Skip to main content

Quality and information security

ISO/IEC 27001:2022 and ISO 9001:2015 certified

Certified, audited and hosted in Australia

Netfront Pty Ltd is certified to ISO/IEC 27001:2022 for information security and ISO 9001:2015 for quality management. Both certificates were issued by Compass Assurance Services under JAS-ANZ accreditation and are valid to 18 July 2029. Research participant data is hosted on Amazon Web Services in Sydney, with the Melbourne region for backup and failover, so it stays in Australia.

See how this applies to research and trial platforms.

Certification and hosting

ISO/IEC 27001:2022
Information security management system. Certificate 8689-3198-01, valid to 18 July 2029
ISO 9001:2015
Quality management system. Certificate 8688-3198-01, valid to 18 July 2029
Certification body
Compass Assurance Services
Accreditation
JAS-ANZ (Joint Accreditation System of Australia and New Zealand)
Hosting
Amazon Web Services in Sydney, with the Melbourne region for backup and failover
Privacy
Personal information handled in line with the Australian Privacy Principles
Accessibility standard
WCAG 2.2 AA

Frequently asked questions

Is Netfront certified to ISO/IEC 27001?

Yes. Netfront Pty Ltd holds ISO/IEC 27001:2022 certificate 8689-3198-01 and ISO 9001:2015 certificate 8688-3198-01, issued by Compass Assurance Services under JAS-ANZ accreditation and valid to 18 July 2029.

Where is research participant data hosted?

On Amazon Web Services in Sydney, with the Melbourne region used for backup and failover, so participant data stays in Australia. Personal information is handled in line with the Australian Privacy Principles.

What does ISO/IEC 27001 certification mean for a research team?

An accredited certification body audits how Netfront manages information security, including risk assessment, access control, supplier management and incident handling. Certification is kept through regular surveillance audits, so the controls are checked on an ongoing basis, not just once.

Can you support our ethics application and supplier security review?

Yes. We provide documentation on data handling, hosting, security and accessibility for your ethics application and your institution's supplier review, and design the platform around the approved protocol.

How do you handle trial data?

Data capture is built into each platform, with export for statistical analysis, so most studies do not need a separate system. Where a study uses REDCap or another electronic data capture system, we integrate the platform with it.

Starting a new project?

Get in touch with our team today