Trust and security
You will hold undisclosed drill results and mining studies in QMAI. Here is exactly how we protect them.
This page explains how your data is isolated, protected and governed. We update it when anything changes.
How your data is protected
Isolation is part of the architecture, not a setting a user can switch off.
Company isolation
Each company's documents, search index and facts are kept in a separate tenant. Every request is checked against the signed-in user's company.
EPCM engagement walls
For engineering firms, each client engagement sits behind its own information barrier, enforced on every page and request rather than by hiding menu items.
Department and document access
Documents are classified when they arrive. Administrators control which departments and members can see each folder and document.
Encryption
TLS in transit and AES-256 at rest for stored documents and backups.
Staff access
QMAI staff cannot browse or search customer documents. Technical access is limited to critical troubleshooting and security incidents, and every access is logged.
Audit trail
Facts keep their source references and review history. Superseded and retracted facts are kept with their history, not silently overwritten.
Backups
Automated nightly database backups, stored encrypted and separately from the application.
Leaving QMAI
You can export your documents and attested facts, and we delete your data on request when your agreement ends.
Privacy
Australian privacy law
QMAI handles personal information under the Privacy Act 1988 and the Australian Privacy Principles.
If we suspect a data breach we assess it promptly, within the 30 days the Notifiable Data Breaches scheme allows. Where it is likely to cause serious harm, we notify affected customers and the OAIC as soon as practicable.
AI governance
AI supports the Competent Person. It never replaces them.
- Every answer shows its sources and whether the facts behind it are attested.
- Material facts enter the record only after a person approves them.
- When the evidence is insufficient, QMAI says so instead of guessing.
- Our controls are designed around the Australian Government's Guidance for AI Adoption.
Completing a supplier security questionnaire?
Send it to us. We'll return it with our architecture summary and security details.