Home / Compliance & Security
Security over commercial information is the principle WebCM was built on. Here is how we put it into practice — from where your data lives to who can see it.
Designed and implemented to align with best practice and ISO 27000 standards.
Microsoft Azure (Australia) infrastructure, with penetration testing undertaken each year.
Built around the Australian Privacy Act 1988 (Cth) and the National Privacy Principles.
WebCM is contract management software for Australian organisations that take governance seriously. Every layer of the platform — from infrastructure through to the way users see contracts — is shaped by one rule: people see what they are responsible for, and nothing more. That principle is wired into the product itself, not bolted on afterwards.
Contracts Online uses Microsoft Azure Cloud Services (Australia) to deliver WebCM, with the resilience and physical security of a hyperscale provider.
Access to information is restricted to only those who have a need. Permissions follow responsibility — users see the contracts assigned to them, and nothing else.
Microsoft Active Directory and SAML single sign-on are supported, so user lifecycle stays in your existing identity stack.
The data store is protected by multiple layers of security, including firewalls and encryption.
Penetration testing is undertaken each year against the WebCM platform.
Every contract event is tracked, giving you a complete picture of activity inside the platform.
WebCM is owned and operated by Contracts Online Pty Ltd (ACN 159 943 969), an Australian company. Your contract data is hosted in Australia and governed by Australian law.
REQUEST DOCUMENTATION
A short document for your procurement, risk, or IT team — covering hosting, access control, encryption, backups, incident response, and Australian data residency.
ISO 27000 aligned · Australian-based support · Cancel anytime
