Your safety data is handled with care
Workplace incident and hazard records are sensitive. Here is exactly how we store, protect, and handle your data.
Stored in Australia
All data is stored in Australia using Supabase infrastructure. Your data does not leave the country.
Encrypted in transit and at rest
All data is encrypted using TLS in transit. Data at rest is encrypted using AES-256, according to Supabase platform documentation.
You own your data
Your data belongs to your organisation. We store it on your behalf. You can request an export or delete your account at any time by contacting us at support@hses.app.
How we store your data
HSES Online is built on Supabase, a hosted database and authentication platform. Supabase uses PostgreSQL as its database engine. All data is stored on Supabase infrastructure located in Australia.
Authentication is handled by Supabase Auth. User sessions are managed using secure, server-side session tokens. The platform uses row-level security policies enforced at the database layer to ensure each organisation can only access its own data.
Data backups are managed by Supabase infrastructure according to their service tier. We do not make specific claims about backup frequency or point-in-time recovery beyond what Supabase documents for the service tier in use.
Who can see your data
Only members of your organisation who you have invited can access your data. Role-based access controls limit what each user can see and do within the platform.
We do not sell your data. We do not share it with third parties. We do not use your incident records, hazard reports, or any other safety data for advertising or analysis.
The HSES Online team can access your data only when required to provide technical support, and only with your knowledge.
Security summary
Data sovereignty
All data stored in Australia on Supabase infrastructure
Encryption in transit
TLS encryption on all connections between your browser and our servers
Encryption at rest
AES-256 encryption at rest, according to Supabase platform documentation
Organisation isolation
Row-level security enforced at the database layer. Your data is only accessible to members of your organisation
No data selling
Your data is never sold or shared with third parties for any purpose
Data portability
Request your data or delete your account at any time by contacting us
Questions about how we handle your data? Email us at support@hses.app and we will answer them directly.