Security statement

Suffice Finance Pty Ltd is committed to safeguarding the confidentiality, integrity and availability of the information customers entrust to us and the systems that support our lending platform. This statement summarises the principles we hold ourselves to.

Our commitments

• Comply with all applicable laws and regulatory requirements for Australian credit licence holders, including our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles;
• Protect customer data through appropriate technical and organisational controls, aligned with recognised standards including the principles of ISO/IEC 27001 and the Australian Government Information Security Manual;
• Encrypt data in transit, restrict access to information on a need-to-know basis, and require multi-factor authentication on our systems;
• Ensure the integrity and security of applications, assessments and customer records throughout the life of a loan;
• Maintain the capability to detect, respond to and recover from security incidents, including notifying affected customers and the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme requires it;
• Conduct security awareness training for everyone who works with customer information, and hold our service providers to equivalent standards; and
• Review and continuously improve our controls as threats, technology and our business evolve.

What you can do

We will never ask you for your banking password by phone, SMS or email. If you receive a message claiming to be from Suffice that asks for credentials or payment to release a loan, do not respond. Call us directly on 0451 248 745. If you believe information you have given us has been compromised, contact us immediately and we will work with you to secure your account.

You can report scams to Scamwatch at scamwatch.gov.au. If you're concerned your identity has been compromised, IDCARE (Australia's national identity and cyber support service) provides free help on 1800 595 160.

Reporting a vulnerability

If you believe you have found a security vulnerability in this website or our systems, we want to hear about it. Email info@suffice.com.au with "Security" in the subject line. Please act in good faith: do not access or modify other people's data, and give us a reasonable opportunity to remediate before public disclosure.

Related policies

See our privacy policy for how we collect, use and hold personal information, and our credit reporting policy for how credit-related information is handled.