Security
Your business data, kept safe.
You are trusting ONARA Ops with your customers, your jobs and your money. Here is plainly how we protect it, no jargon.
Encryption in transit
Everything you and your customers send travels over encrypted HTTPS/TLS connections, the same standard banks use.
Role based access
Owner, manager and staff roles mean each person only sees what they need to. You control who can view money, edit jobs, or manage the team.
A full activity log
Every meaningful action on your account is recorded: who did it, what changed and when. Quotes sent, invoices raised and paid, jobs moved, people added or removed. Settings, Activity log, and it is yours to read any time.
Secure sign in
Passwords are stored hashed, never in plain text, and never visible to us. Sessions are protected against common web attacks.
Your data stays in Australia
Your database and files are hosted in Sydney on trusted, enterprise grade infrastructure (Supabase and Vercel), with tenant isolation enforced right at the database, so one business can never see another's data.
Payments
Card payments are handled by Stripe, a PCI DSS Level 1 certified provider (the highest level there is). ONARA Ops never sees or stores your customers' full card numbers.
You own your data
Your customers, jobs, quotes and invoices are yours. Export them whenever you like. There is no lock in and no charge to take your own records with you.
Backups and durability
Your data is stored in redundant, managed cloud infrastructure. We also recommend keeping your own periodic exports so you always hold a copy of your records.
Australian privacy
We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles, and we respond to notifiable data breaches as the law requires.
Found a security issue?
We take reports seriously and will get back to you quickly. Email us at hello@onaraops.com.au.