Key Takeaways

ClearAML Security

ClearAML is built on a security-first architecture utilizing enterprise-grade encryption and Australian data residency. Key technical standards include AES-256-GCM application-level encryption for OAuth credentials, infrastructure-level AES-256 disk encryption via Supabase, TLS 1.2+ for data in transit, and role-based access control (RBAC). Our infrastructure utilizes SOC 2-aligned data centers and supports your path to being AUSTRAC-ready, ensuring all client verification data is stored securely on Australian soil.

Enterprise-Grade Security

Your Data. Our Priority.

Clear AML is built with a security-first architecture to protect sensitive information and ensure regulatory compliance for Australian firms.

Data Residency

All primary data and identity information is stored on Australian soil, hosted in highly secure data centres with SOC 2-aligned protocols.

Encryption Standards

We apply AES-256-GCM application-level encryption to OAuth credentials and sensitive tokens, backed by infrastructure-level AES-256 disk encryption via Supabase. All data in transit is protected with TLS 1.2 or higher.

Access Control

Role-based access control (RBAC) restricts sensitive actions—data exports, audit search, screening decisions—to authorised roles within your firm.

Monitoring & Auditing

Key actions across the platform—client edits, screening and risk decisions, document reviews, and report exports—are logged in an immutable audit trail. This provides your compliance officer with total visibility and oversight.

  • Risk-based activity alerts
  • Immutable system logs
  • Automated risk flags
  • On-demand audit & compliance exports

Compliance Framework

Our platform is designed to align with AUSTRAC's guidance for digital identity verification and record-keeping, facilitating your compliance with the AML/CTF Act.

"Security is not a feature; it's the foundation of everything we build at Clear AML."

Have specific security questions?

Our security team is happy to answer your technical questions or provide more details about our infrastructure.

Talk to security