Security Statement

Last updated: June 2025

Our Security Commitment

DSX takes the security of your data seriously. As a platform handling sensitive information for disability service providers, participants, and support workers, we maintain comprehensive security measures to protect your data.

Security Measures

  • 256-bit SSL encryption for all data transmission
  • AES-256 encryption for stored sensitive data
  • Regular security patches and updates
  • Web Application Firewall (WAF) protection
  • DDoS protection and monitoring
  • Multi-factor authentication available
  • Role-based access control (RBAC)
  • Session timeout and account lockout policies
  • Regular access reviews and audits

Data Protection

  • Data stored in Australian data centers
  • Daily encrypted backups
  • Disaster recovery procedures
  • Regular backup testing
  • 24/7 security monitoring
  • Intrusion detection systems
  • Incident response procedures
  • Regular security audits

Compliance

  • Australian Privacy Principles (APPs)
  • NDIS Practice Standards where applicable
  • ISO 27001 security principles
  • OWASP security guidelines

Your Security Responsibilities

  • Use strong, unique passwords
  • Enable two-factor authentication
  • Keep your login credentials confidential
  • Report suspicious activity immediately
  • Keep your browser and devices updated

Vulnerability Disclosure

Found a security issue? We appreciate responsible disclosure:

Email: security@dsx.org.au

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact

We commit to acknowledging reports within 48 hours and working with you to resolve issues promptly.