Summary
When you trust a SaaS platform with your staff's personal information — names, clock times, locations, photos, pay rates — you need to know exactly where that data lives. At NestedClock, the answer is simple: Australia. Always.
Why Data Sovereignty Matters
- Privacy Act 1988 — Australian Privacy Principles (APPs) govern how personal information is collected, stored, and disclosed. Sending data overseas introduces additional obligations under APP 8.
- Fair Work Act — Employers must keep accurate time and pay records. If those records are stored in a jurisdiction you can't access or control, you're at risk.
- Employee trust — Your staff expect their personal data to be handled responsibly, not shipped to data centres in countries with weaker privacy protections.
- Business continuity — Data stored locally is subject to Australian law, not foreign government access requests or geopolitical disruptions.
Where NestedClock Data Lives
Every piece of data in NestedClock is stored and processed in Australia:
- Staff records, timesheets, and rosters — stored in Australian data centres
- Clock-in photos — stored in Australian cloud storage
- User authentication — handled by Australian-hosted identity services
- AI processing — runs through Australian AI infrastructure
- All API and business logic — processed in Australia
AI That Stays in Australia
Our AI features — the AI Admin Assistant and Agentic AI — process your data entirely within Australia. When you ask the AI a question or create a shift through natural language, nothing leaves the country.
We use Anthropic's Claude, one of the world's leading AI models, hosted on Australian infrastructure. Your staff names, shift data, and business information are never sent to overseas AI endpoints. And the AI provider does not use your data to train their models — your data remains yours.
Enforced at the Infrastructure Level
We don't just promise data stays in Australia — we enforce it technically:
- Region restrictions — our cloud infrastructure is locked to Australian regions. Resources cannot be created overseas, even by accident.
- No overseas replication — databases and storage are single-region with no replication to overseas data centres.
- Backups stay local — all backups and recovery data remain in Australia.
Comparison With Competitors
Many workforce management platforms are US-based and store data in US regions by default. Some offer "Australian hosting" as an add-on or enterprise feature. With NestedClock:
- Australian hosting is the default and only option — not an upsell
- AI processing is in Australia — most competitors route AI through US endpoints
- We're an Australian company building for Australian businesses
Your Obligations as an Employer
Under the Privacy Act, if you use a third-party platform that sends employee data overseas, you may be liable for any privacy breaches that occur in that jurisdiction. By choosing a platform that keeps data in Australia, you simplify your compliance obligations and reduce risk.
NestedClock is built from the ground up with Australian data residency as a core architectural decision, not an afterthought. Your data stays here because that's where it belongs.