Security and data protection

Last reviewed: 23 September 2026

SignalStamp helps organisations manage assessments, supporting evidence and improvement work. We use hosting protections and application controls to protect that information and manage access to it. This page describes the security of the SignalStamp assessment application, operated by Business 4.0 Pty Ltd.

Hosting and data location

SignalStamp’s core assessment application and primary database are hosted with DigitalOcean in Sydney, Australia. DigitalOcean provides the hosting infrastructure and SignalStamp manages the application and account access.

Our Privacy Policy explains how other services handle information. DigitalOcean publishes information about its security controls. Its provider assurance does not certify SignalStamp.

Protecting account access

SignalStamp uses multifactor authentication and controls that help protect sign-in and account recovery. Use an individual account, keep your login details private and review who has access to your organisation’s work.

Organisation permissions and shared information

Access to assessment information depends on organisation membership and permissions. Organisation administrators can manage participation and should review access as teams change.

Check the intended audience before sharing a report or export. Recipients may retain copies of information you send them.

Protecting and recovering information

Connections to the assessment application use HTTPS. The managed database is encrypted at rest and backed up to support recovery.

Information retention and deletion are handled as described in our Privacy Policy. Service commitments are set out in the applicable terms.

Maintaining application security

We review the application and its dependencies as part of maintaining the service. Security checks and monitoring help us identify issues that need attention.

DigitalOcean maintains the security of its hosting infrastructure. No online service can guarantee protection against every threat.

Reporting a security concern

If you suspect unauthorised access or identify a security issue, contact admin@signalstamp.com. Include the affected page or feature, when the issue occurred and a brief description so we can investigate.

Do not email passwords or confidential assessment information. If further information is needed, we can arrange an appropriate way to provide it.

Read our Privacy Policy and Terms of Service for related information.