Security Centre

How we protect your identity and immigration documents

Your account is protected

Signed in as . Your session is encrypted and your documents are stored securely.

Active Session

Strengthen your account with Two-Factor Authentication

2FA adds a second verification step using your mobile phone or an authenticator app. Even if your password is compromised, your account remains protected. This is especially important given the sensitive immigration documents stored here.

SMS verification
Authenticator app (TOTP)
Email verification

How We Protect Your Data

End-to-End Encryption

TLS 1.3

All data transmitted between your device and our servers is encrypted using TLS 1.3 — the same standard used by major banks and financial institutions.

Encrypted Storage at Rest

AES-256

Your documents and personal data are stored with AES-256 encryption at rest. Even in the unlikely event of a storage breach, your files remain unreadable.

Two-Factor Authentication (2FA)

Recommended

We strongly recommend enabling 2FA on your account. Once active, signing in requires both your password and a one-time code sent to your phone or authenticator app.

Enable 2FA in Account Settings

Private by Default

Isolated

Your visa journey, documents, and personal data are only visible to you. No other user — including platform staff — can access your private records.

Document Access Control

Signed URLs

Every document you upload is stored in isolated, user-scoped cloud storage. File URLs are time-limited signed links — they expire automatically and cannot be shared accidentally.

Secure Cloud Infrastructure

SOC 2

Pathways is hosted on enterprise-grade cloud infrastructure with SOC 2 compliance, automatic backups, and continuous security monitoring 24/7.

Security Best Practices

Use a strong, unique password — at least 12 characters with a mix of letters, numbers, and symbols.

Enable two-factor authentication (2FA) using an authenticator app like Google Authenticator or Duo.

Use an email address you control and check regularly — security alerts are sent there.

Never share your login credentials or document links with third parties.

Regularly review your active sessions and sign out of devices you no longer use.

Only access Pathways on trusted networks. Avoid using public Wi-Fi for sensitive uploads.

About Your Uploaded Documents

Documents uploaded to the Document Vault (passports, bank statements, employment letters, etc.) are stored in encrypted, isolated cloud storage accessible only to you. Document view links are time-limited and authenticated — they cannot be accessed by anyone else, even with the URL. We never share your documents with third parties. If you choose to submit to the government portal, that submission goes directly from you to the Department of Home Affairs.

Pathways uses enterprise-grade security infrastructure. For questions about data handling, please review our Privacy Policy. This platform does not provide legal advice.