// Security

Your Entity Data.
Protected by Design.

Your business identity data is stored in Australia (Supabase Sydney). API processing runs in Singapore — the nearest available region to AU and NZ. We are committed to full AU data residency as infrastructure options expand.

// Infrastructure

Where Your Data Lives

AU data storage · Singapore API · AU/NZ web delivery

ap-southeast-2✓ verified
Supabase

Database — Sydney, Australia

All entity data, vault records, audit results, and user accounts are stored in Supabase Sydney (ap-southeast-2). Your business identity data resides in Australia.

asia-southeast1~ partial
Railway

API Server — Singapore

The Osapher API server runs on Railway in Singapore — the closest available region to Australia and New Zealand. API requests are processed in Singapore before data is written to the Sydney database.

AU/NZ Edge✓ verified
Vercel

Web App — Global CDN

The Osapher web application is served via Vercel's global CDN. Australian and New Zealand users are served from AU/NZ edge nodes. No user data is stored on Vercel infrastructure.

Data residency note: Your business identity data is stored in Australia (Supabase Sydney). API processing runs in Singapore — the nearest available region to AU and NZ. We are committed to full AU data residency as infrastructure options expand.

Cryptography

SHA-256 Signed Entity Records

Every verified entity record receives a Osapher verification signature binding the business identity, registry source, and timestamp into a secure verification hash.

  • Osapher signature on every record
  • Timestamp + registry source hash included
  • Suitable for regulatory audit documentation
Registry

Live Government API — No Caching

All ABR and NZBN queries are made directly against live government APIs in real time. Osapher never stores or serves scraped, cached, or third-party registry data.

  • Live ABR API (abr.business.gov.au)
  • Live NZBN API (api.business.govt.nz)
  • Read-only registry access — no writes
// Data Practices

What We Do With Your Data

Supabase Sydney (ap-southeast-2) — entity data storage
Vercel AU/NZ edge nodes — web app delivery
~
Railway Singapore (asia-southeast1) — API processing
All data encrypted in transit (TLS)
All data encrypted at rest (AES-256)
No business data sold to third parties — ever
No AI model training on your entity data
Sessions use Supabase Auth with Row Level Security (RLS)

Read Our Privacy Policy

Full details on data handling, retention, and your rights under Australian privacy law.

View Privacy PolicyContact Us