Security at AgCore
The platform holds tax file numbers, bank details and visa records. Here is how they are protected — in plain language, without a badge we haven't earned.
How records are protected
Sensitive details are encrypted
Tax file numbers and bank details — the records a farm holds so payroll can run — are stored encrypted. They exist to be handed to your payroll system, not to be mined.
Organisations are separated in the database itself
Every organisation’s records are kept separate by Postgres row-level security — enforcement lives in the database, not just in application code. A query without your organisation’s context returns nothing.
Access is earned, not assumed
Authority comes only from an active membership and its role permissions. Sign-ins use short-lived access tokens with rotated refresh tokens, HTTPS everywhere, strict cross-origin rules, and validated inputs and file uploads.
If something goes wrong, you hear about it
Data breaches affecting personal information are notified within 72 hours under the Notifiable Data Breaches scheme — the same commitment written into our data processing agreement.
Your records don’t knock off.
The season’s records stay put — encrypted, permissioned, and exportable whenever you want them.
What leaves the platform, and when
Data leaves AgCore when you send it somewhere: timesheets to Xero Payroll or MYOB AccountRight when you press export, and full exports of your own records — workers, timesheets, pay history, mapped boundaries — in open formats, any time. Your farm owns its data; there is no exit fee and no minimum term. Workers never pay to use MyFarmJob, and worker data is never sold and never used to train AI models.
Like every platform, we rely on a small set of processing services to run — payments and email delivery among them. They are listed in our privacy policy and data processing agreement.
What we don’t claim
No certification badges appear on this page because we do not yet hold one — when we do, it will be named here with its audit date. And AgCore supports your compliance work — it keeps records in the shape the Horticulture Award asks for — but it does not promise outcomes: your farm confirms every pay run.