Security & compliance

Sovereign by design.

Radiology is among the most sensitive data in healthcare. Sero treats it that way: in-country, encrypted, audit-logged and access-controlled from edge to report.

Where we're headed
ISO 27001
Certification in progress
Essential Eight
Aligning
Australian data residency
By design today
Privacy Act 1988
Built to align

We're early, and we'd rather be straight with you: Sero isn't certified yet. These are the standards we're actively building and certifying against, sovereign residency is live today, formal certifications are in progress.

The controls

Defence in depth, on a sovereign foundation.

Sovereign residency

All patient data stays in-country on sovereign Australian infrastructure. No cross-border transfer, ever.

Encrypted end to end

TLS 1.3 in transit, AES-256 at rest. Keys managed in an HSM with strict rotation policies.

Least-privilege access

Role-based access control and SSO. Every credential scoped to the minimum a task requires.

Full audit trail

Every view, claim and sign-off is logged and immutable, exportable for accreditation and review.

AHPRA-registered readers

Every radiologist's AHPRA registration is checked and credentialed before a single study is matched.

Resilient infrastructure

Sovereign Australian infrastructure with redundancy, monitoring and tested disaster recovery.

Built for the most sensitive data in medicine.

Request our security overview and architecture brief.