Learn how Sparks ensures your data stays secure, private, and within Australia. Updated June 2026
Where your data lives
All Sparks Scribe data — including user information, client records, shift notes, invoices, and documents — is stored on Australian-based infrastructure. We use Supabase, hosted on Amazon Web Services (AWS) in the Sydney region (ap-southeast-2).
Some non-sensitive assets — such as interface images, application code, fonts, and static files — are delivered via a global content delivery network (CDN) for faster load times. This is standard practice for web applications and improves performance across Australia.
The authoritative origin and storage of all user data, client information, shift notes, and documents remains on Australian-based servers at all times. The CDN is used only for non-sensitive application assets, not for user or participant data.
• Supabase complies with SOC 2 standards
• Data handling aligns with the Australian Privacy Act 1988 and Australian Privacy Principles
• Supabase Data Processing Addendum guarantees customer data is stored and processed in Australia
Data Origin
Sydney, Australia
Database & Storage
Supabase (AWS ap-southeast-2)
Backups
Regional (Australia)
CDN Caching
Global (non-sensitive assets only)
Sensitive data
Remains on Australian servers at all times
Privacy Compliance
Australian Privacy Act 1988 / APPs
AI Processing
OpenAI — only when user chooses to use AI features. Participant identifiers removed before processing. No AI training on customer data.
Security Certification
SOC 2 Compliant (Supabase)
• Supabase Regions — Oceania (Sydney): supabase.com/docs/guides/platform/regions
• Supabase Data Processing Addendum: supabase.com/legal/dpa
• Supabase Security Overview: supabase.com/security
Questions about data hosting? Contact info@sparksacademy.com.au or visit www.sparkscribe.ai.