Data Security
Last updated: August 2026 · SAFERADIO PTY LTD (ABN 97 692 443 735)
This page describes how we look after customer data today. It is not a certification. SafeRadio does not currently hold SOC 2 or ISO 27001. We designed the platform on hosted services that do, and we will answer a security questionnaire as part of an enterprise agreement.
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). See our Privacy Policy for collection and rights.
How we protect it
- HTTPS/TLS in transit. Encryption at rest in our database host’s managed environment.
- Supabase Auth for sign-in. Passwords are hashed by the host; we verify users server-side rather than trusting a client session alone.
- Row Level Security and company-scoped checks so one organisation cannot read another’s data.
- Automated backups and point-in-time recovery provided by the database host.
- Voice recordings are not stored. Audio is sent to speech-to-text for that session, then discarded. We keep the transcript and the score.
What we store
- Account details: name, email, company, role or call sign where provided.
- Operation content you create: channels, example calls, glossaries, and related training resources.
- Training results: transcripts, scores, pass/fail, and session metadata for the people in your organisation.
- Sales enquiries from this website: name, role, company, phone, and message, sent to info@saferad.io.
Where it lives
Application data is stored in Supabase’s managed cloud. The web app is hosted on Vercel. Speech and AI processing, and email delivery, run on the providers listed below and may be outside Australia. If you need a specific residency, raise it when you talk to us — we will say what we can and cannot do rather than over-promise.
Who we use
A short vendor list. Their certifications are theirs, not ours.
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage, backups | Managed cloud — region on request |
| Vercel | Hosts the SafeRadio web application | United States (edge network) |
| Microsoft Azure Speech | Speech-to-text and spoken prompts in training | Microsoft cloud — configured region |
| Anthropic | Scores training sessions and dispatcher replies | United States |
| Resend | Transactional email and sales enquiries to info@saferad.io | United States |
Supabase publishes its own security posture, including SOC 2 Type II. That attestation covers the host, not SafeRadio as an organisation.
Who can see it
People you appoint as admins can see their company’s content and training results (unless a trainee has chosen to appear anonymously). SafeRadio operators may access systems to provide support, fix issues, and keep the service running. We do not sell personal information.
How long we keep it
We keep account and training records while you use the service. If you ask us to delete an account, we delete or anonymise personal information within 90 days, unless the law requires us to keep it. Detail is in the Privacy Policy.
Incidents and questions
Report a security issue or ask for a questionnaire at info@saferad.io, or use the contact form. We are a small team; every note comes to us.