Trust overview

Who this page is for: the practice manager doing diligence, and whoever they forward it to.

Refera handles health information for practices, so the standard is simple: every promise maps to an enforced control, every legal claim maps to an Australian statute, and every stage of maturity - certification included - is stated with its real status. Each promise below is a property of how Refera is built; a practice can hold us to all six in the data processing agreement.

The six promises

Promise	The enforced property
Australian data residency	The licensed portal, API and pooled tenant store run in AWS Sydney, with explicit region-deny controls and a re-runnable check. Patient-referral Bedrock processing is inactive and remains unavailable until Australia-only endpoint, retention, provider-access and policy evidence are proven. Detail
No clinical triage	Administrative process-state only - the extraction schema has no field a clinical judgement could occupy. Detail
Draft-first, always	Nothing leaves Refera without a named staff member approving it - the approval step is also the error firewall. Detail
No independent patient contact	No patient account or patient-facing Refera portal exists. Cancellation Fill prepares generic appointment copy only; staff approve, use the practice’s normal channel and record the outcome.
Export freedom	Structured tenant data and available sealed events export free. Object-Locked source-archive storage is deployed in AWS Sydney; complete source retention, retrieval and export remain unavailable until the lifecycle is proven end to end. Detail
Sealed audit trail	Every event is hash-chained with a server-held HMAC key. The export is not independently verifiable without the service-held key, and Refera does not claim a deployed write-once anchor. Detail

The deeper pages

• No clinical triage - the position in plain language.
• Privacy and the APPs - all thirteen principles, each tied to a control.
• Data residency - what the AU-only commitment means precisely.
• Security posture - the architecture, the access model and the certification ladder.
• Sub-processors - the complete, deliberately short list.
• Breaches and state law - state health-records law, My Health Record, breach response.