Home / Trust & Compliance
Trust & Compliance

Independently examined. Australian based.

Your operational data is the backbone of your business, and we treat it that way. We've completed a SOC 2® Type 2 examination and hold a current report. This page sets out how we approach security and data protection, and what the report covers.

AICPA SOC for Service Organizations SOC 2 logo

Hub Systems holds a current SOC 2 Type 2 report

An independent auditor examined the controls we use to protect customer data and issued our SOC 2 Type 2 report. If you need it for a procurement or vendor security review, get in touch and we'll provide it.

Our approach

How we protect your data.

The areas our security and compliance program covers.

Australian-based & accountable

Our team and support are based in NSW, Australia, never outsourced or sent offshore. There's a clear, local line of accountability for your data and your service.

Privacy

We collect what we need to run your service and nothing more. Our Privacy Policy sets out what we hold and how we use it.

Access controls

Access to systems and customer data follows least-privilege principles, with role-based permissions and logging so we know who can see what, and why.

Reliability & backups

Freight doesn't stop, so neither can the system. We run regular backups and monitor availability to keep your operation running.

SOC 2 Type 2 Current

Our SOC 2 Type 2 report covers the way we manage security and customer data. Ask us for a copy if you need it.

Responsible disclosure

Spotted a security issue? We want to hear about it. Contact our team and we'll work with you to investigate and resolve it.

The report

We hold a current SOC 2 Type 2 report.

A SOC 2 examination is an independent review of the controls a software provider has in place to protect customer data. Ours is a Type 2 report. That means the controls were tested over a period of time, not just checked for how they were designed on paper. It covers these trust services criteria:

  • Security, protecting systems and data against unauthorised access
  • Availability, keeping the system up and your operation running
  • Confidentiality, safeguarding the data you trust us with
  • Processing integrity, making sure the system does what it should, reliably
Need the report?

Talk to our team.

If you're running a vendor security review or procurement process, ask us for the report and we'll take you through it.

Get in touch
Get in touch

Questions about security?

Talk to the team that builds and supports Hub. We'll give you straight answers about how we handle your data.