Australian care providers handle some of the most sensitive information there is, and many are required, or simply prefer, to keep it onshore. This page explains, specifically, where OneForce Care stores and processes data. It is published by Wondertree Studios Pty Ltd (ACN 699 886 498, ABN 82 699 886 498) of Level 10, 387 George Street, Sydney NSW 2000, Australia.
1. Your data stays in Sydney, Australia
The platform’s application hosting, database, document storage and backups all run in the Sydney, Australia (ap-southeast-2) region:
- Application hosting runs with our cloud hosting provider, in the ap-southeast-2 (Sydney) region.
- Database and authentication run with our database provider, in its Sydney, Australia region.
- Document storage (signed service agreements, consent forms and other uploaded files) is held with our cloud storage provider, also in the ap-southeast-2 (Sydney) region.
- Automated backups of the database are stored in Australia.
- Electronic signatures are handled by our self-hosted electronic-signature service, which we run on infrastructure we operate, rather than sending signing data to a third-party host.
This means Provider Data, including Participant and Worker records, service agreements, incident reports and payroll figures, is stored and processed in Australia by default, at rest and in transit.
2. Named exceptions
A small number of specific, limited data flows leave Australia as part of delivering the Service. We name each one so a Provider can assess it against their own obligations:
- Transactional email (account invites, e-signature invitations and reminders, and security notifications) is sent through our transactional email provider, which may process email content and recipient details on infrastructure located outside Australia.
- Push notifications to the OneForce Care Worker mobile app are relayed through our mobile push-notification relay, which may process device push tokens and notification content outside Australia.
- Address autocomplete, when entering a Provider, Worker or Participant address, sends the characters typed to a third-party address-lookup service, which is processed on that provider’s overseas infrastructure.
- Accounting and payroll integration applies only where a Provider chooses to connect its own Xero organisation. Once connected, invoice data (participant or recipient name, NDIS support item numbers and amounts) and timesheet data (Worker name, hours and pay items) are sent to that Provider’s Xero organisation, which is hosted on Xero’s own infrastructure and may be located outside Australia depending on the region Xero uses for that organisation.
- Website enquiries submitted through our marketing website (contact and demo-request forms) are recorded in our enquiry-tracking system, which may store that data outside Australia. This applies only to enquiry form data, never to Provider, Worker or Participant data in the platform.
Each of these carries only the specific, limited data needed for that function; the platform’s database, document storage and backups are not routed through any of them.
3. How we assess overseas processing
Where a service provider could process personal information outside Australia, we assess it and put appropriate protections in place, consistent with APP 8 (cross-border disclosure of personal information) under the Privacy Act 1988 (Cth). We limit what is sent to each provider to the minimum needed for its function, and rely on that provider’s own security practices and contractual terms. See our Privacy Policy for the full disclosure and overseas-disclosure analysis, and our Security page for our technical safeguards. We can provide details of our subprocessors to Providers on request.
4. Why this matters
Keeping Participant and Worker records onshore, in the Sydney region, helps Providers meet their own privacy and NDIS Practice Standards obligations, supports continuity of care, and keeps sensitive health-adjacent information within Australian jurisdiction.
5. Contact
Questions about data residency? Email hello@oneforce.com.au.