Security FAQ

Workzilla is committed to maintaining high, internationally recognised standards for information security. For this reason, we are currently in the process of obtaining ISO 27001 certification for our Information Security Management System.

In the meantime, we want to assure our customers that Workzilla already holds itself to this global benchmark. Our CEO and co-founder has personally led two organisations through ISO 27001 certification before, has acted as an advisor for others throughout their own process, and audited companies against these standards. As a result, these stringent standards already govern how we manage and protect information, and we are pleased that certification will soon add independent, formal confirmation of what we already practise.

Co-founded by a practising law firm owner, we understand the risk a firm takes when signing up to a new platform. We fully respect it, and we don't take it lightly. Maintaining your trust and upholding our professional responsibility to you is of the utmost importance to us.

When you grant Workzilla permission via your practice management system, we access only the data required to do our job. We connect to your PMS and accounting software through read-only integrations and never write data back or affect your existing systems.

Workzilla's infrastructure is hosted on Amazon Web Services (AWS), within Australia.

Data is encrypted using the Advanced Encryption Standard with 256-bit keys (AES-256) at rest. Data in transit is protected using Transport Layer Security version 1.3 (TLS 1.3), with fallback to version 1.2.

Workzilla operates on a least-privilege basis: each team member has access only to the systems and data required for their specific role, not the platform as a whole. No one, including our engineers, has access to production data; the only exception is the CEO, and only in genuine "break glass" emergencies.

Workzilla never sells or shares your data with any third party.

Backups are performed daily, fully encrypted, and always stored exclusively within Australia.

Workzilla always operates in line with Australia's privacy and data protection laws, consumer protection law, electronic marketing law, and confidentiality and security obligations.

In the event of a security incident, Workzilla notifies all affected parties, including firms, individuals, and the Office of the Australian Information Commissioner (OAIC), as required.

If you have any questions or concerns about Workzilla's data and security policies, please get in touch at support@workzilla.co. We are 100% human and always happy to help.