Security & privacy

Security at CredPass

You trust CredPass with sensitive information - professional credentials, identity details, and the documents behind them. Protecting that information is central to what CredPass does. We work to three simple principles.

You control your data

You decide who sees what.

Documents stay yours

They’re never used to train AI.

We keep improving

Security is an ongoing commitment.

Data protection

In transit

All communication between your device and CredPass is protected with industry-standard TLS encryption, so your information can’t be read as it travels.

At rest

Your information - including your credential documents - is encrypted while it’s stored.

Your documents and AI

When you upload a credential, CredPass uses AI to read the key details - the issuer, number and dates - so you don’t have to type them in.

Your documents are never used to train AI models. The AI reads a document to extract those details, and nothing more.

Where your data is stored

CredPass data is stored in Australia. Some processing - such as reading documents or sending email - uses trusted providers who don’t keep or train on your information.

Data reliability

Your data is backed up regularly, so it’s protected against loss.

Account access

You sign in with your email and password, or with your Google account. Passwords are stored securely - never in plain text.

Two-factor authentication Coming soon

An extra layer of protection, planned for a future release.

Who can access your information

Access is role-based.

Educators manage their own data and control what’s shared.

Directors see only the compliance information relevant to their centre - never an educator’s private identity page, and never their CV unless the educator chooses to share it.

CredPass staff access your data only when needed to support you.

Payments

Subscription payments are handled securely by Stripe, a leading global payments provider. CredPass never sees or stores your card details.

Data privacy

CredPass handles personal information in line with the Australian Privacy Act. You can read our full Privacy Policy for the details.

You can delete your account at any time from Settings. When you do, your data is removed.

Report a vulnerability

Found a security issue? We’d like to hear about it.

Email our team at security@credpass.com.au and we’ll take it from there.