Serious security

Enterprise-grade controls, without the enterprise friction

ARC is built so you can confidently share sensitive materials and prove what happened, without slowing teams down. Security is at the forefront of the platform, with rigorous standards protecting trust and data integrity.

Sensiba ISO/IEC 27001 Certified
ISO/IEC 27001:2022 certified

Information security management system certified by Sensiba Australia. Valid to October 2029.

How we protect your data

ISO/IEC 27001:2022 certified

Wai Tech Group, the company behind ARC, is certified to ISO/IEC 27001:2022 by Sensiba Australia, an accredited certification body. The certified information security management system covers the design, development, maintenance and support of the ARC platform, including its people, infrastructure and operational processes.

Tenant isolation

Multi-tenant architecture with isolation patterns, per-tenant configuration, and least-privilege access.

Auditability by default

Detailed logs, exportable events, and reporting that supports audits, board governance, and customer security reviews.

Encryption & secure hosting

All data encrypted in transit (TLS 1.2+) and at rest (AES-256), hosted in hardened cloud environments with strict network controls.

Operational resilience

Regular backups, controlled deployments, monitoring, and defined incident response to support business continuity.

Security posture snapshot

ARC supports modern security protocols and processes out of the box.

Encryption in transit (TLS 1.2+)
Encryption at rest (AES-256)
Secure multi-tenant architecture
Tenant-level data isolation
Role-based access control (RBAC)
Least privilege access model
MFA support
Audit logging & activity tracking
Configurable data retention policies
ISO/IEC 27001:2022 certified
Need a detailed security pack?

We can provide a formal security overview covering architecture, hosting, encryption, access controls, and our ISO/IEC 27001 certification.

Request security pack

Security FAQ

How does ARC protect investor relations data?

ARC encrypts data in transit (TLS 1.2+) and at rest (AES-256), runs a multi-tenant architecture with tenant-level isolation, enforces role-based and least-privilege access, and records audit logs of activity. ARC is built and run under an ISO/IEC 27001:2022-certified information security management system.

Is ARC ISO 27001 certified?

Yes. Wai Tech Group, the company behind ARC, holds ISO/IEC 27001:2022 certification issued by Sensiba Australia in October 2026 and valid to October 2029. The certified scope covers the design, development, maintenance and support of the ARC platform, including supporting personnel, infrastructure and operational processes. Certification details are available on request as part of our security pack.

Where is ARC data hosted?

ARC is hosted in hardened cloud environments with strict network controls and secure configuration management, with Australian data residency options for ASX-listed companies.

Can I get a security pack for a vendor review?

Yes. ARC can provide a formal security overview covering architecture, hosting model, encryption standards, access controls, and ISO/IEC 27001 certification details for procurement and security reviews.