Security
Built for government data
Constituent correspondence is government data, and Public Pulse is built to hold it — stored in Australia, isolated per office, independently assessed, and answerable to the Privacy Act. This page is written to be handed to your IT or procurement team.
A shared responsibility
Security in a parliamentary office is a partnership. Here is the line between what we carry and what stays your call.
What Public Pulse is responsible for
- Hosting constituent data in Australia and keeping it isolated per office
- Independent assessment, penetration testing, and ongoing certification
- Encryption in transit and at rest, and encrypted provider credentials
- A complete, attributed record of who did what, retained for the office
- Incident response, breach notification, and maintained insurance cover
What your office controls
- Who works in the platform, and what each role is allowed to do
- Which mailboxes and accounts are connected, and revoking that at any time
- What goes into the knowledge base, and who in the office can see it
- Who signs off before a reply leaves the office
- Your data — exportable throughout, and deleted when you close the account
Assessed by people who are not us
Independent assessment against named standards, rather than our own word for it.
CASA Tier 2 assessed
Independent cloud application security assessment, completed by a Google-authorised assessor.
Penetration tested
Tested by an independent security firm, with findings tracked to closure.
ISO 27001 in progress
Certification underway against the international information security management standard.
IRAP-assessed cloud
Built on cloud infrastructure certified for Australian Government data under the Hosting Certification Framework.
Verified Microsoft partner
Microsoft-verified publisher for the Outlook and Microsoft 365 integration.
Privacy Act 1988 (Cth)
Operated under the Act and the Australian Privacy Principles, including the Notifiable Data Breaches scheme.
How the AI is governed
The Member’s name is on every reply that leaves the office. The platform is built so that a person always puts it there.
The human stays in the loop
Pulse drafts. Your staff review, edit, and approve. Nothing leaves the office without a person signing off.
Grounded in your own material
Drafts are written from the office’s approved positions and past correspondence, and cite what they drew on so a reviewer can check it.
Never trains third-party models
Your correspondence and knowledge base are not used to train third-party AI models. Ever.
AI is inside the cover
AI-assisted drafting is a declared technology service under our professional indemnity and cyber policies, not an exclusion from them.
The paperwork
Assessment reports, the current subprocessor list, and data-handling detail live in our Trust Center — privacy and data handling, acceptable use, incident response, breach notification, and the AI disclaimer. Certificates of insurance and completed security questionnaires are available on request.
Visit the Trust Center