Access controls
Role-based access limits who can view, upload, or approve evidence. Enterprise plans include SSO for centralised identity management.
Platform security
Constant is built for organisations that need defensible cyber compliance and clear answers about where their data lives.
How we protect your data
Practical controls across hosting, access, encryption, and the people who operate the platform.
Encryption
Data is encrypted in transit with modern TLS. Data at rest uses industry-standard encryption from our Australian cloud partners.
Infrastructure
We monitor platform health and apply security patches so systems stay current as threats and dependencies change.
People and process
Production access is restricted to authorised personnel. Automated checks combine with certified assessor review.
Australian data residency
Constant is designed, owned, and operated in Australia. Customer platform data is hosted in Australian infrastructure. We do not transfer customer compliance data offshore for processing.
Security FAQs
Where is Constant customer data hosted?
Customer platform data is hosted in Australian infrastructure. Constant states that customer compliance data is not transferred offshore for processing.
How is data encrypted?
Constant encrypts data in transit using modern TLS and uses industry-standard encryption at rest through its Australian cloud infrastructure.
Does Constant support role-based access and SSO?
Yes. Role-based access controls who can view, upload, or approve evidence. Enterprise plans include SSO for centralised identity management.
How should a security concern be reported?
Use the Contact page and mark the message as a security enquiry. Customers with an active agreement should use their designated support channel.
Does Australian hosting mean ASD has certified Constant?
No. Australian data residency and Australian operation describe where the platform and customer data are operated. They do not imply ASD certification, endorsement, or accreditation.
Start your compliance journey today
Choose the right plan for your organisation. Scale seamlessly as your compliance needs evolve.
Ready to simplify your compliance process?
Book a demo and see constant in action.
All Paid Plans Include
-
Unlimited human assessor reviews
-
Evidence collection
-
AI-assisted pre-reviews
-
Compliance dashboards
-
Australian business-hours support
-
On-demand reporting
-
Control owners and tasks
-
Evidence uploads
-
Maturity and gap tracking
-
Role-based access controls
-
Framework guidance
-
5×5 Risk Matrix
-
Australian data residency