Your data stays in Australia
Your practice's data and its backups are stored in Australia, in Sydney. Emails the software sends, such as invitations, go through a provider in the United States, as our privacy policy explains.
Australian data, and rules that hold
A practice management system holds staff records and the evidence your accreditation depends on. Here is where that data sits and how access to it is enforced.
Permissions live in the database, not the screen
Who may read what is enforced at the data layer rather than by hiding buttons. Staff never see drafts, files open only for the people entitled to them, and a visitor who has not signed in can touch nothing at all.
Uploads are constrained at the storage layer
The storage bucket itself refuses the wrong file types and oversized files, so the rule holds even if a request never goes near the upload form.
Records you cannot quietly rewrite
Every policy version, acknowledgement and publication is an immutable record. Restoring an old version republishes it as a new one, so the history stays intact rather than being edited.
Card details never touch the app
Subscribing hands you to Stripe's hosted checkout. The paid record is written only by Stripe's signature-verified webhook, and the database refuses any signed-in user's attempt to write their own plan.
Leaving takes your details with you
When somebody leaves, their phone number, job title, signature and photo are deleted, and the picture is removed from storage rather than hidden. Their name stays on the policies they acknowledged and the training they finished, because the practice has to be able to show that to a surveyor.
The record is the point
An acknowledgement is only worth anything if it says exactly what was read, by whom, at which site, and when. Practice Managed treats that as data to be protected rather than a tick in a box.
- Each policy's History shows who created it and every published version.
- Every acknowledgement is kept against the exact version and site.
- Overdue is judged on your practice's own calendar, not a server's timezone.
- Per-site rollout keeps the frozen evidence of what each site saw, and when.
Questions before you commit
Practice owners and managers are right to ask where their staff records are going. Send us the question and you will get a straight answer rather than a brochure.