Trust Centre

Security, governance and evidence-led delivery for complex data migrations.

DataMC protects client data and delivers complex migrations through recognised security standards, governed delivery processes and auditable controls.

Secure digital shield trust centre visual

How does DataMC build trust into every migration?

By combining recognised security standards, governed delivery processes, proven methodology and auditable controls from planning through to go-live.

  1. 01 What we do

    DataMC applies a standardised security and risk framework across every project, delivering migrations with confidence and predictability across a regulated engagement.

  2. 02 Why it matters

    Migrations involve sensitive client data that must be transferred with the right controls and accountability aligned in scale, risk and complexity.

  3. 03 How we do it

    We combine ISO 27001:2022, SOC 2 Type 1, GDPR, Microsoft security best practices, foundational data platforms and our methodology and EXIT RUN.

  4. 04 Assurance at every step

    Our people, processes, technology and independent audits help us deliver migration outcomes you can rely on.

Our certifications and frameworks

DataMC operates with internationally recognised security standards, governed advisory standards and industry best practices throughout every migration engagement.

ISO 27001 certification mark

ISO/IEC 27001:2022 Certified

Our Information Security Management System is certified to ISO/IEC 27001:2022.

GDPR compliance mark

GDPR Compliant

We comply with the General Data Protection Regulation and applicable privacy laws.

SOC 2 Type 1 mark

SOC 2 Type 1 Aligned

We operate controls aligned to the SOC 2 Type 1 standard.

Cyber Essentials certification mark

Cyber Essentials Certified

Our UK service is Cyber Essentials certified, validating defences against common cyber threats.

Essential Eight Aligned

Our Australian operations align with the Australian Cyber Security Centre’s Essential Eight maturity model.

How DataMC supports governed migrations at delivery:

  • Secure data processing in accredited Australian and international environments.
  • Role based access, least privilege and just-in-time access enforcement.
  • Encryption at rest (AES-256) and in transit.
  • End-to-end audit, approval and sign-off.
  • Proactive security scans and vulnerability management.
  • Support availability and continuous improvement.
Laptop showing governed migration management interface

Data privacy & controlled access

We collect and use data in line with our privacy policy and contractual obligations.

  • Data minimisation and purpose limitation.
  • Client data stays governed and secure in the region it was collected or stored originally.
  • De-identified data for use case discovery.

Governed AI use in migration

AI-supported analysis is used to assist, not replace, human decisioning in migration outcomes, governed and controlled.

  • Models do not see client data directly and do not license to third-party generative services.
  • Always aligned to client risk policy and regulatory requirements.
  • AI use is auditable and aligned with our risk management policy.
↑