Security & privacy
Your provider records deserve careful software.
Sparks Provider is built for Australian disability support providers handling participant, worker and business records. Security and privacy are part of how the service is designed and operated.
Last updated 1 September 2026
Account separation
Each provider workspace is separated from other businesses. Signed-in owners and authorised team members can access the information their role requires, while workers see the shifts and participant information needed for their work.
Protection
We use layered safeguards to protect information while it is sent, stored and backed up.
- Encrypted connections when information travels between your device and Sparks Provider.
- Encryption for stored records and files.
- Account-level controls that prevent one provider from reaching another provider’s data.
- Restricted administrative access for authorised people who need it to operate or support the service.
- Backups and monitoring to help maintain availability and recover from incidents.
Worker access
Workers use their own secure access to see shifts, submit notes and record hours from their phone. Providers remain responsible for inviting the right people, removing access when it is no longer needed and keeping account details secure.
Files and records
Sparks Provider keeps participants, workers, rosters, notes, timesheets, invoices, agreements and uploaded documents within the provider workspace. Those operational records are not sent to Cody, the optional in-app help assistant. Cody receives only the current typed question, first name, role and relevant published help articles, and cannot inspect or change account records.
Security incidents
If we identify a security incident, we investigate, contain it and take steps to reduce the chance of recurrence. Where a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by Australian law.
Your responsibilities
Use a strong, unique password, keep login details private, review who has access to your workspace and tell us promptly if you believe an account has been accessed without permission. Sparks Provider supports good record keeping, but each provider remains responsible for its own privacy, employment, NDIS and professional obligations.
Questions
For security or privacy questions, contact hello@sparksprovider.app