Australian Data Residency

Your CRM data, hosted in Australia

SmartCRM stores all customer data in Sydney on AWS Australia — so you always know where your data lives, who governs it and how it’s protected.

Book a demo

Why data location matters for Australian businesses

Businesses that store customer personal information have obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). When data is stored offshore, you must consider your obligations under APP 8, which governs cross-border disclosure of personal information and requires you to take reasonable steps to ensure the overseas recipient handles data in line with the APPs. Hosting your CRM data in Australia removes that layer of complexity.

Several CRM providers now offer data hosting in Australia — data residency alone is no longer a differentiator. What SmartCRM combines is local data residency with native AI (lead scoring, email drafting and deal summaries included in every plan) and flat AUD pricing with no feature gates.

How SmartCRM handles your data

Hosted in Sydney, AWS Australia

All SmartCRM data is stored on AWS in the Asia Pacific (Sydney) region. Your customer records, deal history, contact data and activity logs remain in Australia. No data is routinely transferred to overseas servers in normal operation.

Australian Privacy Principles aligned

SmartCRM is designed with the APPs in mind. We collect only what is needed to operate the service, support access and deletion requests from your customers, and provide you with full data export at any time. For guidance on your obligations, refer to the OAIC website.

Encrypted at rest and in transit

All data is encrypted in transit using TLS and encrypted at rest. Automated backups run regularly and are stored encrypted. In the event of an incident, data can be restored from a recent backup.

What we don’t claim

SmartCRM does not currently hold SOC 2 Type II, ISO 27001 or PCI-DSS certifications. We won’t claim certifications we don’t hold. If your procurement process requires specific certifications, please ask us directly — we’ll give you an honest answer about our current security posture.

AI Assistant

Lead scoring, email drafting and deal summaries — all running in Australia.

CRM for Small Business

Built for Australian SMBs. Simple to set up, no IT required.

Pricing

Flat AUD pricing. AI included. No per-feature upsells.

What does data residency mean for Australian businesses?

Data residency means your customer data is stored and processed within Australia’s borders. For Australian businesses, this simplifies compliance with the Privacy Act 1988 and the Australian Privacy Principles — particularly APP 8, which governs cross-border disclosure. SmartCRM stores all data in Sydney on AWS, so your records never leave Australian jurisdiction in normal operation.

Frequently asked questions

Does SmartCRM store data in Australia?

Yes. All SmartCRM data is stored on AWS in the Asia Pacific (Sydney) region. Your customer records, deal history, contact data and activity logs are kept in Australia. No data is routinely transferred to overseas servers in normal operation.

Does Australian data residency help with Privacy Act compliance?

Yes. Hosting data in Australia removes the cross-border disclosure complexity under APP 8 of the Australian Privacy Principles. You don’t need to take extra steps to ensure an overseas recipient handles your customer data according to the APPs.

Is SmartCRM certified under SOC 2 or ISO 27001?

No. SmartCRM does not currently hold SOC 2 Type II, ISO 27001 or PCI-DSS certifications. We won’t claim certifications we don’t hold. If your procurement process requires specific certifications, please contact us directly for an honest answer about our current security posture.

Can I export my data from SmartCRM?

Yes. You can export your full data set at any time. Your data is always yours — if you decide to leave SmartCRM, we will provide a complete export on request.

How is CRM data encrypted in SmartCRM?