Resident data, taken seriously.
We build software for aged care. Resident data, dietary safety, and operational continuity are our highest priority. This page documents how.
Need a one-page summary to circulate? Printable handout →
Section 2
Data residency + sub-processors
Resident data stays in Australia. Below is the full list of services that touch any part of the Mealward system.
Section 3
Security controls
Controls in place today across infrastructure, application, and operations.
Section 4
Compliance
Australian regulatory frameworks we align to today, plus what is on our certification roadmap.
Section 5
Statement of Rights mapping
The NACA (s23) places six categories of rights at the centre of funded aged care. Registered providers must demonstrate that their practices are compatible with each. Mealward is not an aged-care provider, but here is how the system supports providers in meeting that obligation.
Authoritative source: the NACA (commenced 1 November 2025) and the Department of Health, Disability and Ageing’s rights overview. This page is a working summary; final compliance accountability sits with the registered provider.
Section 6
Policies + documents
Legal and operational documents are available on request and linked below.
Section 7
Reporting a vulnerability
Security researchers — we appreciate your help keeping aged-care data safe.
Email us
Send vulnerability reports to [email protected]. Please include reproduction steps and impact.
90-day responsible disclosure
We commit to acknowledging reports within 3 business days and remediating valid issues within 90 days, in line with industry practice.
No paid bug bounty
We do not currently operate a paid bug bounty programme. We do publicly credit researchers (with permission) for valid reports.
Section 8
Contact
Talk to the people behind Mealward.