Security & Compliance
ShareAndGo is built for documents that matter — tax audits, due diligence, M&A. Here's exactly how we protect them: Australian data residency, strong encryption, a tamper-evident audit trail, and access controls you actually control.
Your documents never leave Australia
Every document, database record and backup lives in Google Cloud's Sydney region (australia-southeast1), and document content — including all AI search and OCR — is processed entirely in Australia. Your documents never leave the country: the clear answer to data-sovereignty questions from the ATO, regulators, and your own clients. (Limited operational metadata for email and SMS delivery uses vetted subprocessors — see the FAQ below.)
Encrypted at rest and in transit
Documents are encrypted at rest with AES-256 (Google-managed keys) and in transit with TLS 1.2+. Files are never served as downloadable links by default — recipients read them through the inline viewer, not from a public bucket.
Tamper-evident audit trail
Every view, share, access and change is written to a SHA-256 hash-chained audit log — each entry is cryptographically linked to the one before it, so any after-the-fact edit is detectable. The full trail is exportable for a regulator or a court.
Granular access control
Email-verified guest access, role-based permissions (viewer, viewer-no-download, editor, sub-admin), per-link expiry, and instant revocation. Invitees only ever see the room you put them in — nothing else.
Document protection
View-only mode disables downloads, printing and copy. Dynamic per-viewer watermarking stamps each page with the recipient's identity, and spreadsheets render in the browser so an .xlsx never lands on the recipient's disk. Screenshot deterrence blurs content when the window loses focus.
Account & session security
Two-factor authentication (TOTP) is supported for sensitive workspaces, sessions time out bank-style after inactivity, and every sign-in and access event is IP-logged. Authentication runs on the MyAndGo platform with enforced password and 2FA policy.
Security FAQ
Is ShareAndGo secure?
Yes. Documents are encrypted at rest (AES-256) and in transit (TLS 1.2+), every action is recorded in a SHA-256 hash-chained tamper-evident audit log, access is role-based and email-verified, and the inline viewer prevents downloads with per-viewer watermarking. Your documents are stored and processed in Sydney, Australia (australia-southeast1).
Where is my data stored?
Entirely in Australia — Google Cloud's Sydney region (australia-southeast1). Your documents, database and backups are stored and processed in Australia and do not leave the country.
Is ShareAndGo compliant with Australian privacy law?
ShareAndGo is built to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APP). Your documents and their contents are stored and processed entirely in Australia (Sydney), so document content involves no cross-border disclosure under APP 8. Limited operational metadata — such as the email address used to deliver an invitation or an SMS phone number — is handled by vetted subprocessors (e.g. SendGrid, Twilio) that may process it overseas; these are disclosed on our Compliance page.
Does any of my data leave Australia?
Your document content never does — files, their extracted text, and all AI search/OCR stay in Sydney (australia-southeast1). The only data processed overseas is limited operational metadata needed to deliver email (SendGrid) and SMS (Twilio) — for example a recipient's email address or phone number — never the documents themselves.
Can the audit trail be trusted in a dispute?
Yes. The audit log is SHA-256 hash-chained: each entry includes a hash of the previous entry, so the record cannot be silently altered after the fact. It is exportable for regulator or court submission.
Can recipients download or copy documents?
Not in view-only mode. Documents are streamed through the inline viewer with downloads, printing and copy disabled, dynamic watermarking, and screenshot deterrence. You choose per-role whether a given user can download.
ShareAndGo complies with the Australian Privacy Act and APP. We do not currently hold SOC 2 or ISO 27001 certification; if your procurement needs them, talk to us about the roadmap.
Share sensitive documents with confidence
Start free, no sales call. Your data stays in Australia from the first upload.
Create a secure data roomSee also
Explore ShareAndGo
What a VDR is & how ours works
Due diligence, audits & M&A
Honest 2026 comparison
Free forever, no credit card
Send confidential files with control
Audit trails, NDA gating, AI search
Flat AUD plans, from free
Other comparisons
The enterprise VDR alternative
Lower cost, same security
Self-serve signup, Sydney residency
Transparent pricing, Australian residency
Australian-built, AI PII redaction included
Flat pricing vs per-user, bring-your-own-AI
Real VDR controls, audit trail & expiry
No IT setup, external-share without licences
Per-document access logs and watermarking
AI-native, flat AUD pricing, Sydney-hosted
Flat pricing plus AI and a free tier
A true VDR, AU-hosted, AI included
AU residency, flat AUD, built-in AI
AU-hosted M&A rooms, flat pricing
Use cases