What About SARA’s Data Security

Sara holds a client document folder beside a shield and padlock illustrating data protection.

Advice files can contain sensitive client information. Use SARA through the account and process approved by your organisation, and check what you upload, share and download.

Protect your sign-in

Use your own account and complete the two-factor authentication requested at sign-in. Keep passwords, authentication codes and authenticator setup keys private. Select Sign Out when you finish on a shared device.

Check the client and documents before uploading

Confirm you are in the correct client and review. Upload only the documents needed for the task and permitted by your organisation’s policies. Check filenames, document contents and document-type selections so information is not attached to the wrong record.

The current pre-vet workflow reads document text for assessment and saves review information through the SARA service. Do not assume that processing occurs only on your device.

Share deliberately

Before using Shared Users, comments, attachments or email, check who will receive access. Review To and CC recipients and every attachment before sending. Keep unnecessary personal information out of comments, support screenshots and example files.

Look after downloaded reports

Downloaded advice documents and reports may contain confidential information. Store them in your organisation’s approved location, apply the required access controls and follow its retention and disposal process.

Check the current privacy and service information

For current information about handling of personal information, review our Privacy Policy. Ask iComply2 or your organisation’s administrator if you need confirmation of a particular hosting location, AI provider or model, retention arrangement or contractual security requirement before uploading data.

If you think information has been shared with the wrong person or account, follow your organisation’s incident process promptly and contact support through the approved channel. Avoid including additional client information unless it is necessary and authorised.

Previous
Previous

Adding Team Members

Next
Next

Adviser Pre-vetting Guide