Security & trust
My Farm HQ holds the records a farm relies on when a regulator, an insurer or a client asks questions. Here is exactly how that information is protected.
Last updated: 10 September 2026
Encryption everywhere
All traffic runs over TLS, and everything stored — records, documents, photos and videos — is encrypted at rest on disk.
One farm can never see another
Separation is enforced by the database itself, not just hidden in the app. Every read and write is checked against the signed-in person's farm before it runs.
Roles inside your farm
Owners and managers control compliance-critical records. Employees can complete what they're assigned, update their own details and upload their own tickets — but can't delete compliance evidence, edit other people's job steps, or change vehicle registration and expiry details.
Two-factor login
Optional two-factor authentication with trusted-device recognition, so staff aren't prompted on every shift but new devices are challenged.
Audit trail
Key changes are recorded with who did it and when. Deleted records are archived rather than destroyed, and can be restored for 90 days.
Backups and recovery
The database is backed up continuously with point-in-time recovery, so an accidental deletion or a failure can be rolled back.
Ongoing security testing
The platform is scanned automatically for access-control mistakes and vulnerable dependencies, and findings are triaged and fixed.
Your data stays yours
Export your farm's data at any time. We don't sell it, and we don't use it to train public AI models.
Who we rely on
These are the only providers that handle data on our behalf.
| Provider | Purpose | Location |
|---|---|---|
| Supabase (hosting & database) | Application hosting, database, file storage, authentication | Australia / United States |
| Cloudflare | Content delivery, DDoS protection, edge hosting | Global |
| Stripe | Subscription billing and payments | United States / Australia |
| Resend | Transactional and reminder emails | United States |
| Lovable AI Gateway | AI drafting and summarising features | United States |
Certifications and standards
My Farm HQ is not yet ISO 27001 certified. We build to the controls the standard describes — access control, encryption, logging, backup and recovery, secure development and supplier management — and our hosting providers hold ISO 27001 and SOC 2 certification for the infrastructure underneath us.
If your business needs a completed security questionnaire or a written statement of controls before signing up, get in touch and we will provide one.
Reporting a security issue
Found something that doesn't look right? Email info@myfarmhq.com.au or call 0457 904 305. We acknowledge reports within one business day. If a breach affects your data, we will tell you directly and report it as required under Australia's Notifiable Data Breaches scheme.
Want the detail in writing?
Read our privacy policy for what we collect and how long we keep it, or our terms and conditions for the agreement itself.