Data Hosting & Residency
At Sparks, we take data privacy, security and sovereignty seriously. All Sparks applications, including Sparks Scribe, are hosted on Supabase infrastructure in Sydney, Australia (AWS ap-southeast-2).
Data location
- All databases and file storage origins are located on Australian soil, within the Sydney AWS data centre.
- Supabase's Data Processing Addendum (DPA) guarantees that customer data is stored and primarily processed in Australia.
How it works
- Supabase uses AWS Sydney for data storage and backups.
- Static files and non-sensitive assets are distributed through a global CDN for faster load times, but the authoritative origin remains in Australia.
- Sensitive data such as user information, client details and shift notes never leave Australian servers.
- Supabase complies with SOC 2 standards and aligns with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
Compliance summary
- Data origin: Sydney, Australia
- Database & storage: Supabase (AWS ap-southeast-2)
- Backups: Regional (Australia)
- CDN caching: Global (non-sensitive assets only)
- Privacy compliance: Australian Privacy Act 1988 / APPs
- Security certification: SOC 2 compliant
Protection on every account
- Encryption in transit via TLS
- Encryption at rest using AES-256
- Row Level Security for per-user data protection
- Strict internal access controls and audit logs
Questions?
Read our Privacy Policy and AI Use Statement, or contact info@sparksacademy.com.au.