Hosted in Australia
Every service runs in Sydney or Melbourne, whichever you choose. Your data, including your backups, is stored in Australia.
Last updated 5 November 2026
Your own server
Each customer gets a dedicated server. Your chats, files and passwords are never stored on a server shared with another business.
Encryption
Data is encrypted in transit and at rest. In transit means every connection to your service uses HTTPS (TLS), so nobody between you and the server can read it. At rest means the disks and backups that hold your data are encrypted.
AI processing
On Private AI team chat and Ask-your-files search, AI requests are processed in Australia by default. You can switch your service's AI residency to Global, which may process requests outside Australia, and switch back at any time.
Your chats and files are never used to train AI models.
Staff access you can see
Only the chrometech staff who need it to run your service can reach the systems behind it.
Every action our staff take on your service is recorded in your activity and audit log, which you can read in your client portal. If we restart, change or restore your service, you will see who did it and when.
What our logs record
Logs record metadata: who signed in, when, from where, and what changed. They never record the content of your chats.
Backups
Your service is backed up every day. We regularly test that backups restore, so a backup is something we know works rather than something we hope works.
Patching
We apply security updates every week. Urgent fixes for serious vulnerabilities are fast-tracked and applied as soon as they are safe to install.
When you cancel
- Your service stops at the end of your paid period.
- We keep your data for a 30-day grace period, so you can change your mind and have it restored.
- After the grace period we delete the service and keep one final backup for 90 days, in case you need something back.
- After those 90 days the final backup is permanently deleted.
Subprocessors
These companies process data on our behalf to run the service. We will update this list before adding a new one.
| Company | What they do for us | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage and backups for your service, and AI processing through Amazon Bedrock | Sydney or Melbourne (AI may be processed outside Australia if you choose Global AI residency) |
| Amazon Simple Email Service (Amazon SES) | Sends email such as invitations and notifications | Run by Amazon Web Services |
| Stripe | Takes payments and holds billing details. Stripe never sees your chats, files or passwords | May process billing data outside Australia |
If something goes wrong
If a data breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. Our privacy policy explains more.
Report a vulnerability
If you think you have found a security problem in chrometech, please email enquiries@chrometech.com.au. Tell us what you found, how to reproduce it and how to reach you.
- We will acknowledge your report and keep you updated while we fix it.
- Please do not access, change or delete other people's data, and do not disrupt anyone's service while testing.
- Give us a reasonable chance to fix the problem before you share it publicly.
Our security contact details are also published at /.well-known/security.txt.