Trust Center
Security & trust, built in from the ground up
Cendro handles data that matters. Here is how it is encrypted, stored, controlled, and independently governed, and how your security team can verify it.
Data residency
Your data stays in the region you choose
At sign-up you choose the AWS region where your data lives — for Australian organisations that's Sydney or Melbourne — and it stays there. Encryption keys never leave your premises, so even within that region we only ever hold encrypted data.
Backed by TIMG's certified information management
Cendro is a product of TIMG (The Information Management Group Pty Ltd), which holds ISO/IEC 27001:2022 certification. TIMG manages sensitive records for corporate and government clients who demand the highest levels of information security and governance, and its operations are certified and compliant with the highest Australian and international information-management standards. Cendro is built and operated within that framework.
ISO/IEC 27001:2022 certified
TIMG holds ISO/IEC 27001:2022 certification for its information security management system.
AFP-checked personnel
All TIMG staff are Australian Federal Police (AFP) checked.
Trusted by government
TIMG safeguards sensitive records for corporate and government clients across Australia.
Encryption & key management
Files are encrypted with AES-256, and data keys are wrapped with RSA. A unique key pair is generated per client, with a passphrase-wrapped key slot for every user.
Data residency you control
Your data is stored in AWS S3 in the region you choose, so you can keep records onshore to meet Australian data-sovereignty and sector requirements.
Integrity & retention
Archived data is stored under S3 Object Lock with version history, so archives can't be quietly altered, and retention rules govern how long records are kept.
Access control & audit
Role-based team access, retrievals requested by users and approved by an admin, brute-force rate limiting, and a complete audit trail and chain of custody for legal and regulatory needs.
Trusted by Australian organisations
In use across the sectors that need it most
Cendro is already helping organisations across local government, healthcare, education and sport gain control of inactive data, reduce storage costs, and improve information governance.
Give your data a secure home
Explore plans for Archive and Cloud, or ask our team a security question.
Cendro is a product of TIMG (The Information Management Group Pty Ltd), a specialist information-management provider. Security questions? Email [email protected].