Trust & Security
Trust isn't a feature. It's the foundation.
Auren is built for organisations that can't take risks with data, decisions or people. Here's how we protect your data, how our systems are built, how we govern AI — and where we are on the road to formal accreditation. Stated plainly, including what's still in progress.
We state our real security posture — including where accreditation is still in progress. We don't claim certifications we don't hold.
How we earn trust
Six pillars, stated plainly.
Australian data & sovereignty
Your data stays in Australia, governed under Australian rules.
- Onshore hosting
- Australian legal governance
- Sovereign, local support
- Clear data ownership
Privacy
Built around the people the data is about.
- Data minimisation
- Purpose limitation
- Consent-aware handling
- Aligned to the Australian Privacy Principles
- Access & correction
Security-first architecture
Secure because of how it's built.
- Encryption in transit & at rest
- Least-privilege access control
- Audit logging
- Tenant isolation
- Secure development lifecycle
- Continuous monitoring
Responsible AI
AI you can explain, question, and stand behind.
- Transparency
- Fairness
- Accountability
- Purpose-built, not black-box
Human-in-the-loop
Auren assists the decision. Your people make it.
- Review before action
- A human decision-maker of record
- Override at any point
- Full traceability
Vendor risk management
We hold our suppliers to the standard we set for ourselves.
- Sub-processor discipline
- Vetted infrastructure providers
- Ongoing due diligence
- Transparency on request
Accreditation status (honest)
Our real position — including what's still in progress.
We never say 'Certified' unless it is literally true. If a specific accreditation is a requirement for you, we'll share where we are in writing.
| Standard | Current status | As at |
|---|---|---|
| Australian Privacy Principles (APPs) | Aligned to | Jun 2026 |
| ISO/IEC 27001 | In progress | Jun 2026 |
| SOC 2 Type II | Planned | Jun 2026 |
| IRAP | Planned | Jun 2026 |
| Essential Eight | In progress | Jun 2026 |
Status values are indicative and under legal and security review prior to launch.
The security pack
Everything procurement needs, in one request.
- Data Processing Agreement (DPA)
- Architecture overview
- Controls summary
- Sub-processor list
- Privacy approach
- Accreditation status
Request the security pack
Tell us who you are and we'll send it through.