Security
Read-only by default. Your data stays yours.
Gwenda reads some of the most sensitive configuration in your organisation. How that access works is the product decision that matters most, so here it is in plain terms.
A tool that reads your identity provider and your cloud accounts, and in some sectors your care records, is asking for a great deal of trust. We would rather earn it by being specific than by gesturing at a badge.
If something below is not clear enough for your own risk assessment, ask us. We will answer precisely, including where the answer is "not yet".
Access model
Least privilege, in practice
Narrowest scope that works
Each connector requests the minimum read permission needed to answer its questions. Where a provider offers a granular scope, we use it rather than the convenient one.
Configuration, not content
Gwenda reads settings, policies, assignments and timestamps. It does not read the personal or clinical records inside the systems it connects to.
Revocable independently
Every connection is granted and revoked on its own. Turning one off does not require unwinding the others.
Australian data residency
Your data is stored and processed in Australian regions.
Exportable, always
Your evidence, findings and history can be exported in full. Leaving should cost you nothing but the software.
Auditable end to end
Anything Gwenda asserts about your posture can be checked against the system it came from.
Security questions we get asked
What access does Gwenda need?
Read-only, scoped to the systems you choose. Gwenda never needs write access to run a discovery scan. Each connection is granted separately and can be revoked independently at any time.
Does Gwenda read our data, or just our configuration?
Configuration and metadata. Gwenda reads how systems are set up, who can reach what, what is logged and what is retained. It does not read the contents of the records those systems hold.
Where is our data stored?
In Australian regions. Gwenda serves aged care providers, education and care services, and organisations subject to the Privacy Act, so data residency is not a preference we would ask you to trade away.
What happens if we leave?
Export everything and revoke every connection; Gwenda goes quiet. Your evidence is yours, and we do not hold it hostage as a retention mechanism.
Can our auditor verify what Gwenda reports?
Yes, and they are welcome to. Every finding carries the system it was read from, the read scope used and a timestamp, so an auditor can follow any number back to its origin.
Need to run this past your own risk team?
Send us their questions. We would rather answer a hard security review properly than have you discover the answer later.