Privacy, Data Handling & Compliance

When you work with Qadence, your business records stay yours and your operational documents are never retained after processing. Here is how we protect your contact information, handle operational workflows, and align with Australian statutory requirements.

Entity: Qadence Pty Ltd ABN: 69 702 704 667 / ACN: 702 704 667 Effective: 26 October 2026 Privacy Enquiries: [email protected]

Statutory Privacy Policy

Privacy Policy

Sets out how Qadence Pty Ltd collects, uses, protects, and manages personal and business contact details, account and billing records, and enquiries on qadence.tech in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Collects only the business and contact information needed to deliver and administer your services
Never sells, rents, or trades your contact details or uses client records for third-party advertising
Clear process for access, correction, and privacy enquiries under the APPs

Read the Privacy Policy

Client Operational Workflows

How We Handle Your Data

A plain-language, outcome-level overview for prospective and current clients explaining who can see your operational documents, how payloads travel through our service, and what happens the moment a workflow finishes.

Zero human access to payloads: Automated processing from start to finish; Qadence staff never view incoming documents
Encrypted in transit in both directions: Protected from your endpoint to Qadence and back to your endpoint
Zero retention after processing: Submitted extraction payloads are discarded immediately once your result is returned
100% client ownership: Plaintext exists only at your own authorised endpoints

Read Client Data-Handling Overview

Compliance & Regulatory Alignment

Qadence aligns its privacy, data-handling, and operational practices with the following Australian statutory obligations and security control principles:

01 · Statutory PrivacyPrivacy Act 1988 (Cth) & Australian Privacy Principles (APPs)

Full adherence across all 13 Australian Privacy Principles, with particular focus on APP 11 (zero-retention disposal of client operational payloads immediately after processing completes, so nothing is retained to be breached) and OAIC Notifiable Data Breaches (NDB) scheme readiness.

02 · Security ControlsASD ISM & ACSC Essential Eight Control Alignment

Operational security practices aligned with Australian Cyber Security Centre (ACSC) Essential Eight and Australian Signals Directorate (ASD) Information Security Manual (ISM) principles—including strict identity-only workspace access, no shared logins or password fallbacks, encrypted transit in both directions, and change-controlled infrastructure.

03 · Commercial RecordsSupplier & Invoice Integrity (ABR Verification & Mandatory Human Confirmation)

Public-registry verification against the Australian Business Register (ABR) and mandatory human operator confirmation inside the client workspace before any extracted supplier quote, invoice, or enrichment field is written to client records.

04 · Payment BoundaryZero Cardholder Storage (Out of PCI DSS Scope)

Qadence does not store, process, or transmit payment card numbers across its workflow tools or client workspaces, keeping workflows outside PCI DSS cardholder data scope.

05 · Communications & ApprovalsSpam Act 2003 (Cth) & Electronic Transactions Act 1999 (Cth) Compliance

Full compliance across all business communications, consent and unsubscribe handling, and electronic workflow confirmations and approvals.

Questions or Security Due Diligence

If your procurement, legal, or compliance team requires our technical Security Whitepaper or has a question about our privacy and data-handling commitments, please reach out to your Qadence account contact or email [email protected].