Get in touch

Privacy and security

How ShepTech handles data in the software it builds, and what this website does with yours.

Standards every build meets

  • Australian Privacy Principles

    Built to the APPs: collect only what's needed, say why, and keep it secure.

  • Encrypted in transit and at rest

    HTTPS everywhere; data on Google Cloud is encrypted at rest by default.

  • Card payments by Stripe

    Stripe is certified PCI DSS Level 1; card numbers never reach ShepTech's servers.

  • Doctor-reviewed content

    Clinical content and logic are written or checked by doctors.

  • You own it

    Code, content and accounts are handed over in your name.

Where data is stored

Platforms run on Google Cloud through Firebase. Data is encrypted in transit and at rest, and access is locked down with security rules so each user sees only their own records.

Google stores data in the region a project is set up in. The education platforms built so far use Google's United States region. A new project can use Google's Sydney or Melbourne region instead, so data stays in Australia. If personal information is stored overseas, the Australian Privacy Principles (APP 8) say your privacy policy has to tell people, and I'll help you word it.

Patient information

Education platforms use fictional or de-identified cases, never real patient records. Skin Cancer Billing stores no patient or personal data at all.

If a clinical tool needs patient information, it collects only what the task needs, stays in an Australian region, and logs who can see what. We agree this in writing before the build starts.

Payments, ownership and certifications

Card payments go through Stripe, which is certified to PCI DSS Level 1. Card numbers never reach ShepTech's servers, and payments go straight to your own Stripe account.

At handover, the code, content, data and every account are in your name.

ShepTech is a one-person studio and doesn't hold ISO 27001 or SOC 2 certification. If your organisation has a security questionnaire, I'll answer it in writing.

This website's privacy policy

This website uses no cookies, no analytics and no advertising trackers. Fonts and images are served from this site, not from third parties.

The enquiry form doesn't send anything to a server. It opens your own email app with your message filled in, and you decide whether to send it. If you email or phone, your details are used only to reply to you and are never sold or shared.

The site is hosted by Netlify, which keeps standard server logs, such as IP addresses, for security. To see or correct anything ShepTech holds about you, or to make a complaint, email alex@ndhub.com.au.

Last updated 9 November 2026.

Get in touch

Questions about privacy or security? Ask me directly.