Data Security

Last updated on 13 August 2026.

This page describes how InspireCyber approaches the security of customer data and the systems that support Managed Agents. It complements our Privacy Policy and Terms of Service. Managed Agents is a service of InspireCyber. The entity responsible is Newframe Group Pty Ltd (ABN 77 625 015 983).

For security questions or to report a vulnerability, contact support@inspirecyber.com or use our Contact page.

1. How we protect personal information

We maintain administrative, technical, and physical safeguards designed to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include encryption in transit and at rest, access controls, network security, logging and monitoring, and staff training. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity that occurs under your account.

2. Access control

Access to production systems and customer data is restricted to authorised team members based on role. We use strong authentication practices, including multi-factor authentication for privileged accounts where supported, and review access periodically. We apply least-privilege access by default.

3. Encryption

• In transit: Traffic to our website and APIs is protected with TLS.
• At rest: Customer data stored in managed databases and object storage is encrypted using provider-managed encryption where available.

4. Automated processing and artificial intelligence

Some features of the Services use automated processing, including machine learning and artificial intelligence, to provide functionality, analytics, and security. We do not use your personal information to make decisions that produce legal or similarly significant effects about you without a lawful basis and, where required, appropriate safeguards such as human review. We do not use Customer Data to train foundation models without the relevant customer's instruction or consent.

5. International data transfers

We operate in Australia and may store and process personal information in Australia and in other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your location.

Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled consistently with our Privacy Policy and applicable law. For transfers subject to APP 8, we take such steps as are reasonable in the circumstances. For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

6. Data breach notification

We maintain procedures to detect, assess, and respond to security incidents. If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner ("OAIC") in accordance with the Notifiable Data Breaches scheme, and we will notify individuals and regulators as required under applicable US state breach-notification laws and other applicable laws.

7. Third-party providers

We disclose personal information to service providers and sub-processors who perform services for us, such as cloud hosting, payment processing, email delivery, analytics, customer support, and security tooling. They may handle personal information only on our instructions and under contractual confidentiality and data-protection obligations.

8. Customer responsibilities

Security is a shared responsibility. Customers are responsible for:

• Protecting account credentials and devices used to access the Services
• Configuring integrations and permissions appropriately
• Promptly notifying us of suspected unauthorised access

9. Changes

We may update this page as our practices evolve. The "Last updated" date above reflects the latest revision.

10. Contact

Security inquiries: support@inspirecyber.com · Contact

Related: Privacy Policy · Terms of Service