Security & Data Protection
Enterprise-grade security for your peace of mind
At TradieTough, security isn't an afterthought—it's built into everything we do. We understand that our customers trust us with sensitive business information, and we take that responsibility seriously.
Our platform implements multiple layers of security to protect your data, prevent unauthorized access, and ensure business continuity.
Security Measures
- All data transmitted via HTTPS/SSL encryption (TLS 1.3)
- End-to-end encryption for sensitive information
- Encrypted storage for documents and files
- Secure password hashing (industry-standard algorithms)
- Enterprise-grade cloud hosting infrastructure
- Multi-layer security architecture
- DDoS protection and firewall security
- Regular security patches and updates
- Redundant backup systems
- Role-based access control (RBAC)
- Row-level security - users only see their own data
- Multi-factor authentication available
- Session management and automatic timeout
- Admin access logged and monitored
- Regular automated backups
- Data segregation between customers
- Secure file upload validation
- Protection against SQL injection and XSS attacks
- CSRF protection on all forms
Compliance & Standards
| Standard / Framework | Status |
|---|---|
| Australian Privacy Principles (APPs) | Compliant |
| HTTPS/SSL Encryption | Active |
| OWASP Security Standards | Following |
| PCI DSS (Payment Processing) | Via Certified Processors |
Platform: TradieTough is hosted on the base44 enterprise platform, which provides:
- Enterprise-grade cloud infrastructure
- 99.9% uptime SLA
- Automated scaling and load balancing
- Regular security audits and monitoring
- 24/7 infrastructure monitoring
Note for Enterprise Customers: Detailed infrastructure documentation, including data center locations, certifications, and technical specifications are available upon request for qualified enterprise and government customers.
In the unlikely event of a security incident:
- We have documented incident response procedures
- Affected customers will be notified promptly
- We work with security experts to contain and remediate issues
- Post-incident analysis and preventive measures are implemented
Report a Security Concern: If you discover a security vulnerability, please report it to security@tradietough.au. We take all reports seriously and respond promptly.
Enterprise & Government Customers
Need detailed security documentation for procurement, compliance, or tender requirements?
We can provide:
- Infrastructure security documentation
- Compliance certificates and audit reports
- Data Processing Agreements (DPAs)
- Data sovereignty and residency information
- Security questionnaire responses