Security

Your data,protected by default.

Arohalink is built on modern security foundations and hosted in-region for Aotearoa New Zealand. We treat care, contract and identity data with the seriousness it deserves.

  • Encrypted at rest & in transit
  • In-region hosting (NZ)
  • Role-based access
A safe online platform
How we protect data

Layered protection, end to end.

Encryption

TLS in transit, encryption at rest. Backups are encrypted, separately stored and regularly tested.

Regional hosting

NZ customer data is hosted in-region. We do not move data outside your region without explicit consent.

Granular access

Role-based permissions per organisation, per branch and per role. Least-privilege by default.

Audit logs

Every sensitive action is logged: contract changes, downloads, role changes, exports.

Threat protection

Anomaly detection, brute-force throttling, and routine penetration testing.

Document vault

Worker IDs, qualifications and right-to-work documents are stored separately, with strict access boundaries.

Disclosure

Found something? Tell us.

We welcome responsible disclosure. Email support@arohalink.com with details and we will respond within one business day.

FAQ

Common security questions.

Yes — Aotearoa New Zealand customer data is stored in-region.

Security questions before you sign?