Trust at Conpago

The best in retirement and care trust Conpago to keep their data safe.

View the ISO 27001 Certificate

Loved by thousands of users and operators in Australian care and retirement

BENEFITS

How Conpago earns trust

Conpago covers these essential needs, so your teams can succeed with peace of mind.

ISO 27001 Certified

Conpago's information security management system is certified to ISO 27001, independently validating our commitment to protecting and managing your sensitive data.

Product

Conpago is designed so teams can successfully use it with confidence. Security is built in to how the product is planned, built and shipped.

Data

We keep your data protected and recoverable, with controls in place to guard against loss or unauthorised access.

Monitoring

We watch our systems around the clock to keep performance and security on track. Alerts and regular testing helps us catach problems early.

Corporate

Security is part of how we run, not an afterthought. Access is restricted, suppliers are vetted and our staff know how to handle sensitive data.

Policy

Our governance framework ensures rapid response and remediation, reducing downtime and strengthening trust across all operations.

Legal

We maintain clear, transparent policies and trusted third-party partnerships to ensure full compliance and accountability at every level.

CONTROLS

Security and Compliance you can trust

The Conpago platform is built with layered safeguards that protect your data, maintain uptime and support compliance across every stage of operation.

Product Security

Protecting every user interaction.

Our identity and access systems keep every account secure with verified logins, detailed activity tracking, and strong session protection.

SSO Support

Supports single sign-on so identity is managed by your existing identity provider, and access follows your organisation's own controls.

Security events, such as sign-ins and permission changes, are logged to support investigation, oversight, and compliance reporting.

Audit Logging

Data Security

Application data is store in managed environments with restricted access and regular backups, seperating production and internal systems.

MFA Capabilities

Leverages native multi-factor authentication offered by compatible identity providers, enforcing existing protections when accessing the platform.

Data Security

Keeping your data protected.

Conpago's infrastructure is designed with layers of protection to help ensure your data is secure while transmitted, stored or processed.

Tokenised Sensitive Info

Uses tokenised information for sensitive information, meaning raw payment details never pass through or are stored in the platform.

Multi Data Sovereign Backups

Data is backed up across regions, on-shore in Australia, supporting recovery from corruption or hardware failure.

Encryption-at-rest

Primary data stores and backups are encrypted at rest using industry standard encryption to protect again unauthorised access to storage media.

Encryption-in-transit

Data in transit between customers, services and internal components is protected to prevent interception or tampering.

Continuous Monitoring

Monitoring your system.

Conpago’s infrastructure is protected by layered access control, centralised monitoring, and auditable change to safeguard the system.

Access Monitoring

With layers of access controls, restricting unneccessary handling of data.

Logging and Monitoring

Centralised logging and infrastructure monitoring provide visibility into system health and potential security incidents.

Change Monitoring Policy

Production changes follow a documented change process with tracking and review, so modifications are visible and auditable.

Corporate Security

Operating securely.

We treat security as a responsibility of everyone in their day-to-day, with controlled staff access, vetted suppliers and ongoing training.

Asset and Supplier Registers

Key information assets and suppliers are recorded and reviewed so we understand dependencies and risks.

Roles-based Access Controls

Staff access to systems and data is based on role, following least privilege principles with periodic access review.

Penetration Testing

Regular penetration testing helps identify weaknesses so they can be assessed and rectified.

Software Development Lifecycle

Security reviews, code reviews and automated testing are built in to the development lifecycle before changes reach production.

Security Policy Stack

Governing risk clearly.

Documented policies for assessment, response, recovery and change guide how we manage risk and review remediations.

Vulnerability Management

Identified vulnverabilities are tracked and assessed for impact, and remeditated swiftly.

Risk Assessment Policy

Material changes and new initatives are subject to risk assessment to idetnify controls and mitigations.

Incident Response Plan

A documented incident response plan sets out role and communication paths for handling security events.

Disaster Recovery Plan

Disaster procedures define how our core services and data are restore following a major outage or loss event.

Legal Protections

Contractual assurance.

Our privacy policy, data terms, and subprocessors give legal and compliance teams a transparent view of how and who is involved in handling data.

Our Privacy Policy outlines how we collect, use, store, and share important data, and the rights available to individuals.

Standard Terms (upon request)

Standard contractual terms are available upon request and include provisions on secuirty, data protection, and customer responsibilities.

Subprocessors

Conpago employs Google, Twilio, and SendGrid services for our business processes, providing core infrastructure, communications, and security controls.

View our subprocessors' trust centres below:
‍

FAQ

Where is Conapgo's data stored?

Conpago's production data is hosted on-shore in Australia, with multiple backups in data centres located across NSW and VIC.

When was Conpago ISO 27001 Certified?

Conpago has been certified to ISO/IEC 27001:2022 for its information security management system since July, 2024.

Who is behind Conpago?

Conpago is Australian founded, owned, and operated. Our leadership team has hands on experience and research in the retirement and care sector.

Get in touch

Thank you!