Security and compliance.
IRAP PROTECTED
Australia
Independently assessed against the Australian ISM at PROTECTED level.
ITSG-33 and GO-ITS 25.21
Canada
Follows ITSG-33 controls, meeting Ontario GO-ITS 25.21 with Canadian data residency.
ITAR ready
United States
US hosting and end-to-end encryption suited to export-controlled defence data.
FIPS 140 validated
United States
Uses FIPS 140-validated cryptographic modules.
CJIS
United States
Supports compliance with the FBI CJIS Security Policy.
HIPAA
United States
Access controls, data residency and end-to-end encryption for health information.
GDPR
Europe
Data protection by design, strict access controls and encryption.
Australian Privacy Principles
Australia
In-country hosting and control over who can read personal information.
Is DekkoSecure IRAP assessed?
Yes. DekkoCORE's Australian environment has been independently assessed under IRAP against the Information Security Manual at PROTECTED level. Security teams can request the assessment documentation.
Does DekkoDEMS support CJIS compliance?
Yes. DekkoDEMS aligns with the FBI CJIS Security Policy, using FIPS 140-validated cryptographic modules, strict authentication and access controls, and evidence that stays encrypted throughout its workflows.
What encryption does DekkoSecure use?
All content is end-to-end encrypted with AES-256 keys for files and messages and ECC-384 for each user's key pair. It's encrypted on the user's device before upload. Post-quantum cryptography is on the roadmap.
How is access to data controlled?
Through a Zero Trust model: single sign-on with Microsoft Entra ID and other identity providers, strong authentication, granular permissions for each workspace or case, and a tamper-evident audit trail of every action.
Is DekkoSecure independently tested?
Yes. Regular independent penetration testing and security assessments validate the platform, backed by continuous monitoring and vulnerability management.
Common questions.
Can't find what you need? Request support
What's the difference between DekkoCORE and DekkoDEMS?+
DekkoCORE is for sharing, signing and collaborating on sensitive files, organised into workspaces. DekkoDEMS is for managing digital evidence from crime scene to courtroom, organised into cases. Both are built on the same zero-knowledge security.
Can DekkoSecure see our files?+
No. Content is end-to-end encrypted, so only the people it's shared with can open it. DekkoSecure staff and the cloud providers we run on can't read it.
Where is our data hosted?+
DekkoCORE runs in Australia, the United States and Canada, and you choose the country when your account is set up. DekkoDEMS runs in the United States. Your data stays in the country you chose.
Do we need to install anything?+
No. Both products run in the browser, so there's nothing to install to view, share or collaborate on files.
Are there limits on file size?+
No. You can upload and share files of any size, from documents to hours of video and full device extractions.
How do we get help?+
Start with the knowledge base for your product. If you can't find an answer there, current customers can submit a support request and our team will get back to you.