ISO 27001 and AI Receptionists — Our Honest Security Status for Australian Businesses
Aussie AI Agency is not ISO/IEC 27001 certified and does not hold a SOC 2 report. Our done-for-you AI voice receptionist, Steve, handles caller data under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, encrypted in transit and at rest. Some of our service providers may process data in the United States and other countries. Plans start at $149/month, month-to-month, and you're live within 3 business days — book a free demo to talk it through.
Why ISO 27001 comes up in procurement
ISO/IEC 27001 is the international standard for an information security management system (ISMS). Certification means an accredited auditor has independently checked that system. Large clients, government buyers and enterprise procurement teams often ask suppliers for an ISO 27001 certificate or an equivalent external attestation before any third-party tool touches their communications.
If you're choosing an AI receptionist and your clients send you supplier security questionnaires, you need a straight answer about where your vendor stands. Here is ours.
Where Aussie AI Agency stands today
- Certification: we are not ISO/IEC 27001 certified and do not hold a SOC 2 report.
- Privacy: caller data is handled under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We never sell caller data.
- Encryption: data is encrypted in transit and at rest.
- Where data is processed: some of our service providers (for example our AI, voice, telephony and hosting providers) may process data in the United States and other countries. Our privacy policy lists them.
- Access: call summaries go to the people you nominate.
- Minimum-necessary capture: Steve's script is written for your business, so we can set him up to collect only what your team needs to action a call.
See Steve answer a call
Example: scripting Steve to capture only what's needed
An illustrative call flow for an accounting firm, showing how Steve can be scripted to avoid collecting sensitive details.
Caller: “Hi, I need to speak to my accountant about something time-sensitive.”
Steve: “Thanks for calling [Firm Name] — this is Steve. Are you an existing client?”
Caller: “Yes — do you need my client number?”
Steve: “No need — your name and best mobile is enough. Your accountant will verify your identity when they call you back. Is there anything they should know before calling, without going into detail?”
Caller: “It's about an ATO notice I got this morning.”
Steve: “Got it — I won't ask for the details. I'll flag it as time-sensitive and you'll get an SMS confirmation now.”
What this shows: no account numbers, no notice details, identity verification left with the person who knows the client.
What happens to a call
- Call rings — the caller dials your business number, which forwards to Steve when you choose.
- Encrypted in transit — voice and data are encrypted in transit.
- Processed by our service providers — our AI, voice, telephony and hosting providers may process data in the United States and other countries; our privacy policy lists them.
- Encrypted at rest — call data and transcripts are encrypted at rest.
- Summary to your team — the people you nominate get an SMS and email summary.
Supplier security questionnaires
Send us your client's questionnaire and we'll answer it honestly — including the questions where the answer is “no” or “not yet”. That's more useful to your procurement team than a marketing sheet. Email info@aussieaiagency.com.au.
Who this page is for
Businesses whose clients or regulators ask about information security, for example:
- Financial services — see ASIC compliant AI receptionist
- Healthcare — see AHPRA compliant AI receptionist
- Legal practices and accounting firms
- Suppliers to larger companies that send questionnaires
Pricing
The same privacy and encryption approach applies on every plan. Prices are ex GST.
| Plan | Monthly | Included | Extra minutes |
|---|---|---|---|
| Starter | $149 | 100 voice minutes + 50 SMS | $0.49/min |
| Business | $299 | 250 voice minutes + 150 SMS | $0.39/min |
| Growth | $499 | 700 voice minutes + 400 SMS | $0.29/min |
| Enterprise | from $1,299 | 3,000 voice minutes + 1,000 SMS, outbound calling | $0.19/min |
Extra minutes are capped at the gap to the next plan up. Month-to-month on every plan — cancel any time. Setup is scoped on your free demo call. See full pricing.
When we aren't the right fit
You need a current ISO/IEC 27001 certificate or SOC 2 report. We don't hold either. If your procurement gate requires one at contract signature, we're not the right fit today.
Your contract requires all data to stay in one country. Some of our service providers may process data in the United States and other countries, so we can't meet a single-jurisdiction requirement.
Classified, air-gapped or sovereign defence environments. We're a cloud service for everyday business calls. These are out of scope.
Security & compliance FAQs
Related reading
Book a free 30-minute demo with Niel
Bring your security questions to a free 30-minute demo with Niel. Want to hear Steve first? Call Steve, our AI receptionist, on 03 4328 3434.
About the author
Niel Bennet is the founder of Aussie AI Agency. He studied Marketing at Deakin University and started his career at Fairfax Media. For the past 10 years he's run digital marketing and web businesses across Australia.
Niel can be reached at info@aussieaiagency.com.au. Read more about Niel and AAA.
Sources & disclosures
- ISO/IEC 27001 — Information Security Management Systems
- Privacy Act 1988
- Office of the Australian Information Commissioner (OAIC)
Clients: Line Marking Australia and Dinar Exchange run our AI receptionist in production — see case studies.
Not legal advice. Security and compliance obligations depend on your context. Check your own obligations with your legal, compliance and security advisers.
Conflict of interest disclosure: Aussie AI Agency sells AI receptionist services. We benefit financially when readers become customers.
Aussie AI Agency · 240 Plenty Road, Bundoora VIC 3083 · ABN 44 772 398 737 · info@aussieaiagency.com.au · 0417 460 236