Compliance & Security

Overview

Catch‑e is a cloud-based software platform supporting fleet leasing, fleet management and salary packaging for organisations across Australia and New Zealand. This article summarises how our platform is hosted, secured and independently certified, so you have a reference point for your own vendor due diligence process.

Where your data is hosted

Catch‑e is hosted in the cloud using enterprise-grade infrastructure located in Australia. Our published Privacy Policy commits to storing information in ISO/IEC 27001 accredited data centres located in Australia, and this underpins our approach to data residency for Australian customer data.

Independent certification

Catch‑e Pty Ltd is certified to ISO/IEC 27001:2022, the international standard for information security management systems. Our certification is issued by BSI, an accredited certification body, and covers the provision and support of our cloud-based leasing and fleet management software.

This means our information security practices — including risk management, access control, incident response, business continuity and supplier management — are independently audited on an ongoing basis against a recognised global standard, not just self-assessed.

How we protect your data

At a summary level, our security program includes:

  • Encryption of data in transit and at rest Access control, including multi-factor authentication and the principle of least privilege for staff and system access.

  • Regular backups and tested recovery procedures to protect against data loss Continuous monitoring of our environment for security events, with a defined incident response process

  • Regular vulnerability management, including patching against a defined schedule Formal governance, with security overseen by a dedicated internal governance committee and an appointed Information Security Officer Supplier due diligence, applying security requirements to any third party who may support our services

Privacy

Catch‑e handles personal information in line with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and, where relevant, the New Zealand Privacy Act 2020. Our full Privacy Policy is available here, and our Privacy Officer can be contacted for any privacy-related enquiries.

Requesting further information

For customers requiring more detailed security or compliance information as part of a formal due diligence or procurement process — such as our Statement of Applicability, audit summaries, or specific contractual security clauses — please contact your Catch‑e success team, who can coordinate a response with our Information Security Officer.