DIGI CLIP is hosted on Microsoft Azure, with encryption in transit and at rest, multi-factor authentication on every login, role-based access, encrypted automated backups and documented incident response and business continuity plans.
Security & Data Protection at DIGI CLIP
Your inspection records, incident reports and corrective actions are compliance evidence. We treat them that way.
This page explains how DIGI CLIP protects your data across web and mobile, what we look after and what we ask our customers to look after too.
- Hosted on Microsoft Azure
- Encryption in transit (HTTPS/TLS) and at rest
- Multi-factor authentication on every login
- Role-based access with individual named user accounts
- Regular automated backups, encrypted
- Documented incident response and business continuity plans
Platform Security
DIGI CLIP runs on Microsoft Azure cloud infrastructure, with technical controls designed to protect your data on desktop and mobile.
- Encryption in transit using HTTPS/TLS
- Encryption at rest within Azure infrastructure
- Authenticated API access with session and token controls
- Mobile apps that run inside the iOS and Android app sandboxes
- Code-signed mobile apps with platform-level security protections
Access Control and Authentication
Access is controlled so that only authorised users can see the information and features relevant to their role.
Multi-Factor Authentication
Every login to the DIGI CLIP cloud software is protected by a one-time passcode. Passcode attempts are limited, and repeated incorrect codes trigger a temporary lockout.
Role-Based Access
User permissions are managed through role-based access, including Admin, Manager and App User levels.
Individual Named Accounts
DIGI CLIP is designed for one named login per person. Individual accounts are what make multi-factor authentication, accountability and a clear record of who did what possible, so we don't support shared or generic logins.
Credentials and tokens are handled and stored using platform security features.
Data Storage and Backups
Your data is hosted within Microsoft Azure cloud infrastructure. Depending on service configuration and third-party service arrangements, data may be processed or stored in Australia or other supported regions.
- Data stored within Microsoft Azure
- Regular automated backups of key systems
- Backup retention covering both short-term recovery and longer-term storage
- Backup data encrypted in line with Azure best practice
Keep your own copies too. Our backups are there to keep DIGI CLIP running reliably. You should also keep your own exports and retention processes in line with your compliance obligations and business continuity plans. Reports can be exported to PDF and Excel.
System Maintenance and Monitoring
- Regular operating system and platform patching
- Ongoing application and infrastructure improvements
- Monitoring of system performance and availability
Notable security and platform changes are listed on our product updates page.
Infrastructure and Hosting
| Area | Our Approach | What It Means for You |
|---|---|---|
| Cloud hosting | Hosted on Microsoft Azure | Stable, resilient infrastructure that can grow with your use |
| Administrative access | Restricted and protected with multi-factor authentication | Fewer people who can change systems, and stronger protection on those who can |
| Third-party providers | Trusted providers for infrastructure, messaging and payments, including Stripe for payment processing | Payments are processed by a specialist payment provider |
Incident Response and Business Continuity
We maintain documented plans for when things go wrong, and review them as our platform and providers change:
- Incident Response Plan
- Data Breach Response Policy
- Business Continuity Plan
- Disaster Recovery Plan
If a data breach affects your information, we'll notify you in line with our Data Breach Response Policy and our legal obligations.
Shared Responsibilities
Security works best as a partnership. As a DIGI CLIP customer, you're responsible for:
- Giving each person their own named login and removing access when people leave
- Checking the accuracy and completeness of the data your team enters
- Keeping your own exports, backups and retention processes in line with your business and regulatory needs
- Complying with the laws and regulations that apply to you
Our Software Service Agreement and Privacy Policy set out data ownership, responsibilities and how personal information is handled. You'll find both on our legal information page.
Security is an ongoing process, and we keep reviewing our systems, processes and controls. While we put appropriate protections in place, no system can be made completely secure.
Questions and Reporting a Concern
If you have a question about security, need information for a supplier or security questionnaire, or think you've found a security issue, email our Privacy Officer at security@digiclip.io.
Frequently Asked Questions About DIGI CLIP Security
Is DIGI CLIP secure?
DIGI CLIP is hosted on Microsoft Azure and uses encryption in transit and at rest, multi-factor authentication on every login, role-based access and encrypted automated backups. No system can be made completely secure, but these controls are designed to protect your data and keep the platform reliable.
Where is my data stored?
Data is hosted within Microsoft Azure cloud infrastructure. Depending on service configuration and third-party service arrangements, it may be processed or stored in Australia or other supported regions.
Does DIGI CLIP back up my data?
Yes. Key systems are backed up automatically and regularly, and backup data is encrypted. We also recommend keeping your own exports and retention processes in line with your compliance obligations.
Can multi-factor authentication be turned off?
No. Multi-factor authentication is required on every login to protect your account and your records. Each person needs their own named login, with their own email for one-time passcodes.
Can my team share a login?
No. DIGI CLIP is designed for individual named logins. Shared logins undermine multi-factor authentication and make it impossible to show who completed, changed or closed out a record.
Who owns the data entered into DIGI CLIP?
Customers retain ownership of their data, as set out in our Software Service Agreement and Privacy Policy.
How do I report a security concern?
Email our Privacy Officer at security@digiclip.io.
Records You Can Rely On
Inspections, corrective actions and close-out evidence, stored securely and ready when someone asks for them.
Free 14-day trial. No credit card required.
About DIGI CLIP
DIGI CLIP is an Australian-built mobile checklist, forms and inspection platform, developed by Safety Tracker Pty Ltd. Inspections. Actions. Evidence. About us.