Security

Practical security built into the software foundation.

Security should be visible in the structure of the system: access controls, service separation, HTTPS, logging, careful data handling and clear expectations about where customer data is hosted.

Data sovereignty

Queensland designed. Queensland hosted.

Devize software is designed and developed in Queensland, Australia, and the servers used for Devize production systems are hosted in Queensland. This gives customers peace of mind that their operational data is not being placed in an offshore hosting environment by default.

Many software providers rely on offshore hosting or globally distributed cloud services. That can be appropriate for some products, but it can also make it harder for customers to understand where their data is stored, which jurisdiction may apply, and who has operational responsibility for the systems that hold their records.

Devize takes a clearer approach for its own platforms: local development, Queensland-based hosting, controlled access, secure transport and deliberate data handling. The goal is to give organisations practical software with fewer unknowns around data location and system support.

Access control

Role-aware permissions, protected admin areas and authentication patterns appropriate to the system.

Secure transport

HTTPS-first deployments, separate service endpoints and production-ready hosting configuration.

Auditability

Structured logging, operational events and support visibility for critical application behaviour.

Data minimisation

Collect only what the software needs, store it deliberately and keep retention expectations clear.

Queensland hosting

Devize production servers are hosted in Queensland, Australia, so customers have clearer expectations about where their systems and data are located.

Reduced offshore exposure

Keeping core hosting local helps avoid the uncertainty that can come with offshore storage, overseas infrastructure and unclear data residency arrangements.