Australian core data residency
Core Swell AI governance records, including private evidence, are hosted in Sydney, Australia.
Customer separation and access
Each organisation has a separate account. Access is controlled by role so contributors, owners, reviewers and administrators have access appropriate to their work. Supporting documents and issued reports are not available to other customers.
Explainable governance
Core governance assessments use deterministic rules. Swell records the answers and conditions that led to findings, controls, actions or approval requirements so users can see why something needs attention.
Human decision-making
Swell AI supports governance work; it does not replace legal, privacy, security or professional judgement. Final decisions remain with authorised people in the customer organisation.
No generative AI in core assessments
Customer governance data is not sent to an external large language model for core classification, assessment or approval decisions.
Security practices
We use role-based access controls, authenticated access, tenant-aware authorisation, private storage for supporting documents and audit history for important governance decisions and changes. We continually review safeguards appropriate to the service and its risks.
Transparency
Our Privacy Policy explains personal-information handling. Contact us for current procurement and security information.