1001, govern how we handle client information from engagement to completion.

We prioritise Australian-hosted platforms wherever possible. Where a supplier stores data outside Australia, we tell you before your engagement begins.

Information is protected using industry-standard encryption in transit and at rest across the platforms we use.

Client information is held in secure, access-controlled systems with backups to protect against loss.

Access to client information is limited to the people who need it to deliver your engagement.

MFA is enforced on all Blinx accounts and systems that hold client information.

Where we need access to your environment for scanning, we use the minimum permissions required and remove access when the engagement ends.

Every platform we use is reviewed for security, data handling and hosting location before it is approved.

We maintain a register of the suppliers that process client information, and can share it with you on request.

Suppliers are reviewed regularly, and changes that affect your data are communicated to you.

We handle personal information in line with the Australian Privacy Principles, as set out in our Privacy Policy.

We collect and keep only the information needed to deliver your assessment and reporting.

Client data is kept only as long as needed for your engagement and our obligations, then securely deleted. You can request access, correction or deletion at any time.