Security and trust
A utility server is critical infrastructure. We treat it that way.
How we protect the service
Protected throughout
Encryption and strong authentication for people, systems and devices.
Least privilege
Access is limited to what each person and system needs.
Monitored around the clock
The service is watched continuously, and we act quickly when something changes.
Hosted in Australia
Client data stays in Australia.
Our approach
Security is part of how we design, build and run the service. We apply it to the platform, to the way our team works, and to the partners and suppliers we rely on.
Monitoring and response
The service is monitored around the clock. If something affects a client, we let them know and keep them informed until it is resolved.
Assurance
Our security programme is aligned with recognised frameworks, including the Australian Energy Sector Cyber Security Framework, and the platform is independently tested. We can share more with clients and prospective clients under NDA.
Reporting a vulnerability
If you have found a security issue in anything we run, email security@corvane-energy.com with enough detail for us to reproduce it. Reports go to our security team, and we aim to acknowledge them within two business days. Please give us reasonable time to investigate and fix an issue before you disclose it, and do not access, change or delete data that is not yours. Current contact details are in our security.txt. We do not run a bounty programme.
Need more detail for a security review?
We share more about our security programme with clients and prospective clients under NDA.