Security & Data Residency
How Immi Flow protects sensitive passport records, client communications, and practice files under the Privacy Act 1988 and OMARA statutory rules.
Australian Primary Data Hosting
Core practice databases and matter records are hosted in enterprise cloud facilities in Sydney, Australia. Specialized third-party processing (such as cloud storage, email delivery, and AI document extraction) is governed by APP 8-compliant Data Processing Addendums as disclosed in our Privacy Policy.
Enterprise-Grade Encryption
All data in transit is protected using modern TLS 1.3 encryption. Document assets and database records are encrypted at rest with industry-standard AES-256.
Pre-Intake Malware Scanning
Every document submitted via client portal, WhatsApp, or cloud sync is scanned in-stream via ClamAV anti-malware engines before reaching your agency records.
7-Year Tamper-Evident Archive
Every file action, version change, and agent attestation is permanently preserved for the mandatory seven-year retention window, exportable in one sealed ZIP archive.
OMARA Guidance on AI Use
OMARA guidance states that Registered Migration Agents remain responsible for the immigration assistance they provide when using AI, regardless of the source. The Code of Conduct continues to apply, and written client consent is required before personal details are entered into an AI platform or system. Immi Flow was designed around these requirements:
- Human Review Gate: Automated document extractions and criteria validations remain proposals until explicitly approved by the RMA.
- Agent Identity Attestation: Every accepted finding logs the reviewing RMA's MARN, timestamp, and record hash.
- Prior Written Consent: Client consent for AI-assisted file processing is gathered electronically before personal details are processed.
- Audit Responsiveness: Sealed matter exports support retrieval of the records needed for compliance responses.
Reporting Security Vulnerabilities
If you have identified a potential security vulnerability or have questions regarding our data protection posture, please contact our security team at security@immiflow.com.au.