Security built into every layer.

WorkUp Pty Ltd (ACN 669 680 675, ABN 76 669 680 675) is committed to maintaining appropriate security controls across its systems, integrations and operational processes.

WorkUp is designed to help businesses manage financial workflows, obligations and operational visibility while maintaining appropriate safeguards to protect customer information and platform integrity.

WorkUp is built around:

• Secure infrastructure
• Encryption in transit
• Two-factor authentication (2FA)
• Access controls
• Secure integrations
• Responsible data handling
• Ongoing security improvement

Security features may include:

• Two-factor authentication (2FA)
• Team access controls
• Login and session management controls
• Permission-based user access
• Transfer approval verification

Businesses remain responsible for managing authorised users and maintaining appropriate internal access controls within their organisation.

WorkUp utilises modern cloud infrastructure providers and security practices designed to support platform reliability and customer data protection.

Security measures include:

• Encryption in transit
• Secure credential and token management
• Audit logging
• Internal access restrictions
• Security patching and maintenance
• Two-factor authentication (2FA) for administrative access
• Secure cloud hosting environments

WorkUp applies the principle of least privilege when granting access to systems and customer information. Access is restricted to authorised personnel who require access to perform operational, support or security functions.

No method of transmission or storage is completely secure. While WorkUp takes reasonable steps to protect information, it cannot guarantee absolute security.

Payment, card and financial infrastructure services available through WorkUp may be provided by regulated third-party financial services providers.

WorkUp partners with licensed providers, including Airwallex, to support payment and financial workflow functionality available through the platform.

All outgoing payment approvals initiated through WorkUp require two-factor authentication (2FA) and user authorisation.

Supported card products may include card freeze and unfreeze controls, spending limits and approval workflows.

WorkUp does not hold customer deposits and is not a bank or authorised deposit-taking institution.

WorkUp connects securely to Xero using authorised authentication methods and customer-controlled permissions.

Customers maintain control over connected integrations and may revoke access at any time through their connected services.

WorkUp uses connected accounting data to power operational visibility, Obligation Engine™, reporting and automation features.

Businesses should:

• Enable two-factor authentication
• Use strong passwords
• Restrict unnecessary access
• Review user permissions regularly
• Monitor team access and devices
• Follow good cybersecurity practices

Security is a shared responsibility between WorkUp and its customers.

Security is an ongoing process.

WorkUp continues to evolve its infrastructure, operational safeguards and security practices as the platform grows.

We regularly review security controls, integrations and operational processes to support customer trust and platform reliability.

WorkUp Pty Ltd (ACN 669 680 675, ABN 76 669 680 675) is a finance automation software.

WorkUp does not provide financial product advice, taxation advice, accounting advice, legal advice or credit advice.

Where available, regulated payment and card services are issued and provided by Airwallex Pty Ltd (AFSL 487221), subject to applicable agreements and regulatory approvals. WorkUp will act as a Corporate Authorised Representative of Airwallex (appointment pending ASIC registration) to arrange access to those services.

WorkUp is not a bank and is not an authorised deposit-taking institution.

Questions regarding security can be directed to security@letsworkup.com.