Platform security

Constant is built for organisations that need defensible Essential Eight compliance and clear answers about where their data lives.

Australian data residency

Constant is designed, owned, and operated in Australia. Customer platform data is hosted in Australian infrastructure. We do not transfer customer compliance data offshore for processing.

Access controls

The platform supports role-based access so teams can limit who can view, upload, or approve evidence. Enterprise plans include single sign-on (SSO) options for centralised identity management.

Encryption and infrastructure

Data is encrypted in transit using modern TLS. Data at rest is protected using industry-standard encryption provided by our Australian cloud infrastructure partners. We monitor platform health and apply security patches to our systems.

People and process

Access to production systems is restricted to authorised Steltek Pty Ltd personnel. We combine automated checks with certified assessor review so control outcomes reflect both tooling and human judgement.

Reporting incidents

If you have a security concern related to Constant, please contact us via our contact page and mark your message as a security enquiry. Customers with active agreements should use their designated support channel.