How Carbonly secures your carbon data

Australian data hosting, encryption at rest and in transit, granular role-based access control, multi-tenant isolation, a full audit trail, and AI transparency controls.

Australian data hosting, encryption at rest and in transit, granular role-based access control, multi-tenant isolation, full audit trail, AI transparency controls.

Data protection

Australian data residency on AWS Sydney ap-southeast-2. Encryption TLS 1.2/1.3 in transit and AES-256 at rest. Multi-tenant isolation at the database level. Role-based access control with Owner, Admin, Manager, Contributor, Auditor, and Viewer roles plus per-project permissions, alongside a separate Supplier portal role.

AI transparency and control

Low-confidence matches, and units that cannot be converted without a figure the document does not state, go to a reviewer rather than straight to the ledger. Every ledger write is recorded as a typed audit event. Compliance-critical actions always require human sign-off.

Compliance readiness

An audit trail designed to support ASSA 5010 limited assurance. Seven-year retention by internal policy, above the NGER Act's five-year minimum. Period locking freezes a reporting period, and restatements need a recorded reason. Full audit pack generation on demand.