Our Trust Centre
Meshed protects the information Australian education providers rely on every day. Our security programme combines internationally recognised standards, independently verified controls and continuous monitoring to help safeguard your data and support your compliance obligations.
Security Highlights
ISO/IEC 27001:2022 Certified
Globally recognised data protection management
Independently Penetration Tested
Regular, rigorous third-party ethical hacking
Dedicated Information Security Programme
Proactive risk management and continuous oversight
Trusted by Australian Education Providers
Purpose-built compliance tailored for educational institutions
Why institutions trust Meshed
Security by design
Security is embedded into our platform
architecture, software development
lifecycle and operational processes,
protecting customer information at every
stage.
Independently certified
Our Information Security Management
System (ISMS) is certified to ISO
27001:2022, reflecting internationally
recognised best practice.
Continuously tested
We regularly engage independent security
specialists to perform penetration testing
and validate the effectiveness of our
controls.
Built for Australian Education
Meshed supports institutions operating within Australia’s education regulatory environment, including obligations associated with:
TEQSA
TEQSA
ASQA
ASQA
TCSI
TCSI
PRISMS
PRISMS
ESOS
ESOS
Security Overview: Protecting Sensitive Educational Data
Education providers manage highly sensitive information every day.
Meshed helps safeguard information across the entire student lifecycle, including:
Student records
Academic results & progression
Financial information
Government reporting data
Staff information
Institutional records
Our security framework is designed to protect the confidentiality, integrity and availability of customer data.
Our Security Framework
Our comprehensive information security programme is designed around the core pillars of the ISO/IEC 27001 framework to ensure complete data protection and operational resilience:
01 Governance & risk management
02 Identity & access management
03 Secure software development
04 Threat intelligence & hunting
05 Vulnerability & continuous monitoring
06 Independent security testing
07 Incident response
08 Security awareness training
Compliance & Certifications: Independently Verified Security
Meshed has achieved ISO 27001:2022 certification, demonstrating that our Information Security Management System aligns with internationally recognised best practices for managing information security risks.
Our certification was achieved following an independent audit with no major non-conformities.
Our security framework is designed to protect the confidentiality, integrity and availability of customer data.
Security Operations & Continuous Assurance
Security is an active, ongoing mandate rather than a static project. We continually assess, monitor, and enhance our infrastructure to maintain a highly resilient cloud platform.
Independent Penetration Testing
Certified third-party specialists conduct annual testing across our web applications, APIs and supporting AWS infrastructure.
Vulnerability Management
Automated scanning helps identify vulnerabilities, which are assessed, prioritised and remediated based on risk.
Continuous Security Reviews
Security controls, policies and operational processes are regularly reviewed and enhanced to address evolving threats and industry best practices.
Data Protection
Data is encrypted in transit using TLS and at rest using AES-256 encryption.
Access Control
Least-privilege principles and Role-Based Access Control (RBAC) restrict access to authorised personnel.
Audit & Change Management
Security events and administrative activities are logged, while changes undergo peer review and testing before production release.
Business Continuity
Automated backups, recovery procedures and documented continuity plans help protect customer data and maintain service resilience.
Platform Reliability
Designed for Business Continuity
Educational institutions depend on reliable access to mission-critical systems throughout the academic year. Our operational practices are engineered to safeguard platform stability, manage operational risk, and ensure continuity of service.
Maintain Platform Resilience
We design our core systems to protect data integrity and maintain operational stability. By incorporating data replication and redundant recovery layers, we protect your institutional records against localised hardware or system failures.
Support Business Continuity
We maintain a strict backup regime featuring automated, regular backups replicated across multiple isolated availability zones. For maximum security, these backups are securely stored within an independent, logically air-gapped cloud environment, ensuring our recovery data remains protected against cross-account security incidents.
Manage Operational Risk
Our technical team utilises continuous monitoring and alerting systems to track platform health, resource utilisation, and system performance. This active oversight allows us to maintain visibility and address capacity or performance anomalies early.
Respond Effectively to Incidents
We maintain a formally documented Incident Management Policy with defined escalation pathways. In the event of an operational anomaly, our technical team is alerted to rapidly isolate the issue, restore service, and provide transparent communication to our clients.
Continuously Improve Platform Reliability
Every operational review and system update is focused on refining our infrastructure. By analysing performance trends and incident post-mortems, we continuously adapt our systems to deliver a stable, reliable platform that evolves alongside your institutional needs.
Security Resource Centre
Access documentation to support procurement, vendor assessments and security reviews.
Available upon request
- Security Questionnaire Request
- Penetration Testing Attestation Request
- Business Continuity Summary Request
- Architecture Overview Request
- Data Protection Summary Request
Responsible disclosure
We welcome responsible disclosure of potential security vulnerabilities. If you believe you've identified a security issue, contact securityteam@meshedgroup.com.au