How we protect care data, and what we don't claim yet.
Care records are some of the most sensitive data there is. This page says plainly what KareShift does to protect them today, where it is stored, who else touches it, and which certifications we do not have.
Where your data lives
All customer data is stored in Amazon Web Services in Sydney, Australia (ap-southeast-2), for every customer, including organisations in New Zealand, the United Kingdom and Canada. We do not yet offer regional hosting. The Privacy Policy explains the safeguards we use for each country's transfers.
How it is protected
Encrypted in transit and at rest
Every connection uses HTTPS with strict transport security. The database storage is encrypted, and workers' tax identifiers and Xero connection tokens are encrypted again with a dedicated key held in AWS KMS.
Separate organisations
Each organisation's data is isolated from every other. Automated tests check that one organisation cannot read or change another's records.
Sign-in you control
Roles for owners, admins, coordinators and support workers decide who sees what. Two-factor authentication with an authenticator app is available, with trusted devices, and repeated failed sign-ins lock an account. Passwords are stored hashed, never in plain text.
An audit trail
Security events such as sign-ins, two-factor changes and access changes are recorded and visible to owners and admins. Care records keep an amendment trail: changes are added, not silently overwritten.
A firewall at the front door
The website and application sit behind AWS WAF with managed rule sets and per-IP rate limiting, and the application applies its own rate limits.
Backups
The database is backed up automatically and backups are kept for 14 days. Deletion protection is switched on for the database.
What we do not have yet
Buyers in care should not have to guess. These are the things people ask for that we cannot offer today.
| Item | Status |
|---|---|
| SOC 2 or ISO 27001 certification | Not yet. We follow security good practice but have not been audited. |
| Regional hosting (UK, Canada, New Zealand) | Not offered. All data is in Sydney. |
| Uptime guarantee (SLA) | None. We are a young product and make no uptime promise. |
| Public status page | Not yet. |
| NHS DSPT / DSCR accreditation (UK) | Not held. |
| Automated deletion of a person's data on request | Handled manually on request by email. |
Who else handles data
These are the services that process data on our behalf. The list matches our Privacy Policy; a Data Processing Agreement is available on request.
| Service | Purpose | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, file storage, email delivery (SES) | Sydney, Australia |
| Stripe | Subscription payments (we never see full card numbers) | Stripe's global network |
| OpenAI | Optional AI progress summaries, off by default, turned on by an organisation owner | United States |
| Website analytics and ad measurement, only after you accept cookies | Google's global network | |
| Xero | Payroll sync, only when you connect your own Xero account (AU, NZ, UK) | Xero's network |
Questions about security or privacy?
Email privacy@kareshift.com for privacy, data-processing and security questions, or hello@kareshift.com for anything else. We reply by email.
Start Free Trial