1. Purpose
Ordo Systems uses specialist providers to operate, secure, communicate and distribute the service. This Schedule identifies the providers that may handle personal information or Customer Data for Ordo Systems at launch, their purpose, the information involved and likely processing locations. It forms part of the Privacy Policy.
Only providers verified as active in the production environment should appear in the published Schedule. A capability supported by source code is not proof that the provider is in use.
2. Launch provider register
Provider |
Purpose and data |
Likely countries / safeguards |
|---|---|---|
Render |
Runs the Ordo Systems API and web service; may process account, organisation, Fuel, Trade Plate, report, technical and security data. |
Singapore service region. This identifies the Ordo Systems workload region only; Render corporate, support, security and subprocessor processing may occur in the United States or other countries under its terms. |
Render PostgreSQL |
Stores structured account, access, operational, reporting and audit records. |
Singapore database region. This is not an assurance that Render personnel or subprocessors process data only in Singapore; other processing may occur in the United States or elsewhere under its terms. |
Cloudflare R2 |
Private object storage for receipt images, uploaded statements, generated files and object metadata. |
Oceania placement preference - a best-effort location hint, not an exact-country or Australia-only residency guarantee. Cloudflare group, support and subprocessor processing may occur elsewhere under its terms. |
Postmark |
Sends signup, activation, invitation, recovery and account-deletion transactional email through Ordo Systems’ outbound stream. Ordinary account mail uses hello@ordosystems.com.au; deletion confirmations use noreply@ordosystems.com.au. Data includes recipient email, Organisation context, message content and delivery metadata. |
United States. Postmark states that it is US-based and stores customer and customer-processed data there. Other support, backup and subprocessor locations are not exhaustive; current provider disclosures apply. |
Not active for launch |
Automated monthly Trade Plate delivery is unavailable at launch; automated Fuel and other report email is not active in the verified launch configuration. |
No launch report-email provider or processing location is listed. Update this Schedule before activating automated report delivery. |
Not active / not confirmed for launch |
No separate external monitoring or error-telemetry provider is confirmed for launch. Provider-native service logs remain covered above. |
No separate monitoring country is listed; update this Schedule before enabling an external service. |
Microsoft 365 |
Handles support, privacy, security and business correspondence, including sender and recipient details, content, attachments and mail metadata. |
Tenant and workload location is unconfirmed. Microsoft publishes Australia at-rest commitments for eligible Exchange Online tenants provisioned there, but authorised personnel and subprocessors may process data overseas. This is not Australia-only. |
3. App distribution and device-platform services
Ordo Systems is distributed through the Apple App Store and Google Play. Their operators handle app-store, device and account information under their own terms. On iOS, users can opt in to push notifications. Ordo Systems then registers the device push token, installation identifier, platform and app version with its backend and associates the registration with the user's account and organisation. These details support service notifications through Apple Push Notification service. Delivery depends on the user's permission, a valid registration and working provider configuration. This registration is separate from the installation identifier used for synchronising app records.
Platform |
Role in the service |
Customer information |
|---|---|---|
Apple App Store |
App distribution, platform account/device services, and opt-in iOS push-notification delivery through Apple Push Notification service. |
Handled under Apple’s terms; Ordo Systems stores only the service data described in the Privacy Policy. |
Google Play |
App distribution and platform account/device services. Customer push delivery is not enabled for launch. |
Handled under Google’s terms; on-device vehicle-registration recognition and no production OCR flow remain release-candidate confirmations. |
4. Overseas processing
Verified launch locations are Singapore for Render hosting and PostgreSQL, and the United States for Postmark processing and storage. Cloudflare R2's Oceania placement preference is not an exact-country or Australia-only guarantee. Microsoft 365 tenant and workload location is unconfirmed. Provider corporate, support, security, engineering and subprocessor processing may occur in the United States or other countries under current terms. Countries are not exhaustive. Ordo Systems does not promise Australia-only residency unless an accepted Order Form says so. Where Australian privacy law requires it, Ordo Systems takes reasonable steps for overseas recipients and remains accountable as provided by law.
5. Provider controls
Depending on the provider and risk, Ordo Systems uses measures such as:
- contract and privacy review;
- minimum necessary access and private-by-default storage;
- provider authentication, credential separation and role restrictions;
- retention, return and deletion terms;
- security and incident-notification obligations; and
- periodic review of providers, countries and active data flows.
A reference to a safeguard is descriptive only and is not a certification or customer-specific data-residency guarantee unless an Order Form expressly states it.
6. Changes to this Schedule
Ordo Systems may add, replace or remove a provider for legitimate service, security, legal or operational reasons. We will keep this Schedule current and give reasonable advance notice of a material change where practicable. If a provider change materially reduces a contracted protection, the Organisation has the rights stated in the Terms or Order Form.