We renewed our information security certification with zero non-conformities. Your data stays yours.
ISO 27001 is the international standard for information security management. Recertification means an external auditor came in, looked at how we actually handle data rather than how we say we do, and found nothing to raise.
What was audited
The scope covers the platform the EWD runs on: access control, change management, incident response, supplier arrangements and the data handling behind driver records.
Fatigue data is stored in Australian data centres and encrypted both at rest and in transit. That has not changed; the audit confirmed it still holds.
Your data stays yours
We do not sell or share fatigue data. Records are retained for the three years the NHVR requires, and older records are archived rather than discarded so they can be recovered on request.
Drivers can delete their account at any time from Profile. Operators can too, once anything still inside the three-year retention window has been exported or transferred.
Why we publish this
A free product invites the assumption that something else is being monetised. Certification is one of the few ways to answer that with evidence rather than a promise.