Field notes › Choosing software
Why Australian data hosting matters for workforce data
Ask a software vendor where your data lives and you will often get "the cloud", a region name buried in a sub-processor list, or a pause. For workforce data, the answer deserves more attention than it usually gets, and in labour hire the stakes are higher than most buyers realise.
Workforce data is more sensitive than it looks
A roster does not feel like sensitive data until you list what sits behind it. Names, phone numbers, home addresses, dates of birth. Copies of licences and certificates, which are exactly the documents used for identity fraud. Fit-for-work declarations. Emergency contacts. Flight details and which camp room each person sleeps in next week. A workforce system is one of the most personal databases a business runs, and in labour hire it covers hundreds of people who handed that information over as a condition of getting work. They did not agree to it touring the world's data centres.
Location decides whose rules apply
Data stored overseas sits under the laws of the country holding it, on top of whatever obligations you carry at home. That can mean foreign government access regimes, different breach rules, and a murkier path to answers when something goes wrong. Offshore hosting is not automatically unlawful for an Australian business, but it makes every question harder to answer and every incident harder to untangle. Australian privacy law also places obligations on businesses that send personal information offshore, and the detail depends on your circumstances, so read the Office of the Australian Information Commissioner's guidance or get proper advice rather than taking a vendor's word for it. Onshore hosting does not remove your obligations. It just makes them simpler to meet and far easier to explain.
Your clients will ask before the regulator does
If you supply labour to mining, energy or government-adjacent work, you have probably already met the procurement security questionnaire. Where is data hosted? Who can access it? Is it encrypted? Those questions are working their way down every supply chain, and sooner or later a client will point them at your rostering system. "Not sure, it is an overseas app" is not an answer that wins the next contract. Being able to say the workforce data for their site never leaves Australia is a quiet commercial advantage, and it costs nothing once you have chosen the right system in the first place.
Backups are data too
A vendor can host production in Australia and still ship backups somewhere else entirely, which makes the headline answer worthless. Ask about the whole chain: production, backups, logs, and where support staff connect from. Ask whether backups are encrypted. A backup is a complete copy of everything you hold, and it deserves the same scrutiny as the live system. The same goes for exports. If your own staff routinely download the whole worker list to a laptop, sovereignty of the server is only part of the story, so it is worth asking what the system lets people pull out and who can do it.
What to ask any workforce software vendor
- Where is production data physically hosted?
- Where do backups go, and are they encrypted?
- Who at the vendor can access customer data, and from where?
- Is two-factor authentication enforced on every login?
- Can anyone sign up, or is access invite-only?
Mustr's answers are short. Built and hosted in Australia, data onshore, daily encrypted offsite backups, 2FA on every login, invite-only with no public signup. Short answers to security questions are usually a good sign. The long ones are where the surprises live.
If your clients have started asking where their crew's data lives, book a demo.