Multi-organisation separation
Organisation-owned records include an organisation boundary and are protected by active membership checks.
SECURITY & TRUST
Trust must be designed into every workforce decision.
SkillWard’s foundation uses multi-organisation separation, role-scoped access and auditable workflows. We make no claim of external certification that has not been formally achieved.
Role-based access
Authorisation comes from protected memberships and assignments—not editable browser metadata.
Department scope
Managers and trainers are limited to authorised facilities, departments and relationships.
Authentication
Supabase authentication provides secure sessions, invitation and password-recovery foundations.
Protected storage
Organisation-aware storage policies separate approved file paths.
Audit history
Key administrative, training, assessment and support actions are designed to remain attributable.
Backups and recovery
Operational backup and recovery procedures require final production configuration and regular testing.
Incident readiness
A documented incident-response process and contact path are required before a hospital pilot.
Privacy and minimisation
The intended training workflow does not require patient information; organisations should not upload it.
Current assurance position
SkillWard is not claiming ISO 27001, SOC 2, HIPAA certification, Australian government certification or external clinical approval. Formal risk assessment, penetration testing, operational monitoring, incident exercises and legal review remain required before production hospital use.
Security contact
Report a suspected security issue through Contact & Support. Do not include passwords, patient information or sensitive workforce records in the initial message.
READY FOR THE NEXT STEP?