2DM Security

Nov 10, 2026

Security at 2DM

Our customers trust us with personal and financial information. Protecting it is central to how we build and run our platform.

Compliance

We run an information security management system aligned with ISO/IEC 27001, ISO 27017 and ISO 27018, and we are working towards a SOC 2 Type II report. We monitor our controls continuously with Vanta.

Infrastructure

The 2DM platform is hosted on Google Cloud Platform with a managed MongoDB Atlas database, in Australia. Both providers hold ISO 27001, SOC 2 and other certifications and are responsible for the physical security of their data centres.

Data protection

•         All data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256.

•         Each customer’s data is logically separated.

•         Backups run daily and are tested regularly.

•         We keep customer data only as long as needed, and delete it when a customer leaves.

Access control

•         Our staff sign in with single sign-on and multi-factor authentication.

•         Access to production systems and customer data is limited to staff who need it, and is reviewed every quarter.

•         Customers can manage their own users and roles, and turn on MFA [or SSO].

Secure development

Every code change is peer reviewed and automatically tested and scanned for vulnerabilities before release. We follow the OWASP Top 10 and have the platform independently penetration tested annually.

Monitoring and incident response

We log security events and monitor them for unusual activity. We have a documented incident response plan, and we notify affected customers promptly if an incident affects their data.

Our people

All staff sign confidentiality agreements, complete security awareness training when they join and every year, and follow our security policies.

Privacy

We handle personal information in line with the Privacy Act 1988 (Cth). See our Privacy Policy and sub-processor list.

Report a security issue

If you think you’ve found a vulnerability or security problem, email security@2dm.com.au. We will respond within 1 business day.