Security

ISO 27001 certified

SkyAI Tech Pty Ltd, trading as SkyAI, is certified to ISO/IEC 27001:2022, the international standard for information security management. Our certification was issued by DQS Certification AUSNZ, accredited by JAS-ANZ.

Download our ISO 27001 certificate (PDF)

Our information security management system (ISMS) is led by senior management. We review it regularly through risk assessments, internal audits and management reviews.

How we protect information

Our controls are set out in documented policies and standards that we review regularly:

• Access control: role-based, least-privilege access, approved and reviewed regularly, with strong password rules.
• Encryption: data protected in transit and at rest, with managed keys.
• Classification and handling: information is labelled by sensitivity and handled to match, from creation to secure disposal.
• Cloud and network security: hardened configurations, network security controls and secure baselines for the cloud platforms we use.
• Monitoring: centralised logging, time-synchronised systems and threat monitoring to detect unusual activity.
• Devices and offices: managed devices, rules for personal (BYOD) devices, physical security and clear desk and clear screen practices.
• People: acceptable use rules and security awareness training for all staff.
• Suppliers: we assess the security of third-party and cloud suppliers before we use them, and review them over time.

Working in your environment

When we support your systems, our teams in Australia, New Zealand and India work under the same certified ISMS. We follow your security policies as well as our own:

• access only to what each engagement needs, removed when it ends
• private networking (such as private VPCs) and least privilege by default
• your data stays in your environment and regions unless you agree otherwise
• security requirements agreed in our contract and statement of work

Incidents and continuity

We have a documented process to detect, contain and recover from security incidents. If an incident affects your data or services, we tell you promptly and work with you to resolve it. Where personal information is involved, we meet our obligations under the Notifiable Data Breaches scheme.

Our business continuity plan covers backups, recovery and alternative ways of working. It keeps our services running through disruption, and we test it.

Reporting a security issue

If you believe you have found a security vulnerability in our website or services, please email admin@skyai.com.au with the details. We will acknowledge your report, investigate it, and keep you updated. Please give us reasonable time to fix the issue before sharing it publicly.

For client security questions or details of our controls, contact your SkyAI account manager or admin@skyai.com.au.