OnePassportOnePassportVerified once. Trusted everywhere.
Sign in Book a demo
ComplyProfileGuardianVerifications
HealthcareAged CareDisability SupportChildcare
Background and identity checksMedical ChecksImmunisation ManagementMicro-credentials
For Workers
Explore
FAQHelp Articles & TutorialsWorkforce Risk Scorecard
Community
Customer StoriesNews and Media
Company
AboutPrivacy and SecurityAdvisory ServicesInvestor Relations
Partners
Panels & CertificationsBecome a Partner
Press
Media RequestsContact usPress Kit
 
Book a demoSign in
About · Security

Built to protect the most sensitive workforce data there is.

Identity documents, background checks, immunisation records and visa status. If a system is going to hold this, it has to earn the right.

How the platform is built

What actually protects the data.

Encryption

Identity documents, visa status, immunisation and compliance records are encrypted at the column level in the database, separate from encryption in transit.

Modern, managed infrastructure

Built on a current, supported version of .NET, run on Microsoft Azure, with secrets kept out of application code.

Australian hosting

Run on managed Microsoft Azure infrastructure in Australia, under Australian law and Australian privacy obligations.

Role-based access

Access inside OnePassport Comply is role based, down to the site and record level. Each backend service runs under its own identity, scoped to only what that service needs.

Backed up, and recoverable

Data and documents are backed up automatically to geo-redundant Australian storage, with retention enforced by policy.

Edge protection

Edge protection filters malicious traffic before it reaches the platform, and TLS encryption protects every request in transit.

Identity & source checks

Checked at the source, not taken on trust.

A credential is only as good as what stands behind it. OnePassport connects to the bodies that actually issue and hold the record.

How verification works
AHPRA registration

Practitioner registration currency, conditions and notations monitored, not checked once a year.

AIR, via PRODA

OnePassport is a certified Services Australia PRODA member. Organisations with their own PRODA account can bulk-report vaccination records directly to the Australian Immunisation Register.

Background checks

OnePassport partners with Precise Background Services to deliver nationally coordinated criminal history checks.

Panels & certifications

Registrations and partner accreditations, such as PRODA, and the policies we operate under. See the full list

Frameworks & ongoing assurance

Security aligned to the Australian Privacy Principles, and aligned with recognised information-security control frameworks.

OnePassport carries out regular security reviews and penetration testing. Findings are prioritised and fixed in scheduled remediation cycles.

Read the full Privacy Policy

  1. You see everything held about you

    Your Profile is the complete record. Nothing is held about you that you cannot see.

  2. You choose who sees what

    Access is granted by you, per organisation, per credential, and revoked by you.

  3. You are told first

    If any check returns something, you are notified and given a right of response before anyone else sees it.

  4. You can leave

    Disconnect an organisation, or close your account, without losing access to your own documents.

Responsible disclosure

Found a security issue? Tell us.

Email [email protected] with what you found and how to reproduce it. We will acknowledge it and follow up once it has been assessed.

Contact us
Acknowledgement of Country

OnePassport acknowledges and pays respect to the past, present and future Traditional Custodians and Elders of this nation, and the continuation of cultural, spiritual and educational practices of Aboriginal and Torres Strait Islander peoples.