InCheq is trusted by enterprise organisations to handle sensitive psychosocial risk data. Security, privacy, and independence are embedded in how we design, build, and operate the platform.
InCheq provides psychosocial risk intelligence to organisations operating in regulated, high-risk, and complex environments. The data our clients entrust to us is sensitive and consequential. We take that responsibility seriously.
Security, privacy, and independence are not afterthoughts at InCheq. They are embedded in how we design, build, and operate our platform and our business.
AI-assisted PII detection scans for personally identifiable information before data enters the analysis pipeline. Identified PII is flagged and de-identified before processing. Individual-level data is never stored in identifiable form.
We only process data necessary for the specific intelligence purpose requested. Client data is not used for any purpose beyond the agreed scope of engagement. Retention does not exceed contractual terms.
All client data is stored and processed within Australia. We do not transfer client data offshore. Data residency within Australia is maintained throughout the data lifecycle.
InCheq operates in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Data Processing Agreements are available for clients who require them.
This website does not use analytics cookies, tracking pixels, or third-party advertising scripts. We do not profile visitors or share browsing data with advertising networks. Limited technical data is collected through server logs for security and operational purposes only.
The Safe Minds Index® is an evidence-based scoring framework. Where AI is used, it is documented, scoped, and reviewed.
Scores are calculated against a defined maturity framework across 10 Pillars. Determined by structured analysis of submitted data against validated criteria, not by opaque algorithmic judgement. Methodology is documented and consistent across all clients.
AI supports specific analytical functions: PII detection during ingestion, pattern recognition across complex datasets, and identification of material deviations from benchmark profiles. AI outputs are reviewed as inputs to the intelligence process, not final determinations.
Governance outputs (board reports, maturity assessments, intervention roadmaps) are produced with human oversight and expert review. Clients receive intelligence that has been interpreted and contextualised, not raw algorithmic output.
Clients receive documentation explaining how their Safe Minds Index® score was reached, which inputs were used, and how results compare to benchmarks. The framework is auditable: outputs trace back to specific data inputs and criteria.
The value of a maturity assessment depends entirely on its independence. An assessment shaped by the intervention provider's commercial interests, whether to inflate scores, downplay risks, or drive particular products, is not defensible governance evidence. It is a liability.
InCheq's design separates the intelligence layer from the delivery layer. InCheq provides the Safe Minds Index® assessment and the maturity evidence. Delivery of interventions and improvement programmes is conducted by accredited partners, not by InCheq itself. This separation means:
Independence is not claimed. It is structural. Built into how InCheq operates.
Information security management. Certification actively being pursued. Controls aligned to ISO 27001 standards.
Compliant with Australian Privacy Principles (APPs). Data processing aligned to all 13 APPs.
All data stored and processed in Australia. No offshore transfers. Aligned to government data sovereignty requirements.
Pursuing SOC 2 Type II attestation for security, availability, and confidentiality trust service criteria.
All data in transit encrypted using current TLS standards. Data at rest encrypted using AES-256 or equivalent.
Controls progressively aligned to the ACSC Essential Eight mitigation strategies for enterprise environments.
Achieved — live and verified | Pursuing — in progress, timeline available on request
The following documentation is available to prospective and current clients to support vendor risk assessments, procurement processes, and ongoing governance requirements.
InCheq is actively pursuing formal security certification. We welcome questions about our current security posture and certification timeline during evaluation.
If you are evaluating InCheq as part of a procurement or vendor risk assessment process, we are happy to provide the documentation you need promptly.
Documentation on request · Within two business days
1300 400 290
hello@incheq.co
Melbourne, Australia
