Your Data. Our Priority.
Where your data lives
Your firm in ClearAML
Client records, documents and compliance history
Sydney, Australia
- AES-256 encryption at rest
- TLS 1.2+ in transit
- Role-based access
Identity and biometric checks
Verification provider, European Union and United States
- Processed for the check
- Set out in our Privacy Policy
- Bank-Grade Encryption
- AES-256
- Australian Data Hosting
- Sydney
- Target System Uptime
- 99.9%
Key takeaways
ClearAML Security
ClearAML is built on a security-first architecture. Our database, file storage and application servers are hosted in Sydney, Australia, with infrastructure providers that are independently audited against SOC 2 (Type II). Key technical standards include AES-256-GCM application-level encryption for OAuth credentials, infrastructure-level AES-256 disk encryption, TLS 1.2+ for data in transit, and role-based access control (RBAC). Identity verification and screening checks are processed by a specialist provider in the European Union and United States; our Privacy Policy sets out where each category of data is processed.
How we protect your data
Where your records live, how they are encrypted, and who in your firm can act on them.
Data Hosting
Your client records, documents and compliance history are stored in Sydney, Australia, with infrastructure providers that are independently audited against SOC 2 (Type II). Identity and biometric checks are processed by our verification provider in the European Union and United States.
Encryption Standards
We apply AES-256-GCM application-level encryption to OAuth credentials and sensitive tokens, backed by infrastructure-level AES-256 disk encryption. All data in transit is protected with TLS 1.2 or higher.
Access Control
Role-based access control (RBAC) restricts sensitive actions—data exports, audit search, screening decisions—to authorised roles within your firm.
Monitoring & Auditing
Key actions across the platform—client edits, screening and risk decisions, document reviews, and report exports—are logged in an append-only audit trail that users cannot edit or delete. This gives your compliance officer visibility and oversight.
- Risk-based activity alerts
- Append-only audit logs
- Automated risk flags
- On-demand audit & compliance exports
Compliance Framework
Our platform is designed to align with AUSTRAC's guidance for digital identity verification and record-keeping, facilitating your compliance with the AML/CTF Act.
“Security is not a feature; it's the foundation of everything we build at ClearAML.”
Have specific security questions?
Our team is happy to answer your technical questions or provide more details about our infrastructure.