123TEQTrust and security
How we look after your information.
Every 123TEQ product runs on one engineering, hosting, security and support operation. This page sets out how that operation is managed and the standards we measure it against.
01ISO/IEC 27001
Certification in progress.
We run an information security management system (ISMS) to ISO/IEC 27001:2022, and an independent, accredited certification body has been engaged to certify it. The stage 1 audit is scheduled for December 2026.
- ISMS in operationPolicies, risk management and controls in place across the company
- External certification under wayIn October 2026 we engaged an independent, accredited certification body to certify our ISMS to ISO/IEC 27001:2022. Certification takes two external audits: stage 1 reviews our ISMS design and documentation, stage 2 tests that it works in practice.
- Stage 1 auditDecember 2026
- Stage 2 audit and certification
We will publish our certificate here once it is issued.
02Frameworks
What we measure ourselves against.
Alongside ISO/IEC 27001 we regularly assess our controls against the Australian and US government frameworks below. Our results change as we improve, so we share them with customers on request rather than publishing them.
| Framework | Published by | How we use it |
|---|---|---|
| ISO/IEC 27001:2022 | ISO and IEC | Our ISMS standard. Independent certification in progress. |
| Essentials for enterprise IT | Australian Signals Directorate | Self-assessed against each principle, keyed to the Information Security Manual. |
| Essential Eight | Australian Signals Directorate | Self-assessed maturity level, shared on request. |
| Cybersecurity Framework 2.0 | NIST (US) | Self-assessed and scored by category. |
03For procurement
Ask for our security pack.
If you are assessing 123TEQ as a supplier, we can share more detail under confidentiality.
- Our ISO/IEC 27001 certification status and ISMS scope
- Statement of Applicability summary
- Current self-assessment results for the frameworks above
- Policy list, hosting and data location, backup and continuity arrangements
- Completed security questionnaires
04Report a problem
Found a vulnerability?
If you think you have found a security problem in any 123TEQ product or website, please tell us.
Email security@123teq.com with what you found and how to reproduce it. Please give us a reasonable chance to fix it before you tell anyone else, and do not access or change other people's data while testing.
Machine-readable contact details: /.well-known/security.txt