Marbles protects your financial data with Australian data residency, encryption throughout, audit ready controls and independently certified security.
Full reports and bridge letters available on request under NDA.
Information security management system certified across Covalent API Pty Ltd, the operating entity behind Marbles. Independently certified by Compass Assurance Services Pty Ltd. Certificate and scope statement available on request.
Covalent API Pty Ltd builds enterprise AI for some of Australia's largest organisations. Our clients support over 600,000 end customers. Marbles inherits the same security architecture and controls.
Full compliance with the Privacy Act 1988 and the 13 APPs, including data breach notification obligations.
Our security controls align with APRA CPS 234 information security expectations, for customers who work with regulated financial institutions.
All customer data hosted in Australia, AWS Sydney region. No data leaves Australian sovereign infrastructure except for tightly scoped subprocessors, all of which are disclosed and reviewed.
The standard controls you would expect, applied to every account.
The obligations Marbles is engineered to meet for Australian business customers.
Security incidents are taken seriously and handled openly. Customers affected by a confirmed incident are notified within 24 hours of detection. Affected customers get a named contact and clear updates from us throughout an active event.