How Plain keeps your data safe

Where your data is, who can see it, and how it's protected.

Updated 3 November 2026 · Plain 0.110.0

  • Encryption. All connections use HTTPS. Sensitive details such as TFNs, bank account numbers and super member numbers are encrypted in the database.
  • Your workspace only. Every request is checked against your workspace and your role. Nobody in another business can see your data.
  • Two-step sign-in for everyone who handles money.
  • Backups are taken daily and kept in a second location.
  • Audit trail. Every change is recorded with who made it and when.
  • Hosting. Plain runs on Amazon Web Services in Sydney, Australia.

Read more on the security page and in our privacy policy.