Data Protection & Security
This page summarises how information is used in the research workspace. The Privacy Policy explains collection, provider processing, overseas disclosures, retention and your rights.
Saved Research
Research conversations, client context and engagement folders can be stored so you can return to ongoing work.
Account Information
Account, billing, support and usage information is handled for the purposes described in our Privacy Policy.
AI Provider Processing
Queries and supporting material may be processed by AI and infrastructure providers to generate responses and operate the Services.
Share Only What Is Necessary
Submit information you are authorised to use, and avoid unnecessary identifying details and Tax File Numbers.
Retention and Requests
Retention varies by record type and legal requirements. The Privacy Policy explains access, correction and retention.
Overseas Processing
Global cloud, AI and payment providers may process information outside Australia, as described in the Privacy Policy.
Saved Research and Client Workspaces
Cassandra supports saved research conversations, client information and engagement folders. Information can remain associated with your account so you can revisit a matter and continue working. The Privacy Policy describes the personal information collected and the purposes for which it is held, used and disclosed.
AI and Service Providers
AI model and embedding services process submitted content to generate research outputs. Hosting, database, payment and other providers also help operate the Services. This may involve disclosing information to recipients outside Australia. Sections 6, 8 and 9 of the Privacy Policy explain AI processing, recipients and overseas disclosures.
Choosing What to Upload
Only submit client or third-party information when you are authorised to do so and it is necessary for the task. Avoid unnecessary identifying details, Tax File Numbers and other government identifiers. Sections 3 and 11 of the Privacy Policy describe these considerations.
Security Measures
Section 12 of the Privacy Policy describes technical and organisational safeguards, including encryption in transit and, where applicable, at rest, access controls, authentication, logging and monitoring. No method of transmission or storage is completely secure. Keep your login credentials confidential and secure the devices and networks you use to access Cassandra.
Retention, Access and Correction
Retention depends on the type of record, the account relationship and applicable legal requirements. Section 14 of the Privacy Policy sets out the retention periods and exceptions. Section 15 explains how to request access to or correction of personal information through the Privacy Officer.
Security Incidents and Privacy Concerns
Contact us if you believe your account or personal information may be affected by a security issue. Section 13 of the Privacy Policy addresses data breaches, and Section 19 explains the privacy complaints process.
Contact Our Privacy Team
For data handling enquiries, access or correction requests, and privacy concerns:
Overview reviewed 19 October 2026. Read the Privacy Policy for the full explanation of personal information handling and the applicable policy terms.