Public overview
Compliance & AI
Our approach to adviser-led AI, review and approval.
Read overviewA clear view of your protection.
Information as at 27 September 2026Our core service providers
Meet the providersProtection, at every layer.
View all01INFRASTRUCTURE
Infrastructure security
- Primary database hosted in Sydney
- Private document storage
- Platform service keys held server-side
02ACCESS & IDENTITY
Access & identity
- Database-enforced firm separation
- Role-based client access
- Authenticator-based MFA available
03ARTIFICIAL INTELLIGENCE
Privacy-conscious AI
- Personal identifier masking
- Optional identity protection
- Firm-level AI controls
04ADVISER OVERSIGHT
Advice & oversight
- AI-generated advice starts as a draft
- Adviser review and approval
- Visible sources and assumptions
These summaries describe our approach, not an independent audit or live monitoring results.
Australian core hosting. Clear about what goes where.
Our primary database and file storage are in Sydney. AI and meeting transcription features can process information outside Australia.
See providers and locationsDOCUMENTATION & DUE DILIGENCE
Resources
Understand how Advium works, and get the information your firm needs to assess it.
On request
Security documentation
Discuss the security materials your practice or licensee needs.
Request informationOn request
Data processing terms
Explore data handling and your firm’s requirements.
Discuss requirementsRequests open a short enquiry form. We will confirm which materials are available and any access requirements.
Does all of our data stay in Australia?
The primary database and file storage are in Sydney, as is the application backend. AI features and Recall.ai meeting recording and transcription can process information overseas, and web delivery uses global infrastructure. Optional integrations may introduce other locations. We can help your firm understand the features it intends to use.
Is Advium independently certified?
Not yet. SOC 2 Type 1 readiness is in progress and no independent SOC 2 report has been issued. ISO 27001 certification is on the roadmap. A service provider's certification does not certify Advium itself.
Can AI issue advice to my clients?
Advium's AI supports the adviser with drafting and analysis. The adviser remains responsible for professional judgement, suitability, review and approval of client-facing advice. Read more in our Compliance & AI overview.
How do I request security documents?
Send an enquiry with your firm's name and the materials or questionnaire you need. We will discuss what is available and any access requirements. Please do not include client records or sensitive client information in your enquiry.
OUR APPROACH TO PROTECTION
Platform controls
Explore the safeguards behind infrastructure, access, AI and advice workflows.
Infrastructure securityA foundation built around your firm's information.
- Primary database hosted in Sydney
- Private document storage
- Platform service keys held server-side
Supabase hosts the primary database, authentication and file storage in Sydney. Our application backend runs on Fly.io in Sydney. Vercel delivers the web application globally. On the managed service path, platform API keys are kept on the server.
Access & identityThe right information, for the right people.
- Database-enforced firm separation
- Role-based client access
- Authenticator-based MFA available
Row-level security applies permissions in the database. Advisers access their own client records, with read-only oversight for their licensee. Authenticator-based multi-factor authentication is available to add another sign-in check.
Privacy-conscious AIUseful intelligence, with deliberate boundaries.
- Personal identifier masking
- Optional identity protection
- Firm-level AI controls
Supported AI workflows use personal information masking, with optional identity protection to help de-identify text. These protections reduce exposure; they do not guarantee that every piece of text is anonymous. AI processing may take place outside Australia. Recall.ai processes meeting recordings to produce transcripts before any supported text-masking step. Ask us about the data flow for the features your firm uses.
Advice & oversightProfessional judgement stays with the adviser.
- AI-generated advice starts as a draft
- Adviser review and approval
- Visible sources and assumptions
AI helps prepare content inside adviser-led workflows. The adviser reviews and approves client-facing advice. Modelling exposes inputs and assumptions, and unverified figures are marked as indicative. Advium supports the firm's compliance framework; it does not replace it.
PROVIDERS & DATA LOCATIONS
Subprocessors
An overview of the core services supporting Advium, what they do and where they operate.
ProviderWhat they supportHosting or processing
Database, authentication and file storage
Sydney, Australia
Application backend and server-side processing
Sydney, Australia
Web application delivery and website hosting
Global infrastructure
Meeting recording and transcription
Outside Australia
This is a platform overview, not a complete contractual subprocessor register. Connected calendar, email, calling, CRM and e-signature services depend on what your firm enables. These integrations and firm-supplied AI services can change the data flow. Website enquiries also use Google Workspace, Google Places address suggestions and Vercel BotID. Request details for your firm