Data Residency Attestation
RR Sols Pty Ltd t/a WattleAddr · ABN 00 000 000 000 · Last updated 12 July 2026
This attestation states where WattleAddr stores and processes data, who operates it, and which third parties are involved. It is written for procurement and security reviewers assessing whether WattleAddr meets Australian data-residency requirements. Issued by RR Sols Pty Ltd (ABN 00 000 000 000).
1. Who operates the service
WattleAddr is operated by RR Sols Pty Ltd (ABN 00 000 000 000), an Australian company incorporated and resident in Australia. We have no foreign parent company and no foreign entity in our ownership chain, so no foreign court can compel us to produce data through a parent or affiliate.
2. Where data is stored and processed
All production infrastructure is located in Australia. The primary deployment is in Sydney, operated on Australian infrastructure provided by Binary Lane Pty Ltd, an Australian company. Backups are held in Australia.
Address queries submitted to the API are processed in Australia and answered from Australia. Backups are stored in Australia. There is no foreign CDN, no offshore edge, and no third-party analytics or error-reporting service in the request path.
An end user's keystrokes reach our Australian infrastructure directly and are answered from it. They do not transit a foreign network under our control at any point.
3. Sub-processors
The following third parties process data on our behalf. All are located in Australia.
| Sub-processor | Purpose | Location |
|---|---|---|
| Binary Lane Pty Ltd | Cloud hosting & infrastructure | Australia (Sydney) |
| Pinch Payments | Payment processing (card & bank direct debit) | Australia |
We will give notice before adding a sub-processor, as set out in our Data Processing Agreement.
4. Source of the address data
Address records are derived from the Geocoded National Address File (G-NAF), published as open data by Geoscape Australia (Geocoded National Address File, open data source). G-NAF is an Australian national dataset. We ingest each quarterly release and serve it from our own Australian infrastructure; queries are not forwarded to Geoscape or any other party.
5. What we hold about end users
The service receives the address text an end user types and returns matching Australian addresses. Depending on your configuration we may retain a search log containing that query text and the matched address. Retention is set by you per workspace, and search-log data is automatically purged once your configured retention period passes.
We do not sell, share or use end-user address data for advertising, profiling or model training.
6. Access control
Access to production systems is limited to authorised personnel of RR Sols Pty Ltd located in Australia, over authenticated and encrypted channels. API keys are stored only as a prefix plus a cryptographic hash, never in plain text. Data is encrypted in transit.
7. Government access requests
We have not received a request from any government for customer or end-user data. If we receive one we will, unless legally prohibited, notify the affected customer before disclosing anything and will disclose only what we are legally compelled to disclose.
8. Standards posture
Our infrastructure is architected to align with Australian government expectations for data residency, including keeping all data and processing onshore under Australian control. We do not currently hold an IRAP assessment, ISO 27001 certification or equivalent third-party audit, and we do not claim one.
We state this plainly so a reviewer does not have to infer it. If a formal assessment is required for your procurement, contact us and we will discuss what is achievable.
9. Verifying this attestation
Contact legal@wattleaddr.com.au for a signed copy on company letterhead, a completed security questionnaire, or to arrange a security review. Technical questions can go to support@wattleaddr.com.au.
This document is provided for transparency and does not constitute legal advice. For questions, contact legal@wattleaddr.com.au.