Where workforce roster data lives
Transparent data residency with a global option and an Australian hosting path for organisations that require it.
🌏
Singapore
APAC-optimised, low latency for Australian and New Zealand users.
- • Low latency across APAC including Australia and NZ
- • SOC 2 Type II certified (Render)
- • ISO 27001 certified (Render)
- • Singapore PDPA — strong regional data protection
- • APP 8 compliant via contract and technical safeguards
- • AES-256 encryption at rest; TLS 1.2+ in transit
🇦🇺
Australia
For organisations that require data on Australian soil.
- • Data and compute in Australia — AWS Sydney
- • IRAP-assessed infrastructure
- • SOC 2 Type II and ISO 27001 (AWS)
- • ISO 27017 / 27018 cloud security (AWS)
- • Same application, same security model — different region
- • AES-256 at rest (AWS KMS); TLS 1.2+ in transit
Controls by region
| Requirement | Singapore (Render) | AWS Sydney |
|---|---|---|
| Encryption at rest | ✓ AES-256 | ✓ AES-256 (AWS KMS) |
| Encryption in transit | ✓ TLS 1.2+ | ✓ TLS 1.2+ |
| Access control | ✓ RBAC, SSO, MFA | ✓ RBAC, SSO, MFA |
| Audit logging | ✓ Full, immutable | ✓ Full, immutable |
| Australian Privacy Act (APPs) | APP 8 safeguards via contract and controls | Australian-region hosting available |
| SOC 2 Type II | ✓ Render | ✓ AWS |
| ISO 27001 | ✓ Render | ✓ AWS |
| IRAP-assessed infrastructure | — | ✓ AWS Sydney |
| GDPR (if applicable) | Supported where applicable | Supported where applicable |
| Multi-tenant isolation | ✓ | ✓ |
Workforce data only. IRIS holds workforce data only — not patient data. See our Privacy Policy.
See how an ED-first roster platform works.
From emergency departments to whole health services — and the ED-like teams beyond them.