Employment records deserve bank-grade handling.
The documents people put into WorkScudo are among the most sensitive they hold: pay, superannuation, visa status, contracts, medical-adjacent leave records and correspondence about disputes. We treat them accordingly.
- Australian data residency
- AES-256 at rest
- TLS 1.3 in transit
- Role-based access
- Full audit log
Controls in place
Australian data residency
Production data is stored and processed in Australian infrastructure. Where any sub-processor operates outside Australia, it is disclosed in the Privacy Policy with the safeguards that apply.
Encryption
AES-256 encryption at rest for documents and database contents, and TLS 1.3 in transit. Document storage keys are managed separately from application credentials.
Access control
Role-based access with least privilege. Support staff cannot read the contents of a user's vault without an explicit, time-limited and logged grant from that user.
Authentication
Multi-factor authentication is available on all accounts and required for employer, professional and internal accounts. Sessions expire and devices can be revoked individually.
Audit logging
Every access, consent, share, payment event and conflict check is written to an append-only audit log with a timestamp, visible to the account holder.
Consent-gated disclosure
No identity is disclosed to a third party, including a law firm, without an affirmative in-app consent recorded against the specific recipient and purpose.
Segregation
Worker, employer, professional and internal tenancies are logically separated. An employer cannot query a worker's record, and a worker's data is never pooled into an employer's view.
Secure development
Code review, dependency scanning, secrets management and staged deployment, with independent penetration testing before general availability.
Resilience
Encrypted, geographically redundant backups within Australia, with documented recovery objectives and tested restoration.
Certification and assurance
WorkScudo is built to align with SOC 2 Trust Services Criteria and ISO/IEC 27001 control objectives, and formal certification work is underway. We publish our status honestly: alignment is not the same as certification, and we will not claim a certificate before it is issued.
The platform is designed to meet obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including the Notifiable Data Breaches scheme. Our breach response procedure covers assessment, containment, notification to affected individuals and notification to the Office of the Australian Information Commissioner within statutory timeframes.
A detailed security pack covering architecture, sub-processors, testing cadence and incident response is available to employers, professional partners and investors under NDA.
What we deliberately do not do
We do not connect to the ATO or your super fund
WorkScudo analyses the documents and statements you provide. It holds no credentials for government or fund systems, which removes an entire category of risk.
We do not sell or broker personal data
Worker data is never sold, rented or supplied to advertisers, insurers, employers or marketers. It is not a revenue line and never will be.
We do not expose worker records to employers
An employer sees its own payroll obligations. It sees a worker's content only where the worker has sent it to them.
We do not retain what we do not need
Documents you delete are removed from active systems and purged from backups on a defined cycle. Account export and deletion are available from within the app.
Security questions
Who can see my documents?
You can. WorkScudo systems process them to perform checks. No human at WorkScudo reads your vault contents without an explicit, time-limited grant from you, and every such access is logged and visible to you.
Is my data used to train AI models?
Your documents are not used to train third-party foundation models. AI features process your content to produce answers and drafts for you. See the AI Disclaimer for how the AI layer works and its limits.
What happens if there is a data breach?
We follow a documented incident response procedure. Where a breach is likely to result in serious harm, affected individuals and the Office of the Australian Information Commissioner are notified in accordance with the Notifiable Data Breaches scheme.
Can I get my data out?
Yes. You can export your documents and your reconciled record at any time from within the app, and you can delete your account.
How do I report a vulnerability?
Email hello@workscudo.com with the detail. We acknowledge reports promptly, investigate, and do not pursue good-faith security researchers who follow responsible disclosure.
Be among the first to use WorkScudo.
Join early access to track your super, organise your records and understand your employment with more confidence.