Sparks ProviderBack to site

Security & privacy

Your provider records deserve careful software.

Sparks Provider is built for Australian disability support providers handling participant, worker and business records. Security and privacy are part of how the service is designed and operated.

Last updated 1 September 2026

Account separation

Each provider workspace is separated from other businesses. Signed-in owners and authorised team members can access the information their role requires, while workers see the shifts and participant information needed for their work.

Protection

We use layered safeguards to protect information while it is sent, stored and backed up.

  • Encrypted connections when information travels between your device and Sparks Provider.
  • Encryption for stored records and files.
  • Account-level controls that prevent one provider from reaching another provider’s data.
  • Restricted administrative access for authorised people who need it to operate or support the service.
  • Backups and monitoring to help maintain availability and recover from incidents.

Worker access

Workers use their own secure access to see shifts, submit notes and record hours from their phone. Providers remain responsible for inviting the right people, removing access when it is no longer needed and keeping account details secure.

Files and records

Sparks Provider keeps participants, workers, rosters, notes, timesheets, invoices, agreements and uploaded documents within the provider workspace. Those operational records are not sent to Cody, the optional in-app help assistant. Cody receives only the current typed question, first name, role and relevant published help articles, and cannot inspect or change account records.

Security incidents

If we identify a security incident, we investigate, contain it and take steps to reduce the chance of recurrence. Where a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by Australian law.

Your responsibilities

Use a strong, unique password, keep login details private, review who has access to your workspace and tell us promptly if you believe an account has been accessed without permission. Sparks Provider supports good record keeping, but each provider remains responsible for its own privacy, employment, NDIS and professional obligations.

Questions

For security or privacy questions, contact hello@sparksprovider.app