In specifics, not reassurance language. Updates from the home to families are one-way. Families can message each other privately; neither the home nor Brenna sees those conversations.
Data is encrypted at rest (AWS EBS) and in transit (TLS/SSL) between server and client. The connection between the application and the database is also encrypted and authenticated using a client certificate, rotated automatically every twelve hours. Database traffic never touches the public internet: it runs entirely over private AWS networking.
General staff access is restricted to your site's approved IP addresses, so login only works from the home itself. Home Manager and Organisation Manager roles can access Brenna off-site where that's operationally necessary. Authentication is either password or biometric, with mandatory password resets every three months, or Single Sign-On through Microsoft Entra ID for organisations that use it. Every request is checked against a token confirming both identity and what that user is allowed to do.
Access is role-based, built on six preset roles aligned to real job functions. For homes with a clinical system integration, whether Manadplus, Acredia, LeeCare, eCase, AlayaCare, Telstra Health, or Microsoft SSO, roles and permissions are pulled directly from that system rather than set up twice.
Servers and the database sit inside a private AWS network (VPC and Security Groups). External parties have no path to either. Only the backend application can reach the database, and only over the private network.
All application and system logs are centralised in AWS CloudWatch, with alerts to the development team on server errors or failed deployments. A new release that fails automated health checks doesn't reach production.
The database is backed up daily at 7am Sydney time, stored on Amazon S3, and mirrored to a separate backup location. Full backup history is retained indefinitely from launch.
We don't currently hold a formal certification such as ISO 27001, SOC 2, or IRAP. Rather than imply one, this page states what's actually true: the specific controls above.
Happy to put your technical lead directly in touch with ours.