Secure your awards 

Panel of Award Force's security compliance logos including GDPR, CCPA, ISO 27001, APP, SOC 2 Type 2, PCI, Cyber Essentials and HIPAA.

World-class application security

We are confident that we have one of the most secure online application and evaluation solutions worldwide. If not the most secure.

Award Force is built to ensure your program is reliably available, private, secure and compliant.

Jump to our security centre to learn more

Award management security

Security at a glance

Data encryption

All data in transit (including login credentials and credit card details for paid entry awards) is protected using TLS 1.3 (https) by default with (AES)-256 bit encryption and SHA-256 signed certificates. 

Role + permission access

Award Force has an extensible system for defining user roles and associated system use permissions so that users can only access functionality they’re permitted to.

Server security

Our multi-server architecture is secured in a Virtual Private Cloud (VPC). There is no access via FTP. Server access is only possible by authorised staff via SSH key-based authentication through VPN access to our VPC.

Privacy

Award Force is extremely privacy-conscious. Our staff work together to handle your data responsibly and ensure your right to privacy is maintained at all times. Our product is also designed to help you comply with local privacy laws by offering choice in data storage region.

Data regulation compliance

Award Force is packed full of features to help you maintain compliance with data privacy laws and requirements. Our team regularly works to expand our compliance coverage to help you meet your compliance needs.

Reliability

Awards programs deal in integrity, stability and trust and are mission critical projects. As such, Award Force has been architected and is maintained to be as dependable as possibile. We are committed to delivering a service which is stable, secure at scale, readily available and recoverable.

 

Audit log

The audit log is an unalterable record of events in your Award Force account and helps you to maintain full transparency and accountability throughout your awards management process.

Learn more about audit log

Awards management data residency

Data residency

When it comes to your data hosting location, you have the freedom to choose between several supported regions.

Learn more about your data residency options

Frequently asked questions

How does Award Force keep awards data secure?
:
;
The Award Force application and hosting stack have been architected with security practices and features built in so you’ll never have to worry about the security of data stored in Award Force. Data is protected through industry-standard security controls, access management, and continuous monitoring, helping organisations run awards programs with confidence.
Which hosting regions are available?
:
;
Award Force offers multiple hosting regions. The available region depends on your setup and requirements, allowing you to align hosting with organisational or regulatory needs. Learn more about the Award Force available data residency options.
What security standards and certifications does Award Force meet?
:
;
Award Force maintains recognised security certifications and independent validations, including ISO 27001 certification, SOC 2 compliance, regular penetration testing, and PCI-DSS attestation for payment processing.
What education security standards does Award Force meet?
:
;
Award Force meets recognised security and privacy standards used by education organisations. The platform has completed the Safer Technologies 4 Schools (ST4S) assessment, a framework used by education authorities in Australia and New Zealand to evaluate digital products used in schools.
Do you provide security documentation for due diligence or procurement reviews?
:
;

Yes. Security documentation, including certification details and audit information, is available on request to support due diligence, procurement, and risk assessments.

What is the audit log and how is it used?
:
;
The audit log records key activity within the platform, such as configuration changes and administrative actions, providing visibility and accountability across the awards program.
How does Award Force support compliance with PII (personally identifiable information) requirements?
:
;
Award Force helps organisations manage PII through controlled data access, audit log, data residency options, and security controls that govern how personal information is handled within the platform.