AI ReceptionPet Owner AppAI AssistanceOnline BookingBack OfficeClinic AnalyticsPricingWhy ApexHQ VetBlogAbout us Book a demo
Trust

Your data stays yours, and stays in Australia.

ApexHQ Vet helps your team book, document and follow up. It never makes clinical decisions. Your clinic's data stays under your control, handled in a way you can explain to your team and your clients.

Australian-built & AU-hosted Privacy Act + GDPR-aligned Hosted on ISO 27001 & SOC 2 certified infrastructure No third-party trackers on booking

Your data stays in Australia

Clinic records, notes and consult recordings are stored in Sydney, on ISO 27001 and SOC 2 certified cloud infrastructure, with strict access controls. We don't offer overseas regions, because your clients' data shouldn't leave the country.

Encrypted and access-controlled

Everything is encrypted in transit and at rest. Each staff member sees only what their role allows, every sensitive action is logged, and backups are encrypted and kept in Australia.

We don't train AI on your data

Your consults are used to write your notes, nothing else. Our AI providers are bound not to keep your content or train on it. Every AI note is a draft until a vet approves it.

Last updated 23 October 2026

Our approach

We treat clinic and pet owner data as carefully as you do. Our security and privacy programme is designed to meet the Australian Privacy Act 1988 (APPs) and to align with the EU/UK GDPR where it applies. This page summarises how we protect data and how partners and clinics can obtain our compliance documents.

Where your data lives

Our database and uploaded files (consultation recordings, documents and photos) are hosted in Sydney, Australia, on ISO 27001 and SOC 2 certified cloud infrastructure, in private storage opened only through short-lived signed links. Some specialist functions (AI transcription and note-drafting, SMS and email) are performed by trusted providers, some located overseas, under contractual safeguards including Standard Contractual Clauses (SCCs) and data-processing agreements consistent with Australian Privacy Principle 8.

Security measures

  • Encryption in transit (TLS) and at rest across the platform.
  • Role-based access control; pet owners sign in with one-time SMS codes (no stored passwords); staff passwords stored only as secure hashes.
  • Audit logging of administrative actions on pet owner data.
  • A documented breach-response procedure aligned to GDPR (72 hours) and the Australian Notifiable Data Breaches scheme.
  • No advertising or third-party analytics trackers anywhere in the booking flow.

Data protection documents

For partnership and procurement reviews, we maintain a Data Protection & Compliance Pack (Article 30 record of processing, lawful bases, subprocessor register with SCCs, technical and organisational measures, breach procedure and data-subject-rights process) and can provide a signed Data Processing Agreement (DPA) to clinics and integration partners. To request these, contact support@apexhqvet.com.au.

Subprocessors

We use a small set of vetted providers (database hosting, application hosting and recording storage, SMS/voice, transcription, AI note-drafting, and email), each under a data-processing agreement. The current register is available on request as part of our compliance pack.

AI and clinical safety

AI-generated clinical notes are always drafts for a vet to review and approve. Nothing is auto-finalised. Under our agreements, our AI providers do not use your content to train their models. We are introducing pseudonymisation to minimise the personal information sent to AI providers.

Your rights and contact

Individuals can request access to, correction, export or deletion of their personal information. We respond within 30 days. Privacy questions and DPA requests: support@apexhqvet.com.au. See also our Privacy Policy.