StageDue applies practical privacy, security and access controls designed to protect project and account information.
StageDue is a software product owned and operated by Ineket Pty Ltd.
StageDue applies technical and organisational safeguards designed to protect the confidentiality, integrity and availability of information processed.
Security controls are reviewed and improved as the service, risks and technology evolve.
No online platform can guarantee absolute security. StageDue uses risk-based measures appropriate to the nature of the service and information being processed.
StageDue is designed to limit project information to authorised users.
Access controls may include:
Project organisations are responsible for assigning appropriate user roles and regularly reviewing who has access to their projects.
StageDue’s production safeguards may include:
StageDue uses access controls intended to prevent one organisation from accessing another organisation’s private project information.
Project information is made available based on:
StageDue's administrative portal is not intended to provide routine visibility into subscribers’ private project content.
Administrative access is limited to purposes such as:
StageDue does not ordinarily store complete payment card details.
Card payments are collected and processed directly by the connected payment provider.
StageDue may receive limited transaction information such as:
Unless expressly stated otherwise, StageDue does not hold project funds and does not operate as an escrow service.
Users must independently confirm bank-transfer and externally recorded payments.
StageDue may maintain activity and audit records relating to:
Audit records help support:
Audit records do not replace a user’s contractual, accounting or legal records.
StageDue is designed to support controlled project completion and offboarding.
Depending on the available functionality, authorised users may be able to:
Users should export information they are legally or operationally required to retain before the applicable deletion date.
Information that is no longer required will be deleted or de-identified where reasonably practicable, subject to lawful retention, backup and security requirements.
StageDue may use backup and recovery controls designed to support service restoration following data loss, infrastructure failure or another serious incident.
Backup controls may include:
Information deleted from active systems may remain temporarily in secure backups until the applicable backup cycle is completed.
StageDue maintains procedures designed to:
Where the Notifiable Data Breaches scheme applies, StageDue will assess and report eligible data breaches in accordance with applicable Australian requirements.
StageDue may rely on selected third-party providers for services such as:
StageDue considers the nature of the service, the information involved and the provider’s available security and privacy controls when selecting important providers.
The Privacy Policy contains more information about disclosures and overseas processing.
Security is shared between StageDue, project organisations and users.
Users should:
Suspected vulnerabilities should be reported privately to:
Security Team, StageDue - security@stagedue.com.au
Reports should include:
Security researchers must not:
StageDue is a software product owned and operated by Ineket Pty Ltd. ABN: 12 690 235 682. Security reports: security@stagedue.com.au