You are handing us the keys to your books. Here's how we handle that.

Your data stays in Australia.

All data is processed and stored in the Azure Australia East region (Sydney). AI processing runs through Azure OpenAI deployed in the same region. We do not transmit your data overseas. Your data is subject to Australian law and the Australian Privacy Act 1988.

We look. We never touch.

Xero access uses OAuth 2.0 with granular read-only scopes. Practice management system access uses a dedicated SQL account with SELECT-only permissions, read locally by our sync agent. We do not modify your data. The one exception: at Tier 2+, we may process transactions in Xero as part of your AP/AR workflow, but only with your explicit approval per transaction or per payment run.

AI processes your data. It doesn't learn from it.

We use Azure OpenAI Service, not consumer OpenAI. Your prompts and outputs are not available to other customers. They are not available to OpenAI. They are not used to train any Microsoft or OpenAI model. They are not stored after processing. The AI runs inside Microsoft's Azure infrastructure, sandboxed from the public internet and from other tenants.

Your practice is completely separate from every other practice.

Every record is tagged with a clinic identifier. Row-level security is enforced at the database layer. There is no scenario in which one practice's data can be seen by, queried alongside, or mixed with another practice's data. This is enforced architecturally.

Encrypted at rest. Encrypted in transit. No exceptions.

Data at rest uses AES-256 encryption via Azure Storage Service Encryption. Data in transit uses TLS 1.2 or higher. Database connections to your practice management system use encrypted channels. Secrets are managed in Azure Key Vault.

We never see your passwords.

Xero access is established through OAuth 2.0. We never see or store your Xero password. The connection token is revocable by you at any time from within Xero. For practice management system connections, we use dedicated read-only accounts created specifically for our service, with credentials stored in Azure Key Vault.

No payment, journal, or lodgement happens without a human saying yes.

AI assists with analysis, pattern detection, and communication drafting. AI does not have unsupervised authority to move money, post journals, lodge BAS, or take any action with financial consequence. Financial calculations are deterministic: computed by rules engines, not by language models. Every material action requires human review and explicit approval.

Only the people who need your data can see it.

Team access is governed by Azure Entra ID with role-based access control and mandatory multi-factor authentication. Every access event is logged to an immutable audit trail. Access is scoped to the specific data required for the service being delivered and is reviewed quarterly.

If something goes wrong, you will know within 72 hours.

In the event of a data breach affecting your data, we will notify you within 72 hours and comply with the Notifiable Data Breaches (NDB) scheme under the Australian Privacy Act. We will tell you what happened, what data was affected, and what we are doing about it.

You leave, we delete. No hostage data.

If you terminate the engagement, we delete your data within 90 days unless a longer retention period is legally required. You can revoke Xero access immediately from within your own Xero account. There is no lock-in, no exit fee, and no data extraction charge.

Keep your own Xero and practice management system credentials secure. Do not share login details over email or messaging.

When a staff member leaves your practice, revoke their access to shared systems promptly. Notify us if they had any interaction with the Siace platform.

If you suspect a security incident involving any system we are connected to, notify us immediately at hello@siacepartners.com.