Platform Security
Every Mica platform is built with enterprise-grade security — Australian-hosted, encrypted, and compliant with local privacy law.
Encrypted at rest & in transit
AES-256 encryption protects your data wherever it lives — stored or moving.
Australian data residency
Your data never leaves Australian servers — fully compliant with the Privacy Act 1988.
Role-based access control
Granular permissions mean each user sees exactly what they need — nothing more.
Encryption & Compliance
Your platform uses SSL and TLS across every connection — no unencrypted traffic, ever. At rest, all data is encrypted with AES-256, the same standard used by financial institutions worldwide.
Access & Audit
Every action in your platform is logged with a timestamp, user, and device. You can see who accessed a record, what changed, and when — giving you a clear chain of custody for sensitive data.
Role-based access lets you define exactly what each team member can see and do. Staff see their work; managers see their team; owners see everything.
Threat Monitoring
Most security breaches are not sudden attacks — they are patterns of unusual behaviour that go unnoticed. Your platform monitors activity in real time, flags anomalies automatically, and logs every action so you always have a clear record of what happened and when.
Automated alerts notify you immediately if an account is accessed from an unexpected location, if login attempts fail repeatedly, or if a user's activity deviates from their normal pattern.
Infrastructure Compliance
SOC 2 is the gold standard for data security — a rigorous independent audit that verifies how a platform handles, stores, and protects customer data. Every Mica platform is hosted on infrastructure that has passed this certification.
Vercel
Hosting & deployment
Vercel is SOC 2 Type II certified — meaning their security controls have been independently audited over time, not just at a single point. Your platform is deployed on their global edge network.
Supabase
Database & authentication
Supabase is SOC 2 Type II certified. Your data lives in an encrypted, access-controlled database with row-level security and full audit logging built in from the ground up.
Resend
Transactional email
Resend is SOC 2 Type II certified. Every email sent from your platform — notifications, invoices, onboarding — is delivered through infrastructure that meets enterprise security standards.
Enterprise clients that require SOC 2 compliance documentation can request the certification reports from Vercel, Supabase, and Resend directly. Mica Design can assist with this process.
Ready to start?