National Crime Check use the highest level of security for internet traffic, with all communications secured using HTTPS. Our certificates use 2048-bit keys with SHA256 signatures. Our infrastructure supports TLS 1.2 connections with Forward Secrecy, as well has preloaded Strict-Transport-Security.
All data which is held by National Crime Check is stored Encrypted-At-Rest. This includes database records, uploaded images, backups, and all other possible locations where your data is stored. Storage uses high-grade encryption such as AES-256.
All servers used by National Crime Check are protected by firewalls and protective routing infrastructure including WAF products. Infrastructure is located within ISO 27001 and SOC2 certified facilities. We also also conduct regular third-party automated and manual vulnerability scans and penetration tests.
All data is stored within Australia in secure facilities which are multiple-replicated across several datacentres. Facilities are have redudant power, cooling, and internet conectivity. Futhermore, the facilities have been chosen to be located on discreet parts of the electricity grid as well as discreet techtonic places, where applicable. Facilities only support secure and restricted physical access.
Want to know more? We have a full security information pack available. Access to this requires the signing of a Non-Disclosure Agreement. If you would like access to this security information pack, please contact our business team.