Security and privacy
Rapid has ISO 27001 certified infrastructure, enterprise-grade encryption, and a commitment to protecting your workforce data wherever you operate.
How Rapid protects your data
Six security pillars that keep your workforce data secure, available, and compliant around the clock.
ISO 27001 certified datacentres
Our datacentres meet the highest global standards for information security management.
Encryption at rest
All data stored within Rapid's systems is protected using 256-bit AES encryption.
Encryption in transit
HTTPS encryption secures all traffic between Rapid's platform and your end users.
Access control
Granular role-based access controls protect sensitive information and documentation across your organisation.
Two-factor authentication
Protects accounts against password breaches, keylogging, and other credential-based attacks.
Highly scalable infrastructure
World-class datacentres ensure your data is always available when your business needs it.
Certifications and standards
Rapid and our infrastructure providers maintain a broad portfolio of compliance certifications to protect your data and support your regulatory obligations.
ISO 27001
Information Security Management — Rapid certified
SOC 2 (via AWS)
Service Organisation Controls reports
PCI compliant (via AWS)
Payment Card Industry compliance
Australian Privacy Principles
APP's — Australian Government framework
Enterprise infrastructure,
built for scale
Rapid is hosted on Amazon Web Services, the world's leading cloud provider, with redundant datacentres in Australia and Ireland.
AWS datacentres
Production environment on Amazon Web Services — ISO9001, ISO14001, ISO27001 and PCI compliant with published SOC reports.
Data residency options
Store your data in Australia or Ireland. Backups are held in separate datacentre facilities for redundancy.
Regular automated backups
Rapid performs automated system backups on a regular schedule to mitigate the risk of data loss.
Annual penetration testing
External penetration testing of all websites and networks is performed on at least an annual basis.
Data privacy and governance
Rapid operates under the Australian Privacy Principles and maintains clear, auditable policies for how your data is collected, stored, and used.
Australian Privacy Principles
We operate under the APP's set out by the Australian Government. Our privacy policy clearly describes how we collect, handle, and protect your company's information.
International client support
We support a large number of geographically dispersed international clients. Privacy is at the forefront of our software and server infrastructure, with data residency options to match your regulatory obligations.
Common security questions
Everything you need to complete security questionnaires and due diligence reviews.
Our production environment is hosted with Amazon Web Services, which holds ISO9001, ISO14001, ISO27001 and PCI compliance certifications and publishes SOC reports. Full details are available at aws.amazon.com/compliance/programs.
Ready to see Rapid in action?
Join 1,600+ companies who trust Rapid to protect their workforce data.