At IndyForms, we take data security and privacy seriously. We understand that knowing where your data is stored is an important part of your organisation’s compliance and trust requirements.
Data storage location
All data in IndyForms is securely hosted on Microsoft Azure.
For Australian companies, all data is stored within Australia, under strict local data protection and privacy regulations. IndyForms is Australian owned and operated, and we follow Australian privacy standards in managing and processing your data.
Data residency for international customers
If your organisation is located outside of Australia, IndyForms can host your data in other regions upon request.
This flexibility allows us to meet local compliance requirements and ensure your data stays within your preferred jurisdiction.
Security and compliance
IndyForms uses Microsoft Azure’s enterprise-grade infrastructure, which includes:
End-to-end encryption of data in transit and at rest
Robust access control and authentication systems
Compliance with ISO/IEC 27001 standards for information security
You can learn more about how we protect your data on our Information Security page
Frequently Asked Questions (FAQs)
Q. Where exactly is my data stored?
Your data is stored on Microsoft Azure servers located in Australia for Australian organisations.
Q. Can IndyForms store data in other countries?
Yes. For international customers, we can host your data in other regions if requested.
Q. Does my data ever leave Australia?
No — for Australian customers, your data remains stored in Australian data centres unless you specifically request storage in another country.
Q. Who manages and secures the data?
Data is managed by IndyForms and protected through Microsoft Azure’s security infrastructure. IndyForms maintains ISO/IEC 27001-compliant policies and controls to safeguard your information.
Q. How is my data protected?
All data is encrypted both in transit and at rest, with secure authentication and strict access management in place.
Tips
Include this article in your organisation’s compliance documentation or vendor security checklist.
If your organisation requires data to remain in a specific region, let us know early — we can confirm or configure regional hosting as needed.
Bookmark our Information Security Policy
If your organisation has specific data residency or compliance requirements, please contact us at indy@indyforms.com