Trust
Security
Secure by default is part of every feature definition, not a phase at the end.
Who we are
ESG&I Pty Ltd trading as Studio Ambira, ABN 19 674 234 158, based in Melbourne, Victoria.
Tenant isolation
Every client organisation's data is scoped and enforced at the database layer. Knowing a URL never grants access.
Least privilege
Role-based access for founders, delivery staff, contractors and client roles. Contractors see only assigned work. Impersonation is prohibited in production.
Assurance
Independent production review before every go-live. Permission, data-isolation and recovery tests are part of the release gate.
Monitoring and response
Error monitoring, backups and incident triage are included in Ambira Care, with visible status and post-incident review.
Last updated 7 September 2026.
