Where does HotDoc store patient data?

Australia (hosted on AWS in Australia) Published statement: "All personal information entrusted to HotDoc is securely stored and processed within Australia" (source: https://practices.hotdoc.com.au/security, checked 2026-08-13). Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

Where does HotDoc process data?

Australia (stored and processed within Australia per security page) Published statement: "All personal information entrusted to HotDoc is securely stored and processed within Australia" (source: https://practices.hotdoc.com.au/security, checked 2026-08-13). Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

Which AI models does HotDoc use?

Not disclosed / not found. We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it. Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

What certifications does HotDoc publish?

SOC 2 Type II accreditation; compliance with Australian Privacy Principles and Privacy Act stated Published statement: "SOC 2 Type II accreditation" (source: https://practices.hotdoc.com.au/security, checked 2026-08-13). Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

HotDoc

Platform / infrastructureHQ · AUWebsite As at 13 Aug 2026

Trust alerts

Get notified when HotDoc's published disclosures change

We re-check published residency, subprocessor and certification pages and log every change. One email when something we track changes — nothing else.

Email only. Unsubscribe in one click from any email. We never share the list with vendors.

This tracker records only what each vendor has published on its own public pages. It is not an assessment, audit, certification or endorsement. Vendors change their documentation — always verify directly before making a procurement decision.

Data storage region

ValueChecked 13 Aug 2026

Australia (hosted on AWS in Australia)

“All personal information entrusted to HotDoc is securely stored and processed within Australia”

practices.hotdoc.com.au

Data processing region

ValueChecked 13 Aug 2026

Australia (stored and processed within Australia per security page)

“All personal information entrusted to HotDoc is securely stored and processed within Australia”

practices.hotdoc.com.au

Model provenance

ValueChecked 13 Aug 2026

Not disclosed / not found

We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

practices.hotdoc.com.au

Subprocessors

ValueChecked 13 Aug 2026

AWS (hosting, Australia); privacy policy also notes software and other service providers in the United States subject to confidentiality restrictions

“Our software and other service providers in the United States of America (however, these service providers are required to comply with confidentiality restrictions)”

practices.hotdoc.com.au

Certifications

ValueChecked 13 Aug 2026

SOC 2 Type II accreditation; compliance with Australian Privacy Principles and Privacy Act stated

“SOC 2 Type II accreditation”

practices.hotdoc.com.au

TGA status

ValueChecked 13 Aug 2026

Not disclosed / not found

We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

practices.hotdoc.com.au

PMS integrations

ValueChecked 13 Aug 2026

Not disclosed / not found

We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

practices.hotdoc.com.au

ANZ entity

ValueChecked 13 Aug 2026

HotDoc Online Pty Ltd (ABN 84 159 662 558)

“HotDoc Online Pty Ltd ABN 84 159 662 558”

practices.hotdoc.com.au

Support hours

ValueChecked 13 Aug 2026

Not disclosed / not found

We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

practices.hotdoc.com.au

Common questions

What HotDoc publishes — answered from the record

Where does HotDoc store patient data?: ValueChecked 13 Aug 2026
Australia (hosted on AWS in Australia)
“All personal information entrusted to HotDoc is securely stored and processed within Australia”
practices.hotdoc.com.au
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
Where does HotDoc process data?: ValueChecked 13 Aug 2026
Australia (stored and processed within Australia per security page)
“All personal information entrusted to HotDoc is securely stored and processed within Australia”
practices.hotdoc.com.au
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
Which AI models does HotDoc use?: Not disclosed / not found
We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
What certifications does HotDoc publish?: ValueChecked 13 Aug 2026
SOC 2 Type II accreditation; compliance with Australian Privacy Principles and Privacy Act stated
“SOC 2 Type II accreditation”
practices.hotdoc.com.au
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

Planned professional tier

20 founding places

The Assurance Register — for teams who have to prove their diligence

The public tracker stays free — it always will. For organisations that need more, we’re building a professional tier: monitoring of your vendor list, change alerts with the evidence attached, audit-ready packs formatted for privacy impact assessments and automated-decision disclosures, and a quarterly analyst briefing.

From December 2026, the Privacy Act requires organisations to disclose automated decision-making in their privacy policies (Privacy and Other Legislation Amendment Act 2024, ADM transparency provisions) — which means knowing, on an ongoing basis, exactly what your AI vendors run and where. That’s what this register is for.

Founding membership is limited to the first 20 organisations and locks founding pricing permanently. Register interest now — founding members get first access and shape what we build.

Registering interest is not a purchase or commitment. The free public tracker is unchanged.

Right of reply

Something wrong or out of date?

Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.

Submit a correction