Security

1. Our approach

Security and governance are central to what Niutech Pty Ltd (ABN 91 691 210 429) is building. This page describes our security posture for the current niutech.ai marketing website and early-access waitlist. It will be expanded as we launch the Niutech product (accounts, teams and the software factory).

2. The data we hold today

The public site collects very little: only the email address you provide to join the waitlist, plus limited technical logs generated by our infrastructure. We do not collect payment, financial, health, or other sensitive information on this site. Minimising the data we hold is itself a security control.

3. Infrastructure

The site and its data are hosted on reputable, security-conscious providers:

• Vercel — website hosting and delivery, served over HTTPS/TLS;
• Supabase — a managed PostgreSQL database that stores waitlist sign-ups.

All traffic to the site is encrypted in transit.

4. Access and secrets

Access to our systems and data is limited to authorised personnel on a need-to-know basis. Application secrets and API keys are held in our providers' managed environment stores — not in source code. Waitlist data is protected by database row-level security, so it can only be written by our server, not read or altered by public clients.

5. Data storage and transfer

Data is encrypted in transit (HTTPS). Our providers may store and process data outside Australia; how we handle international transfers is described in our Privacy Policy.

6. Monitoring and incident response

We monitor our services for availability and abuse, and we aim to respond promptly to any security incident. Where an incident affects your personal information and the law requires it, we will notify you and the relevant authority.

7. Responsible disclosure

If you believe you have found a security vulnerability in niutech.ai, please email security@niutech.ai with the details. We ask that you act in good faith — do not access, modify, or delete data that isn't yours, avoid privacy violations and service disruption, and give us reasonable time to investigate and remediate before any public disclosure. We appreciate the security community's help in keeping Niutech safe.

8. As the product develops

The Niutech platform is being built with governance and auditability at its core. As we launch product features, we will add and document further controls — such as per-tenant data isolation, immutable audit trails, and independent reviews — and update this page accordingly.

9. Contact

Security questions or reports: security@niutech.ai (Niutech Pty Ltd, New South Wales, Australia).