Built for data you are accountable for
You hold obligations to your brokers, their clients and, if you are a licensee, to ASIC. This is how the platform is built so that using it does not add to your risk.
Isolation
Every row in the platform carries the business it belongs to, and access is checked by Postgres row level security under the signed in user on every request.
- Isolation is enforced by the database rather than by application code. A query that omits its filter returns nothing.
- Brokers are scoped further still. A broker reads only the rows resolving to them.
- Our support staff are not members of your account and cannot read your data by default.
- A generated test suite proves the boundary for every table on every change.
Access and authentication
Sign in, two factor authentication, invitations and session handling are managed centrally rather than per module.
- Two factor authentication is required for account owners, administrators and all AggregateIQ staff, and can be required of everyone at your option.
- You control who may join your account, by email address or by domain.
- Removing access takes effect on the next request. Permissions are never cached.
- Brokers reach the portal only by invitation, bound to their own record.
Support access
We cannot quietly look at your data. Viewing an account requires an explicit, time boxed session with a stated reason.
- Every support session is recorded and visible to you in your own audit view.
- Every cross account read by our staff is logged.
- Our operator tools run in a separate application with mandatory two factor authentication.
- Master database credentials are not available to that application.
Data handling
The platform holds broker details, licence numbers and client names inside commission data. It is classified and handled accordingly.
- Encrypted in transit and at rest, with sensitive fields encrypted again at the application layer.
- Hosted in Sydney, with backups kept in region and no global replication.
- Point in time recovery, with restores rehearsed quarterly rather than assumed.
- Personal data is never written to logs or to our caching layer.
Your data is yours
Portability and deletion are built in rather than negotiated later.
- A complete export of your account data on request, in a portable format.
- Verified deletion when you leave, including stored files.
- You remain the controller of your brokers personal information. We act as processor.
- A maintained list of the services we rely on, with notice before any addition.
Assurance
Security work that is checked rather than described.
- Automated isolation, schema and dependency checks on every change.
- Independent penetration testing, with findings tracked to closure.
- Rate limiting and abuse protection on every public endpoint.
- A published disclosure address for reporting a vulnerability.
Due diligence
Compliance reviews are welcome and expected. Write to security@aggregateiq.com.au for our current documentation, the sub processor list, or to report a vulnerability.
Book a walkthrough