Built for compliance from the ground up.
Security isn't an afterthought. ATOque is designed to meet the strict data residency and privacy requirements of Australian accounting practices.
Australian Data Residency
All data is stored locally in Australia. Your client data never leaves the country. Satisfies Privacy Act 1988 data residency requirements.
TFN Handling
TFNs are redacted at the PDF binary level before any storage or AI processing. Compliant with the Privacy (Tax File Number) Rule 2015. TFNs are never stored, never transmitted, never sent to external services.
Encryption
AES-256 encryption at rest. TLS encryption in transit on all connections. PDF files stored in secure private storage — access via time-limited signed URLs only, logged on generation.
MFA Enforced
Multi-factor authentication via TOTP (authenticator app) is mandatory for all user accounts. Cannot be disabled.
Audit Logging
Append-only audit log on every user action, document event, and email send. Cannot be edited or deleted. Retained for 7 years. Exportable to CSV.
ATO DSP Registration
ATOque is actively registering as an ATO Digital Service Provider (DSP). This requires passing the ATO's Online Services Framework (OSF) self-assessment covering access control, data protection, audit logging, and incident response.
Legal Documents
Review our full privacy policy and data processing terms.