Enterprise-grade security
& compliance
Your home equity is one of your most valuable assets. We built Our Leg Up from the ground up with security at its core — not as an afterthought.
99.9%
Uptime SLA
256-bit
AES Encryption
SOC 2
Type I Certified
AU Only
Data Residency
Security Features
Security you can trust
Every layer of our platform is designed with enterprise security requirements in mind — from the infrastructure we run on to the way we handle your data.
99.9% Uptime SLA
Our infrastructure is built for reliability. We maintain a 99.9% uptime service level agreement backed by multi-region redundancy on AWS.
End-to-End Encryption
All data in transit is encrypted using TLS 1.3. All data at rest uses AES-256 encryption. Your information is never exposed in plaintext.
SOC 2 Type I Certified
We are independently audited against the SOC 2 framework by Secureframe, covering security, availability, and confidentiality of your data.
Australian Data Residency
All data is stored in Australian AWS data centres. We never transfer your personal or financial data outside of Australia.
Role-Based Access Control
Access to sensitive systems follows the principle of least privilege. Permissions are reviewed quarterly and revoked upon role change.
Complete Audit Logging
Every significant action on our platform is logged and retained. Our incident response process ensures rapid detection, escalation, and remediation.
Infrastructure
Enterprise infrastructure,
built to scale
Our Leg Up runs on Amazon Web Services — the same cloud trusted by the world's largest financial institutions. We inherit AWS's certifications while adding our own layers of protection.
Multi-Region Redundancy
Critical services replicated across multiple AWS availability zones. No single point of failure.
Auto-Scaling Infrastructure
Capacity scales automatically with demand so performance is never compromised under load.
Zero-Downtime Deployments
Blue-green deployment pipelines ensure updates roll out without impacting availability.
24/7 Monitoring & Alerting
Continuous observability with automated alerts and an on-call rotation for immediate response.
Data Protection
Your data, protected
We treat your personal and financial data with the highest level of care. Here's exactly how we protect the information you entrust to us.
Personal Information
- Collected only for the stated purpose
- Never sold to third parties
- Accessible only to authorised personnel
- Deletable on request under Privacy Act 1988
Financial Data
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Isolated database environments
- Tokenisation for sensitive values
Data Retention
- Defined retention schedules per data class
- Automated purge of expired records
- Audit trail maintained for compliance
- Secure deletion using industry standards
Certifications
Independently verified
Our security controls are continuously monitored and audited by Secureframe — an independent third party. Visit our public Trust Centre to view live control status, request our SOC 2 report, and review our third-party vendors.
Our Leg Up Trust Centre
SOC 2 Type I · Live controls · Third-party vendors · Policy docs
SOC 2 report available on request. Contact security@ourlegup.com.
Have questions about our security practices?
Our team is happy to walk you through our controls, share documentation, or answer any specific compliance questions you have.