Security & Trust
Your volunteers trust you with their data. We take that responsibility seriously. Learn about the measures we take to keep your data safe and secure.
How We Protect Your Data
Data Encryption
All data is encrypted in transit using TLS 1.3.
Secure Infrastructure
Hosted on enterprise-grade cloud infrastructure with automated backups and 99.9%+ uptime.
Access Controls
Role-based access control (RBAC) ensures team members only access data relevant to their responsibilities.
Regular Audits
We conduct regular security assessments to identify and address vulnerabilities.
Privacy by Design
We build our platform with privacy frameworks in mind, helping your organisation meet its data protection obligations.
We design our systems with EU General Data Protection Regulation principles in mind.
Built to support New Zealand Privacy Act requirements.
Designed to align with Australian Privacy Principles (APPs).
Our Data Practices
Data Minimisation
We only collect the data necessary to provide our services. We don't sell your data or use it for advertising purposes.
Data Retention
You control your data. We retain data only as long as needed to provide services, and you can request deletion at any time.
Subprocessors
We carefully vet all third-party services that process your data. View our complete list of subprocessors.
Responsible Disclosure
We value the work of security researchers who help keep our platform and users safe. If you've discovered a security vulnerability in our systems, we encourage you to report it to us responsibly.
How to Report
Please email security issues to security@purposetech.io. Include as much detail as possible: steps to reproduce, potential impact, and any supporting evidence.
Our Commitment
- We will acknowledge your report within 3 business days
- We will keep you informed of our progress
- We will not take legal action against good-faith reporters
- We ask that you give us reasonable time to fix issues before any public disclosure
Questions about security?
Our team is happy to discuss our security practices and answer any questions about how we protect your data.