How ComplySite verifies documents and keeps them safe
Builders ask two questions before they trust a compliance tool: how does it decide who is cleared, and what happens to the documents. This page answers both in plain terms, including what ComplySite does not do.
How a subcontractor's status is decided
You create a project. ComplySite builds the document checklist for that project's state.
You invite a subcontractor by SMS or email. They open their link, with no account, and photograph each document.
ComplySite reads the expiry date from each photo. The subcontractor confirms it in one tap.
ComplySite checks the subcontractor's ABN. Against the Australian Business Register.
The dashboard shows a status. Cleared, Expiring soon or Not cleared, and updates as documents arrive or expire.
Reminders go out. To the subcontractor before a document runs out, and you're notified when one goes red.
What ComplySite checks and what you still check
| ComplySite checks | You still check |
|---|---|
| Every required document is uploaded | That each document is genuine |
| Each document is in date | That the licence class and cover suit the work |
| The ABN is valid on the Australian Business Register | Anything your own contract or insurer requires beyond the checklist |
| Who signed on to the project by QR code | Whether to let a subcontractor start |
Licence checks against state regulator registers are not live yet. They are on the roadmap, and this page will change when they ship.
Where documents are stored
- Documents and data are stored in Sydney, Australia, on Supabase infrastructure.
- Each builder sees only its own subcontractors. One company cannot see another company's data.
- A subcontractor's link opens only that subcontractor's upload session.
- Documents are opened through short-lived private links, never public web addresses.
- Archiving a subcontractor switches off their upload link straight away.
- Data is encrypted in transit and at rest.
How AI is used
When a subcontractor photographs a document, the image is sent to an AI service (Anthropic's Claude) so ComplySite can read the expiry date. The subcontractor confirms the date before it is used. Documents sent this way are not used to train AI models. AI does not decide who is cleared. Status comes from the dates and the checklist.
Sensitive documents
Police checks are collected only when a builder sets them as a requirement for a specific project. They get the same access controls as every other document.
How long documents are kept
- Documents and details are kept for up to 12 months after a document expires or a subcontractor becomes inactive.
- After you cancel, your data is kept for 90 days in case you come back, then securely deleted.
- If a payment fails, nothing is deleted. The account becomes read-only until it is paid.
Services we use
| Service | What it does |
|---|---|
| Supabase (Sydney) | Hosting, database and document storage |
| Twilio | SMS invites and reminders |
| Resend | Email invites and reminders |
| Stripe | Subscription payments |
| Anthropic | Reading expiry dates from document photos |
| Australian Business Register | ABN checks |
SMS and email providers may process data outside Australia. We take reasonable steps to handle that in line with the Australian Privacy Principles.
If something goes wrong
If a data breach is likely to cause serious harm, we notify affected people and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
Contact
Questions about security or privacy: contact@complysite.com.au or +61 494 723 688. ComplySite is operated by NAI Technologies Pty Ltd (ABN 16 637 716 995), Melbourne.
What we are still building
Licence checks against state registers, and a reusable verified subcontractor profile (the Compliance Passport).
Read our Privacy Policy for the full detail on how we collect, use and protect personal information.