Privacy Act 1988 and the Australian Privacy Principles
UK GDPR for UK clients.
Security is built into everything we ship.
AI earns a place in finance only when you can see what it did and why.
- ISO 27001 certified
- GDPR compliant
- Privacy Act 1988
- No third-party contractors
01Security & Compliance
Data protection
We are an ISO 27001 certified and GDPR compliant company, so our offices and systems meet international best practice for information security management. Physical and non-physical controls protect our company and client data.
Our secure delivery centre has dedicated technical staff, and our facilities follow global security, health and safety standards. Staff are trained on security protocols, with regular sessions on current threats. We do not use third-party contractors for any work.
02Security
How we protect your data
Sensitive fields masked
Before any AI model sees them.
Self-hosted AI options
When data cannot leave your environment.
Role-based access and multi-factor authentication
Staff vetting and confidentiality agreements
Every employee trained on ISO 27001:2022 and ISO 27701:2019, with regular security awareness emails.
Audit logs on every pipeline step
Data-hosting options
To suit your requirements.
Practices aligned with the ACSC Essential Eight
03How we work
How we keep AI honest
Code does the maths, not the model
Every output is confidence-scored
A person signs off
Anything touching a ledger, a client or a lending decision.
Failures are flagged, never silent
FAQ
Frequently asked questions
Short answers to common questions.
Still have a question?
Talk to a specialist. We reply within one business day.
Ask us a questionor call 1300 873 733Are you ISO 27001 certified?
Yes. Befree is ISO 27001 certified and GDPR compliant, and BefreeConnect services are delivered under the same certified controls.
Who at BefreeConnect can access our systems?
Only named staff with role-based access, and every access is logged.
Where is our data stored?
In the hosting region agreed in your contract.
How do you handle a security incident?
We contain it, notify you, restore service and support any reporting obligations.
Compliance
Your data, handled properly
Befree is ISO 27001 certified and GDPR compliant. We handle personal information under the Privacy Act 1988 and the Australian Privacy Principles, and under UK GDPR for UK clients. Sensitive fields, such as tax file numbers, are masked before they reach any AI model. Every AI workflow keeps a person reviewing decisions that touch a ledger, a client or a lending outcome.
Next step
Talk to us about your requirements.
We'll look at the work, the systems and the risks, and tell you what we'd fix first.
- Free 30-minute assessment
- A written view within a week
- Reply within one business day