Outsourced Cloud Providers

Outsourced Service Providers

MVA Bennett and its affiliated entities have outsourcing arrangements with certain Outsourced Service Providers whom we engage from time to time. As of 20 October 2025, MVA Bennett has outsourcing arrangements with the following Outsourced Service Providers:

(a) Active Outsourcing - Accountancy & SMSF Outsourcing

(b) TOA Global - Outsourced Accounting & Assurance Services

Cloud Providers

MVA Bennett and its affiliated entities utilise cloud services in the provision of professional services to clients from time to time. As of 20 October 2025, MVA Bennett has arrangements with the following cloud computing providers:

(a) Xero, data is stored with Amazon Web Services (AWS) and servers located in the U.S. While your personal information is stored on servers located in the U.S., it remains within Xero effective control at all times.

(b) FYI Document Manager, FYI stores its data in Amazon Web Services (AWS) data centres in Sydney, Australia, and other locations. The data is secured in each practice's unique store within AWS, using encryption and multiple layers of security, including ISO 27001 compliance and Essential Eight mitigation strategies.

(c) BGL, CAS 360 data is held by BGL in Australia on Amazon Web Services (AWS) servers, which are isolated from BGL's internal networks and have restricted access.

(d) MYOB Australia, providing MYOB, used by Accounting and Tax, headquartered in Australia, with Confidential Information stored in Australia.

(e) Intuit Australia, providing Quickbooks, used by Accounting and Tax, headquartered in Australia, with Confidential Information stored in Australia.

(f) Business Fitness, providing Active, used by Accounting and Tax, headquartered in Australia, with Confidential Information stored in Australia.

(g) CaseWare, providing Caseware Cloud, used by Audit, headquartered in the United Kingdom, with Confidential Information stored in Australia.

(h) Datasnipper, providing Datasnipper, used by Audit, headquartered in The Netherlands, with Confidential Information stored in Australia.

(i) Microsoft, providing the Microsoft Office suite, the Microsoft operating system, and internal data, headquartered in the United States of America, with Confidential Information stored in Australia.

(j) Fuse, data is held on secure Azure servers with data centres located in Australia.

(k) FeeSynergy data is hosted and supported in PCI/DSS compliant Amazon Web Services (AWS) data centres located in Australia.

(l) LightYear Docs holds user data, including client information and documents, on its cloud platform, which uses Australian-based Amazon Web Services (AWS) servers for secure storage.

(m) Spotlight Reporting holds customer data in their AWS servers located in Sydney, Australia.

(n) Fireflies notetaker, data is stored and processed in Fireflies' secure cloud infrastructure in the United States (AWS and GCP).

(o) Smartsheet holds data in its designated "data region," which can be an AWS data centre in Sydney Australia. While customer content is primarily stored locally, Smartsheet may access it globally from locations like the United States for support, security, or optimization, as outlined in their user agreements and subject to regional regulations like the Australian Privacy Act and GDPR.

(p) Altitude Innovations data are stored within the Microsoft Azure Platform, at the Australian data centres for residency requirements.

(q) Digital Rapport Data Usage and Privacy reserves the right to retain non-identifiable client data for projects including but not limited to benchmarking. Digital Rapport will remove all client identifiers and will not provide any information that can be linked to or identify individual clients to any third parties

(r) iaAutomate runs within our current network and infrastructure to automate processed within our business.