Security and trust

Built for agencies with government clients.

How BitpointX protects your clients' information, and who can see it. Last updated 1 November 2026.

Identity and access

  • Passkeys and multi factor sign in for every user
  • Single sign on for agencies that use it
  • Role based access, scoped to each client space
  • Our staff can only view an agency’s data with its approval, for a limited time, and it’s logged

Your data

  • Encrypted in transit and at rest
  • Credentials kept in a separate vault and shared only by one time links
  • Export your data at any time
  • Deleted when you leave, unless the law says we must keep it

Records and accountability

  • An audit log of every important action
  • Every view as session and credential view is recorded
  • Classification markings on tickets, up to OFFICIAL: Sensitive
  • Agencies told promptly if an incident affects them

Automation you can explain to a client.

Every automated step is visible, approved and on the record.

Never trains on your data

Customer content is never used to train AI models.

Sandbox only

Fixes are built on a separate branch, never on production.

Approved twice

The client approves the preview. A person on your team merges it.

Sensitive spaces

Automation stays off for OFFICIAL: Sensitive spaces unless the client allows it.

Frameworks we're building to.

BitpointX is being designed around these frameworks. Independent assessments and certifications will be listed here once they're complete.

Information Security Manual (ISM)The Australian Signals Directorate’s controls for systems holding government information
Essential EightThe ASD’s eight mitigation strategies
Protective Security Policy FrameworkClassification markings up to OFFICIAL: Sensitive
Privacy Act 1988Australian Privacy Principles and the Notifiable Data Breaches scheme

Need details for a client's procurement team?

Ask us for our security information pack. You'll also find our service providers in the Data Processing Agreement.

Email support@bitpointx.ai

Found a vulnerability? Email support@bitpointx.ai. We won't take action against good faith research.