Know who opened and changed every record
Role-based access, multi-factor authentication, an audit log and encryption, hosted in Australia.
Participant information is among the most sensitive data a provider holds. CompanionAxis limits each person to the participants and records their role needs, records every view and change in the audit log, encrypts data in transit and at rest, and keeps it in Australian data centres.
Free for 14 days, with rostering, the support worker app, progress notes and NDIS invoicing. Set it up yourself online.
What changes for you
Answer any question with evidence
The audit log shows who viewed or changed a note, incident, medication record or claim, and when, ready for an internal review, a complaint or an NDIS Commission enquiry.
Staff see only what they need
Support workers see their own shifts and participants; finance sees billing; quality sees incidents. Access is set by role and site.
Ready for your privacy obligations
Built to help you meet the Privacy Act 1988, the Australian Privacy Principles and the Notifiable Data Breaches scheme, with data hosted in Australia.
Reviewing access to a participant’s record
- Step 1Question raised
A participant, family member or manager asks who saw or changed a record.
- Step 2Open the audit log
Authorised reviewers filter by participant, user, action and date.
- Step 3See every access
Each entry shows the user, the action, the record and the time.
- Step 4Respond with evidence
Export the result for your complaint file, privacy officer or the NDIS Commission.
See it in the app a closer look at the screens your team uses every day.
Built for Australian privacy law
Participant data is held in Australia, access is limited by role and site, and the audit log records who saw what. If you ever need to assess a possible eligible data breach under the Notifiable Data Breaches scheme, the audit log shows exactly which records were accessed and by whom.
- Hosted in Australian data centres
- Privacy Act 1988 and Australian Privacy Principles
- Audit log supports NDB assessments
- ISO 27001 and SOC 2 in progress
What’s included
8 features
- Role-based accessPermissions per module and action for roles you define, scoped to the regions, branches and houses each person works in.
- Multi-factor authenticationA one-time code on top of the password, required for the roles you choose.
- Audit logEvery view, change, approval and export recorded with user, time and record, and filterable for review.
- EncryptionTLS 1.2 or higher for all traffic and AES-256 for data at rest, including backups.
- Australian hostingData and backups are held in Australian data centres.
- Essential Eight alignmentOur internal controls are designed with reference to the Australian Cyber Security Centre’s Essential Eight.
- Single sign-onSoonSign in with Microsoft 365 or Google Workspace, with leavers removed when their account is disabled.
- ISO 27001 and SOC 2SoonCertification work is in progress. We will publish certificates here once they are issued.
Works with the rest of CompanionAxis
The same encryption and access rules protect every region and house.
Explore Cloud and multi-site →The audit log feeds your Practice Standards evidence and audits.
Explore Compliance hub →External team members get consented, limited access, and every view is logged.
Explore Connected care network →Questions buyers ask
Where is participant data stored?
In Australian data centres, including backups.
Are you ISO 27001 or SOC 2 certified?
Not yet. Both are in progress. We will publish certificates on our Trust page once they are issued, and we can answer your security questionnaire in the meantime.
Will you support our security and privacy assessment?
Yes. We complete vendor security questionnaires and support privacy impact assessments during evaluation.