Stored in Australia
All data at rest in Sydney (ap-southeast-2)
Voice audio not retained
Transcribed live, discarded immediately
Encrypted in full
At rest and in transit, always
No AI training on your data
Never, under any circumstance
What data does
Hinterflow handle?
Every piece of data has a purpose and a retention policy. Here's exactly what we hold and how we protect it.
privacy@hinterflow.comVoice audio
Audio from the voice interview is processed in real time to produce a transcript. The raw audio stream is never recorded or stored. Once transcribed, it is gone.
Interview transcript
The text transcript of the interview is stored in your account. It's used to extract assessment fields and is associated with your organisation only.
Extracted assessment data
The structured field values extracted from your transcript — what gets used to fill the form. Stored in your account, associated with the session it belongs to.
AI inference
Voice transcription and field extraction are processed by AI models running on AWS infrastructure in the United States. This processing is transient — data is sent, the result returned, and nothing is retained by the AI provider.
Account information
Your name, email address, and organisation. Required for your account. Nothing clinical.
Built on enterprise
cloud infrastructure.
Hinterflow runs on enterprise cloud infrastructure in Australia, with security controls across every layer — traffic, authentication, access, storage, and monitoring. We use managed security services throughout rather than rolling our own.
Data stored in Australia
All data at rest in Sydney (ap-southeast-2)
AI inference via AWS
Processed in US under Data Processing Agreement
Traffic protection
Rate limiting and threat detection on every request
Encrypted at rest
AES-256 on all stored data
Encrypted in transit
TLS 1.2+ on all connections
Secure authentication
Managed identity with MFA support
Least-privilege access
Services access only what they need
Privacy first.
Always.
Australian Privacy Principles
We handle personal information in accordance with the Privacy Act 1988 (Cth), including requirements around transparency, security, access, and cross-border disclosure.
Data stored in Australia
All your data — transcripts, extracted fields, account information — stays in Australia on AWS infrastructure in Sydney. AI processing happens in the US under contract, but nothing is retained there.
No AI training on your data
We don't use your data to train AI models. Not us, not our AI providers. Your data is used to provide the service, nothing else.
Security questions or concerns?
Contact our privacy officer directly. We respond to all security enquiries personally.