Security & Compliance
ShareAndGo is built for documents that matter — tax audits, due diligence, M&A. Here's exactly how we protect them: Australian data residency, strong encryption, a tamper-evident audit trail, and access controls you actually control.
Australian data residency
Every document, database record and backup lives in Google Cloud's Sydney region (australia-southeast1). Your data is stored and processed in Australia and does not leave the country — the answer to data-sovereignty questions from the ATO, regulators, and your own clients.
Encrypted at rest and in transit
Documents are encrypted at rest with AES-256 (Google-managed keys) and in transit with TLS 1.2+. Files are never served as downloadable links by default — recipients read them through the inline viewer, not from a public bucket.
Tamper-evident audit trail
Every view, share, access and change is written to a SHA-256 hash-chained audit log — each entry is cryptographically linked to the one before it, so any after-the-fact edit is detectable. The full trail is exportable for a regulator or a court.
Granular access control
Email-verified guest access, role-based permissions (viewer, viewer-no-download, editor, sub-admin), per-link expiry, and instant revocation. Invitees only ever see the room you put them in — nothing else.
Document protection
View-only mode disables downloads, printing and copy. Dynamic per-viewer watermarking stamps each page with the recipient's identity, and spreadsheets render in the browser so an .xlsx never lands on the recipient's disk. Screenshot deterrence blurs content when the window loses focus.
Account & session security
Two-factor authentication (TOTP) is supported for sensitive workspaces, sessions time out bank-style after inactivity, and every sign-in and access event is IP-logged. Authentication runs on the MyAndGo platform with enforced password and 2FA policy.
Security FAQ
Is ShareAndGo secure?
Yes. Documents are encrypted at rest (AES-256) and in transit (TLS 1.2+), every action is recorded in a SHA-256 hash-chained tamper-evident audit log, access is role-based and email-verified, and the inline viewer prevents downloads with per-viewer watermarking. All data is stored in Sydney, Australia.
Where is my data stored?
Entirely in Australia — Google Cloud's Sydney region (australia-southeast1). Your documents, database and backups are stored and processed in Australia and do not leave the country.
Is ShareAndGo compliant with Australian privacy law?
ShareAndGo is built to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APP), including APP 8 cross-border handling — by keeping all data onshore there is no cross-border disclosure.
Can the audit trail be trusted in a dispute?
Yes. The audit log is SHA-256 hash-chained: each entry includes a hash of the previous entry, so the record cannot be silently altered after the fact. It is exportable for regulator or court submission.
Can recipients download or copy documents?
Not in view-only mode. Documents are streamed through the inline viewer with downloads, printing and copy disabled, dynamic watermarking, and screenshot deterrence. You choose per-role whether a given user can download.
ShareAndGo complies with the Australian Privacy Act and APP. We do not currently hold SOC 2 or ISO 27001 certification; if your procurement needs them, talk to us about the roadmap.
Share sensitive documents with confidence
Start free, no sales call. Your data stays in Australia from the first upload.
Create a secure data roomSee also
Explore ShareAndGo
What a VDR is & how ours works
Due diligence, audits & M&A
Honest 2026 comparison
Free forever, no credit card
Send confidential files with control
Audit trails, NDA gating, AI search
Flat AUD plans, from free
Other comparisons
The enterprise VDR alternative
Lower cost, same security
Self-serve signup, Sydney residency
Transparent pricing, Australian residency
Australian-built, AI PII redaction included
Flat pricing vs per-user, bring-your-own-AI
Real VDR controls, audit trail & expiry
No IT setup, external-share without licences
Per-document access logs and watermarking
AI-native, flat AUD pricing, Sydney-hosted
Flat pricing plus AI and a free tier
A true VDR, AU-hosted, AI included
AU residency, flat AUD, built-in AI
AU-hosted M&A rooms, flat pricing
Use cases