ISO 27001 certified
Independently certified information security management.
Security
Security built into every transaction
OPEX combines ISO 27001-certified security controls, Australian data hosting, enterprise identity and built-in transaction evidence to protect documents from preparation through signing and completion.
Security foundations
The controls underneath the platform
Hosted in Australia
OPEX data is hosted within Australian cloud infrastructure.
Tenant data isolation
Each organisation operates within an isolated environment.
Evidence & integrity
Evidence captured at every step
OPEX’s proprietary e-signing technology is built directly into the platform. Identity verification, signing events and document evidence are captured within the transaction record, not passed through a separate third-party signing service.
SMS-verified signing
Each signer is verified using a unique code sent to their mobile at the time of signing.
SHA-512 document fingerprint
Each completed PDF receives a unique cryptographic fingerprint, allowing any subsequent alteration to be detected.
Complete audit report
A detailed record of document delivery, access, verification, signing and execution, including timestamps, IP address, browser, witness method and location data where available.
Identity & access
Control who can access what
OPEX combines enterprise identity management with organisation, project and role-based permissions, helping ensure users only have access to the information and actions relevant to them.
Microsoft Entra ID single sign-on
Enterprise users can sign in through Microsoft Entra ID and apply their organisation’s existing identity and multi-factor authentication controls.
Role-based permissions
Control access by organisation, project and user role, including the information each invited participant can view or update.
Tenant isolation
Each customer operates within an isolated tenant environment, keeping its data and configuration separate from other organisations.
Data protection
Security beyond the signature
OPEX applies layered controls to protect information, restrict access and maintain a reliable record of activity across the platform.
- ISO 27001-certified information security management
- Data hosted in Australia
- Encryption in transit and at rest
- Microsoft Entra ID single sign-on and multi-factor authentication
- Tenant isolation and role-based permissions
- Detailed platform and transaction audit logs
Security review
Discuss your security requirements with us
Book a walkthrough with our Australian team, review the controls relevant to your organisation and identify any information required for your technical or security due diligence.