Data sovereignty
Engageable is an Australian company and Engageable data is hosted in Australia — in Sydney — not replicated offshore for processing or support. For institutions with data residency obligations, or those simply unwilling to place student health records under foreign jurisdiction, this is a structural answer rather than a contractual promise.
| Hosting | Australian data centres (Sydney), with data residency guaranteed by contract. |
|---|---|
| Encryption | Encrypted in transit (TLS) and at rest. |
| Availability | 99.95% uptime service-level guarantee, with scheduled maintenance outside Australian business hours. |
| Backups | Automated backups with tested restore procedures and point-in-time recovery. |
| Access control | Role-based access control, least-privilege administration, delegated program-level roles. |
| Authentication | Single sign-on via SAML, Microsoft Entra ID or Okta; MFA enforced for administrative accounts. |
| Audit | Full audit logging of record access and change, retained and exportable. |
| Segregation | Institutional data logically segregated; no cross-institution visibility. |
Privacy
Placement data is unusually sensitive: immunisation status, police check outcomes, working-with-children clearances, and in some programs supervision and performance records. Engageable is designed around that reality.
- Compliant with the Australian Privacy Principles under the Privacy Act 1988.
- Collection limited to what a placement decision actually requires.
- Retention periods configurable per institution and per document type.
- Partner-site users see only the students placed with them — never the wider cohort.
- Student-visible record of what has been uploaded and who has verified it.
- Data export and deletion on request, and on contract termination.
Procurement pack
We are asked the same questions by every information security and procurement team, so we keep the answers ready:
- Security overview and architecture summary
- Completed Higher Education Cloud Vendor Assessment style questionnaire
- Privacy impact assessment support
- Data flow and residency documentation
- Business continuity and disaster recovery summary
- Standard contract, SLA and sub-processor list
- Penetration testing summary and remediation practice
- Accessibility statement (WCAG 2.1 AA target)
Accessibility
Students use placement systems under time pressure, often on a phone, sometimes with assistive technology. Engageable targets WCAG 2.1 AA, with keyboard-navigable workflows, sufficient colour contrast, and forms that work with screen readers. We publish known gaps rather than claiming perfection.