Matrix
Legal
Data residency
Last updated: September 2026
This document is a draft and is being reviewed. If you have a question about it,
contact us.
Matrix is built by an Australian business, for Australian businesses, and your books stay in Australia. This page sets out exactly where your data is stored and processed, and — so that nothing here is a surprise — the few services outside Australia that handle a limited part of it, and why. It supplements our privacy policy.
Our commitment
Your business's records are stored and processed in Australia, and so are all of their backups. That covers everything you keep in Matrix:
- your ledger, journals, invoices, bills, quotes, receipts and payments;
- contacts, CRM records, projects, inventory and fixed assets;
- files you upload, such as attachments, receipts, statements and contracts;
- reports and documents Matrix produces from them;
- audit trails, user accounts and security records;
- every backup and copy of all of the above.
The only exceptions are the limited, named cases under services outside Australia below. This is a standing design rule, not a hosting setting that could quietly change: every service we consider is checked against it before it is connected, and the answer is recorded.
Where
Primary
Melbourne, Victoria
Where Matrix runs day to day: the application, its databases and your stored files.
Failover and backup
Sydney, New South Wales
Holds backup copies, and takes over if the primary site becomes unavailable.
Failing over from Melbourne to Sydney never moves your data outside Australia. Both sites are subject to Australian law.
Who can reach it
Your data is kept apart from every other business's. When our support staff need to look at it, they do so through a separate internal system that records each access and the reason for it. We do not sell your data or use it to advertise to you.
Services outside Australia
A few parts of the service rely on specialist providers that operate outside Australia. None of them holds your books. Each one sees only what it needs for one job:
| Provider | What it does | What it sees |
|---|---|---|
| Stripe | Card payments for your Matrix subscription | Your card details, which go straight to Stripe; we never see or store the full card number |
| SendGrid (Twilio) | Delivering the emails Matrix sends | The message and its recipient. Matrix sends links back to itself rather than attaching your documents, except where you choose to attach one — for example, emailing an invoice as a PDF to your customer |
| Twilio | Text messages, where you use them | The message and the phone number |
| Microsoft | Previewing Word, Excel and PowerPoint files in your browser | Only a file you choose to preview, fetched through a short-lived link that stops working soon afterwards. Downloading the file instead keeps it in Australia |
| hCaptcha | Telling people from automated programs on our sign-up and contact forms | Your IP address and browser details while you use those forms |
| Sentry | Reporting errors so we can fix them | Technical details of the error. It is configured not to send names, email addresses or the contents of requests |
| ip-api.com | Working out the approximate location of a visit, for security and usage statistics | An IP address, and nothing else about you |
We require each provider to protect what it handles and to use it only to provide its service to us. We will update this page before we connect any new service that handles data outside Australia.
Questions
If you need more detail — for your own compliance, a tender or an auditor — contact us. How long we keep your data is covered on our data retention page.