Security at RefChecks
How we protect your candidates' data and yours.
ISO 27001
Working towards ISO 27001
Our security programme is built on ISO 27001 and monitored continuously with Vanta. Our security policies are approved and in force.
You can see our live control status and request security documents in our Trust Center.
How we protect data
The essentials
Hosted in Australia
Our database, file storage and application run in Sydney. Background check processing also runs on Australian servers.
Encrypted throughout
Data is encrypted at rest with AES-256 and in transit with TLS.
Two-factor sign-in, always on
Every client and staff account must use two-factor sign-in to reach the dashboard. There is no opt-out.
Access kept tight
Each organisation only ever sees its own data, enforced in the database. Staff access is role-based and reviewed every quarter.
The full detail is on our Data Security page.
Privacy
Your data, used only for the check
Candidates consent before any check starts, and we collect only what each check needs. We follow the Australian Privacy Principles.
Read our Privacy Policy, including the service providers we use, and our GDPR page.
Report an issue
Found a security problem?
Email security@refchecks.co. We reply within 48 hours.
To raise a concern in confidence, use our report a concern form.
Ready to Streamline Your Background Checks?
Start screening in minutes - free plan available, no credit card required.