Security & Data Protection

Built for Reliability

Australian Hosting
High Availability

Zavy360 is hosted in high-availability Australian data centres with automatic failover, so your practice records stay in Australia and stay available.

Your data is secured in world-class facilities with strict access controls, 24/7 monitoring and intrusion detection.

Locked Down, Fully Protected

Encrypted Everywhere
Zero Trust Security

With a Zero Trust security model, only verified users can access Zavy360 using multi-factor authentication, Face ID, and one-time passwords.

All data is 2048-bit SSL encrypted in transit and AES-256 encrypted at rest, with daily backups so your information can be recovered.


⚠ Unauthorised access detected...
✖ Access denied: Data is encrypted
Response: Security log updated. IP recorded.

Support access

Locked by default

Security PIN

•

Issued on request. Shared only when you decide.

Your data is visible only to your practiceAlways
Request a security PIN when you need supportOn request
Zavy360 staff see only what you openYour call
Access can be restricted again at any timeAny time

Enhanced Privacy

Visible Only to You.
Not to Us.

Your practice data is stored securely and is visible only to you. Zavy360 staff cannot see your patient records unless you choose to let them.

You decide how much access Zavy360 has. Give our team access, or restrict it entirely, depending on your business preferences.

Need support? Simply request a security PIN. That PIN is what lets our team in, and nothing opens without it.

Think of it like a good password manager. It keeps your passwords safe precisely because the company behind it cannot read them. Your practice data works the same way with us.

Visible only to you. Your records stay inside your practice.
You set the access. Open it up or lock it down to suit your business.
Security PIN for support. Request one whenever you need a hand.
Restrict any time. Close access again the moment you want to.

Independently Verified Security: Know Your Data Is Safe

Don’t Be Misled by ISO Certification Claims

Some companies may try to mislead you by claiming they are ISO-certified simply because their supplier is.

But ISO certification doesn’t transfer. Just because a supplier meets a standard doesn’t mean the company using them does too.

Tip: If you see a claim like this, ask for the company’s own certification details. A legitimate ISO-certified organisation will have its own certification number and scope of compliance, not just a reference to its supplier’s credentials.

Your data belongs to you!

Data Ownership and Exportability

As guardians of your data, we take all necessary measures to ensure its confidentiality and security. If you ever wish to transfer your data from Zavy360, we make it a seamless process for you.

You can request a data export and take your data to any location you desire, ensuring complete ownership and control over your information.

Locked & Compliant: Enterprise-Grade Backups, No Hassle

Set and Forget:
Backups You Never Have to Worry About

Zavy360 leverages Amazon’s robust backup infrastructure to ensure your data is secure and always available. Your data is backed up daily and stored redundantly across multiple physical locations within Amazon’s highly resilient cloud environment.

Additionally, real-time replication to secondary databases provides up-to-the-second redundancy, minimising the risk of data loss. In the rare event of a backup disruption, a contingency plan is in place to safeguard your information.