Security is at the core of everything we do
EvenBetter protects the most sensitive data an organisation can share — its pay and workforce data. We hold ourselves to the highest standards so you can close pay gaps with confidence that your data is safe.
Privacy, security, and confidentiality
Three pillars are built into every system, process, and decision we make.
Privacy by Design
We collect only the data we need, never sell or share personal information, and give you full control over data retention and deletion. Built to comply with the Australian Privacy Act and aligned with GDPR.
Enterprise-Grade Security
Data is encrypted with AES-256 at rest and TLS 1.2+ in transit. Infrastructure runs on SOC 2 certified AWS with continuous monitoring, automated vulnerability scanning, and role-based access controls.
Strict Confidentiality
A single-tenant architecture keeps your data logically isolated. Every team member passes background checks, completes regular security training, and is bound by a strict employee NDA.
Independently audited — and continuously verified
An independent third-party audit validates that EvenBetter maintains rigorous controls over security, availability, and confidentiality — not at a single point in time, but continuously over an extended observation period.
How we protect your data
Encryption everywhere
AES-256 encryption at rest and TLS 1.2+ in transit — always on, by default.
Continuous monitoring
Automated, always-on security monitoring and compliance tracking, 24/7.
Incident response
A documented incident response plan with client notification within 72 hours.
SSO authentication
Microsoft and Google single sign-on for centralised, secure access management.
Access controls
Role-based controls and least-privilege principles, with regular access reviews.
Data retention & deletion
Clear retention policies and full data deletion on contract termination.
Frequently asked
Where is my data stored?+
Your data resides in SOC 2 certified AWS data centres, with logical isolation between clients and data-residency options available.
How is my data encrypted?+
AES-256 encryption for data at rest and TLS 1.2 or higher for data in transit, with automatic key rotation and encrypted database backups.
Who has access to my data?+
Access is strictly limited on a need-to-know basis, with logging, auditing, background checks, security training, multi-factor authentication, and role-based controls.
What happens if there is a security incident?+
We commit to notifying affected clients within 72 hours, with a detailed incident report and remediation details.
Does EvenBetter use my data to train AI models?+
No. Your data is never used to train, fine-tune, or improve any AI models.
Do you comply with Australian privacy regulations?+
Yes — full compliance with the Australian Privacy Act 1988 and the Australian Privacy Principles, with GDPR alignment for international operations.
Questions about our security?
We're always happy to talk trust. Download our SOC 2 Type II report, or get in touch to discuss our security posture.