Trust centre
Security, quality and operational standards.
Select a standard to open its evidence page. Details such as certificate numbers, certification bodies and validity are published there once verified.
Information security
Managing and testing the controls that protect information.
Government & defence
Australian government and defence security requirements.
Privacy & payments
Personal information and payment card data.
Service, quality & continuity
How services are run, improved and kept running.
AI management
Governing how AI is developed, provided and used.
Environment & safety
Environmental responsibility and workplace safety.
How we protect your data and systems.
Least privilege
Access to customer systems is role-based, time-bound where possible, and reviewed.
Strong identity
Multi-factor authentication and single sign-on across the systems we use to deliver.
Encryption
Data encrypted in transit and at rest across the platforms we build and operate.
Secure engineering
Code review, dependency management, secrets management and security testing in delivery.
Monitoring & response
Logging, alerting and a defined incident-response process with customer notification.
Supplier assurance
Vendors and sub-processors assessed before use and reviewed over time.
Reporting a vulnerability
If you believe you've found a security issue in a Sarja website or service, email [email protected] with “Security report” in the subject. Please give us reasonable time to investigate before disclosing it publicly.
Documentation requests
Certificates, reports and security questionnaires can be requested through your Sarja contact or by email. Some documents are provided under a non-disclosure agreement. See also why resilience matters.
Security questions before you engage?
Talk to us about your requirements, frameworks and assurance needs.