Why Trust Us
At UNPLEXi, we take privacy and security seriously. As clinicians, parents, and carers we’ve spent decades inside the system. We know what’s at stake, and we’re committed to doing the right thing.
UNPLEXi upholds transparent, ethical and secure data practices across every part of the platform. Our approach is guided by recognised international and Australian security frameworks, including ISO/IEC 27001 and the Australian Cyber Security Centre (ACSC) Essential Eight Maturity Model. We apply a risk-based approach to information security, with ongoing monitoring, review, and improvement of controls to ensure our systems remain secure as threats evolve.
We’re open about how data is collected, used and protected, and we follow strict privacy and security standards to keep every profile safe.
Secure Access & User Permissions
Our systems are engineered to protect sensitive information while giving teams the clarity they need to make safe, informed decisions. UNPLEXi’s access control and authentication practices are in compliance with the principles of ISO/IEC 27001 and the ACSC Essential Eight. We ensure information is accessed only by authorised users and handled in line with recognised international information security standards and upholds identity protection.
User-Oriented Access Control: Each user can only view and interact with their own information. Our role-based access control system makes sure no one can access anything they shouldn’t.
Email Account Identification and Verification: When you sign up, we send a unique confirmation link to your email to verify it’s really you – preventing fake or unauthorised accounts.
Admin-approved access: Even after verification, users don’t automatically gain full permissions. An administrator must grant access based on each user’s role.
Secure login with JWT: All user sessions are authenticated with encrypted JSON Web Tokens (JWT) provided by Strapi. These tokens validate user identity and update frequently to minimise potential misuse.
Data Safety
UNPLEXi’s data handling practices reflect the ISO/IEC 27001 principles of confidentiality, integrity, and availability, and are designed to minimise risk across storage, transmission, and system access.
Data Storage: All data is stored securely in a PostgreSQL database hosted on Neon, which utilises AWS instances for enhanced infrastructure security with physical and network protections.
Encrypted Communication: Data transmission between Strapi and Neon is fully encrypted using SSL/TLS protocols. This provides protection against interception or tampering during transit.
Built in Security
Password and credential management: We enforce secure password standards and handle credentials with care.
Least-privilege access: Users only receive the access they need — nothing more.
Input validation & protection from attacks: All data inputs are checked and sanitised to defend against SQL injection and similar attacks.
AI Integrity
UNPLEXi uses AI – to support people, not replace them. Our technology is built on three commitments:
- Transparency
- Responsibility
- Evidence
We focus on making our system easy to understand by showing how insights are generated and giving users the context they need to feel confident using them. We draw on clinical frameworks, credible research, and proven evidence — because good AI depends on good information.
Human first, always.
AI doesn’t make decisions at UNPLEXi. People do. Our tools are designed to support human judgment, not override it. Your clinical expertise, lived experience and team knowledge remain central.
Ethical by design.
We follow evidence-based standards, align with sector values, and maintain strong internal governance to guide every AI feature we build.
We protect against bias — deliberately and continuously.
AI is only as fair as the data behind it. We actively monitor for bias, design for diverse needs and abilities, and continuously refine our models with real-world feedback from providers, clinicians, support workers, and individuals.
If something doesn’t look right, we expect you to question it — and we design the system so you can. We love to hear your feedback, questions, and ideas so we can continuously improve.
