Security

[Placeholder copy] A summary of how SpareKeep is designed. A full security questionnaire answer pack is available on request.

Data residency

Application data and documents are hosted in Australia (Sydney region).

Isolation per contract

Each operator–provider contract is a separate tenant. Access rules are enforced in the database, not just in the screens.

Sign-in

Invite-only accounts with multi-factor authentication.

Append-only ledger and audit trail

Stock movements and the audit log cannot be edited or deleted. Corrections are new, visible entries.

Documents

Private storage per contract, short-lived download links and file hashes.

Export on exit

A contract admin can export everything, including original documents.

Questions from your IT or security team? Email us.