Data security

Build beautiful emails using SwiftFox’s simple drag-and-drop tool, no coding needed.

The security of your data is our number one priority

Our dedication to data sovereignty and security defines the way we help our clients achieve their goals with confidence. At SwiftFox, we are committed to delivering solutions that prioritise your trust and the protection of your information

Your data is yours

Your data is stored securely, and we will never sell yourdata or your information. All data is hosted in Australia, providing safety,security, and scalability.

State-of-the-art encryption

Your data is encrypted both in transit and at rest using advanced encryption standards.

This ensures that even in the unlikely event of unauthorised access, your information remains indecipherable to malicious actors. Our protocols meet and exceed industry standards, offering you peace of mind.

Secure data centres in Australia

Our data is hosted in secure data centres in Australia through Microsoft Azure.

These facilities provide:

Auto scalability
High resiliency and fast geo-recovery
Advanced data corruption protection

Azure’s architecture ensures 99.99% availability even in cases of infrastructure failures. All data stored in SwiftFox is geo-redundantly replicated across Azure’s primary region (Australia South-East, Melbourne) and secondary region (Australia East, Sydney) to prevent data loss in the event of a hosting failure.

Compliance with leading standards

SwiftFoxCRM adheres to stringent compliance regulations, including ISO 27001, and Australia’s only industry-legislated privacy code.

We are proud members of the Australian Data and Insights Association (ADIA). Our certification against ISO27001:2013 is reviewed annually to ensure best practices for managing risks to information security effectively.

Regular updates and penetration testing

We are constantly reviewing and updating our systems to the latest versions to protect against vulnerabilities.

Regular penetration tests and technical vulnerability assessments are conducted on our code base, with urgent priority given to resolving any identified issues.

Role-based access controls

SwiftFox operates on a principle of least privilege for information access.

Access to your data can be restricted based on roles and responsibilities within your organisation, ensuring only authorised users can view or modify sensitive information.

User Groups allow for flexible permission configurations, ensuring that team members only access the data and features necessary for their roles

Integrated user management

SwiftFox can integrate with Microsoft Entra ID (formerly Azure Active Directory) or Google Workspace for user access management.

Your team won’t need new passwords to access SwiftFox - they will be able to log in with their normal Google or Microsoft credentials!

Secure data transfers

SwiftFox requires secure data transfers for all client data, both incoming and outgoing.

We utilise Microsoft SharePoint for secure file sharing, ensuring that data is only accessible to authorised individuals. Transferring data via email or USB is strictly prohibited under our data transfer policies.

SwiftFox is hosted as a React-based single-page application (SPA), securely interacting with a back end composed of SQL Server and the Elastic Stack. Each client’s data is isolated in its own database with unique credentials, ensuring no data is shared or accessed by other organisations.

SwiftFox’s networks are isolated from the public internet via virtual private networks. The only public ingress is through the load balancer controlling traffic to the web servers. These ingress points are strictly monitored and firewalled. Advanced monitoring tools detect and respond to suspicious activities in real-time.

Your data is backed up regularly, ensuring it remains safe and recoverable even in the event of unforeseen circumstances. Our disaster recovery plans are tested and refined to guarantee business continuity. We are committed to delivering 99.5% uptime for our applications, ensuring no loss availability from 7:00 am to 9:00 pm in the Australian and New Zealand markets.

Your trust, our commitment

We take data security extremely seriously, keeping our clients’ data secure at the heart of everything we do.

For further information on our security measures or to discuss specific requirements, please contact our team.