Australian address API for government and regulated industries
Address autocomplete transmits a person’s raw keystrokes before anyone presses submit. If your agency, hospital or bank has promised that data stays in Australia, the address field is where an offshore provider quietly breaks that promise. WattleAddr is Australian-owned and served entirely from Australian infrastructure, and the paperwork a procurement review asks for is published, not promised.
Australian-owned, Australian-hosted, and honest about what we do not hold
Every request is processed in Sydney with a standby in Melbourne, both on Australian infrastructure, with no foreign network under our control anywhere in the path. The company has no foreign parent or shareholder. And we hold no IRAP assessment or ISO 27001 certification, which we say here so you do not have to ask.
- Data Residency Attestation and Data Processing Agreement (DPA) published for every account
- 99.5% Service Level Agreement (SLA) with service credits, single sign-on (SSO) and purchase-order billing on the Enterprise & Government plan
- Search-log retention you set, with keyed-hash or no-text modes
- No IRAP assessment, ISO 27001 or equivalent, and no claim to one
Each answer, and the document that binds it
Answers reflect our published legal pages as at 4 September 2026. Where this page and the linked document differ, the document governs. If a question you need answered is not here, ask and we point you to the clause or tell you plainly that it is not covered.
| Procurement asks | Answer | Governing document |
|---|---|---|
| Where is data processed and stored? | In Australia only. Sydney primary, Melbourne standby, both operated by Binary Lane Pty Ltd, an Australian company. No foreign CDN, no offshore edge, no third-party analytics in the request path. | Data Residency Attestation |
| Who owns and operates the service? | RR Sols Pty Ltd, an Australian company incorporated and resident in Australia, with no foreign parent, no foreign shareholder and no foreign entity in its ownership chain. | Data Residency Attestation |
| Which sub-processors handle data? | Binary Lane Pty Ltd (hosting, Sydney and Melbourne), VentraIP (outbound email) and Pinch Payments (invoice payments); only Binary Lane handles end-user address data. The database runs on WattleDB, another RR Sols product. Thirty days’ notice before any sub-processor is added. | DPA, Annex C |
| Is there a Data Processing Agreement? | Yes, published, covering processing of end-user address data on your behalf, all within Australia, with retention, return and deletion terms. | Data Processing Agreement |
| What is the uptime commitment? | 99.5% monthly uptime for the /v1 API endpoints, measured per calendar month in Australian Eastern time, with service credits of 10% to 50% of the month’s fees. Enterprise & Government plan only, where the Order Form references the SLA. | Service Level Agreement |
| When is maintenance? | Sundays 01:00 to 05:00 Australian Eastern time, with at least 48 hours notice by email to Enterprise customers for work that could interrupt the API. Live status and a daily availability history are public. | Status page |
| How is end-user data retained? | You set search-log retention per workspace, from 7 to 365 days by plan, and can store query text as a keyed hash (pseudonymised, not anonymised) or store no query text at all. End-user data is never sold, shared or used for advertising, profiling or model training. | Privacy Policy |
| How do our staff sign in? | Single sign-on over OpenID Connect with your own identity provider (Okta, Microsoft Entra ID, Google Workspace and others) on Enterprise plans, with DNS-verified domains and the option to require SSO. | SSO setup guide |
| How do we pay? | By tax invoice, payable by EFT or PayID, or against a purchase order on Enterprise and Government plans. No card is stored and nothing is debited automatically. Prices are in AUD with GST itemised. | Pricing |
| What security assessment do you hold? | None yet. Infrastructure is architected to align with Australian government expectations for data residency; we do not hold an IRAP assessment, ISO 27001 certification or equivalent, and we say so rather than imply otherwise. | Data Residency Attestation, standards posture |
| Have you received government data requests? | The attestation records none received as at 4 September 2026. If one arrives, the affected customer is notified before disclosure unless the law prohibits it, and only what is legally required is disclosed. | Data Residency Attestation |
Where we are not a fit today
If your procurement requires a completed IRAP assessment, we are not currently able to meet it and will not pretend otherwise. If you need Australia Post AMAS certification, DPIDs or barcodes for mail lodgement, you need a PAF-licensed product, not a G-NAF one. And WattleAddr covers Australian physical addresses only: no PO Boxes, no international addresses. What we can do is answer a security questionnaire in full, provide a signed attestation on letterhead, and discuss what is achievable for a specific requirement.
Short answers
Is WattleAddr hosted in Australia?
Yes. All production infrastructure is in Australia: a primary deployment in Sydney and a standby deployment in Melbourne, both on infrastructure operated by Binary Lane Pty Ltd, an Australian company. Address queries are processed and answered in Australia, backups are held in Australia, and there is no foreign CDN, offshore edge or third-party analytics service in the request path. The published Data Residency Attestation records this as at its stated date.
Is WattleAddr IRAP assessed or ISO 27001 certified?
No. WattleAddr’s infrastructure is architected to align with Australian government expectations for data residency, keeping all production data and processing onshore under Australian control, but it does not hold an IRAP assessment, ISO 27001 certification or equivalent, and does not claim one. The Data Residency Attestation states this plainly so a reviewer does not have to infer it.
Does using WattleAddr involve an overseas disclosure under APP 8?
End-user address data is not disclosed to any overseas recipient: it is processed, stored and backed up in Australia, and every sub-processor that handles it is located in Australia. The one documented exception sits outside the address request path: the developer console’s card-payment form loads the payment processor’s card-capture script from a global content delivery network, which handles no address, account or card data of end users. The Privacy Policy sets this out under APP 8.
What contractual documents are available?
A Data Processing Agreement and a Data Residency Attestation are published for every account, and the DPA applies to every workspace from creation. The Enterprise & Government plan adds a Service Level Agreement committing to 99.5% monthly uptime for the API with service credits, purchase-order and EFT invoicing, single sign-on over OpenID Connect for the console, and 365-day search-log retention. A signed copy of the attestation on company letterhead and a completed security questionnaire are available on request.
Send us the questionnaire
Tell us the requirement and we answer it clause by clause, in Australian business hours, from the people who run the service.
WattleAddr is operated by RR Sols Pty Ltd, ABN 56 672 722 486. Nothing on this page is a statement of membership of any government panel or of endorsement by any government body. The AMAS and PAF vs G-NAF guide explains the mail-deliverability boundary in full.