Security built around sensitive workplace information.
AccordPath is designed to support organisations managing confidential workplace matters through secure infrastructure, controlled access and responsible AI.
With Australian-hosted data, encrypted records and clear access permissions, the platform supports both leader confidentiality and organisational oversight.
Your workplace data, hosted in Australia.
AccordPath stores case records, user accounts, audit trails and backups in Sydney, Australia.
Uploaded documents are stored in AWS S3 in Sydney, and AI requests are processed through AWS Bedrock in the Sydney region.
The application operates through Cloudflare's network. Notification emails are delivered through Resend, an overseas provider, but do not contain case content.
Protection at every stage.
AccordPath applies encryption to protect information:
In transit. TLS 1.2 or higher for data in transit.
At rest. AES-256 encryption for data at rest.
Sign-in. Passwordless, invitation-only authentication.
Sign-in options. Microsoft work account sign-in or one-time email verification codes.
Your existing policies. Existing organisational MFA and conditional-access policies apply when using Microsoft authentication.
AccordPath does not store user passwords.
The right information, accessible to the right people.
AccordPath separates individual case management from organisational administration and oversight.
Leaders. Access and manage their own case records.
HR and administrators. Manage authorised administrative functions and view available organisational insights without automatic access to individual case content.
Formal handover. Individual case access is extended only through the platform's formal handover process.
AccordPath personnel. Do not have routine access to customer case content.
Each organisation's data is isolated, with access permissions enforced at the server level.
AI-assisted guidance. Human-led decisions.
AccordPath uses AWS Bedrock to provide structured AI-supported suggestions that help leaders prepare conversations, consider appropriate actions and manage follow-up.
AI-generated content is reviewed by the manager before use.
The platform does not make automated decisions about employees or independently communicate AI-generated recommendations to the individuals concerned.
AccordPath does not use customer information to train AI models. AWS Bedrock does not share customer prompts with model providers for training.
A clear record of actions.
AccordPath maintains an append-only audit trail recording platform activity.
Audit records cannot be edited or deleted through the platform, supporting accountability and traceability.
Prepared to protect service continuity.
AccordPath maintains documented Business Continuity, Disaster Recovery and Cyber Incident Response plans.
Automated, encrypted backups are maintained in Australia, with a 24-hour recovery time target.
AccordPath has procedures for notifying affected organisations of data breaches without undue delay and addressing applicable obligations under Australian privacy law.
Clear arrangements for organisational information.
Organisations retain responsibility for the information they collect and manage through AccordPath.
Data retention, return and deletion arrangements are governed by the applicable customer agreement and legal obligations.
Where contractually agreed, AccordPath can return or delete organisational data following the conclusion of the service, subject to legal retention requirements.
Supporting organisational due diligence.
AccordPath conducts internal security reviews, including reviews of data-access permissions and tracked remediation actions.
Its infrastructure providers, AWS and Cloudflare, hold SOC 2 Type II and ISO 27001 certifications. AccordPath does not currently hold an independent security certification.
Organisations can request additional technical and security information as part of their procurement and assessment processes.
Security questions? We’re ready to discuss them.
Whether you're assessing privacy, information security, access controls or responsible AI, our team can provide further information about AccordPath's technical arrangements.
Contact: [email protected]