Security & Privacy

Curia is committed to protecting your firm's data and privacy. Industry-standard security practices and robust data protection across the full lifecycle.

Data protection and storage

Data is encrypted both during transmission and storage
We utilise enterprise-grade cloud infrastructure for reliable and secure operations
Data is stored in Australia. Some processing is performed by our technology suppliers outside Australia, including in the United States and other countries where those suppliers operate.
Regular backups help protect against data loss

Access and security

Single Sign-On (SSO) integration with Microsoft and Google accounts provides enhanced security
Firms maintain complete control over user access and permissions
Our unified workspace ensures visibility while maintaining security

System reliability and support

Systems are monitored 24/7 for optimal performance
Australia-based support team available 7 days a week
Regular system updates and security patches
Regular backups with documented recovery procedures

Privacy practices

Contract data is used to deliver your reviews and is not shared with other firms
Our AI providers do not use your data to train their models
Aggregated market insights are produced only from deidentified data pooled across multiple firms

Use of AI

Purpose

This section explains how Curia uses artificial intelligence and other computer programs to process the documents firms upload. It gives firms the information they need for their own privacy obligations, including the automated decision-making requirements in APP 1.7-1.9 of the Privacy Act 1988 (Cth), which apply from 10 December 2026.

It is general information, not legal advice. Each firm decides whether its use of Curia falls within those requirements.

What Curia does

Curia uses artificial intelligence and rule-based computer programs to read the documents a firm uploads for a property matter, organise the information in them and prepare reports. It produces two kinds of report.

Review reports are drafts for the firm's lawyers and conveyancers. The firm reviews and edits them and uses them in its own advice.
Summary reports are plain-language summaries for the firm's client. They are prepared automatically and include items such as key dates and estimated costs. The firm approves each summary before Curia sends it to the client on the firm's behalf.

Personal information involved

These programs process the personal information that appears in the uploaded documents:

names of vendors, purchasers, tenants, guarantors and other parties
residential and postal addresses, and contact details shown in the documents
ABN and ACN
citizenship or residency status
property ownership and interests recorded on title, such as mortgages and caveats
financial terms, such as price, deposit, rent, adjustments and owners corporation levies
signatures and signing dates

Curia does not process health or biometric information.

Decisions and human review

Curia does not give legal advice. Any advice comes from the firm, under its own policies and control.

Curia's programs make some automated and rule-based determinations, such as:

calculating key dates and estimated costs from the contract terms
identifying matters in the documents that may need attention
preparing recommendations and summaries

None of these reaches a client until a person at the firm has reviewed and approved it. No decision is made solely by a computer program.

Where processing happens

Documents are stored in Australia. Some processing is performed by Curia's technology suppliers outside Australia, including in the United States and other countries where those suppliers operate. Suppliers are engaged under contractual terms that restrict their use of the data to providing services to Curia, and AI model providers do not have access to document content.

Improving Curia

Curia may use uploaded documents to test, train and improve its own features, as set out in clause 21.8 of the terms and conditions . Curia does this work itself, and the improved features apply to every firm rather than to a single account.

Suggested wording for your privacy policy

The OAIC expects an organisation in doubt about whether it is in scope to include the information anyway. Firms can adapt the wording below, which follows the format of the OAIC's own examples. Adjust it to match how your firm actually uses Curia.

Decisions supported by computer programs

We use a document review platform, which includes artificial intelligence, to help us review documents in property transactions. It processes the following kinds of personal information:

names, addresses and contact details of the parties
ABN, ACN and citizenship or residency status
property ownership, title interests and the financial terms of the sale or lease
signatures and signing dates

We use this information to help our staff review contracts and related documents, identify issues, and prepare advice and summaries, including key dates and estimated costs.

No decision is made solely by a computer program. Our staff review every output and approve any summary before it is sent to you.

Updates and contact

Curia updates this section when its AI features or providers change. Questions go to info@curia.com.au.

For detailed information about our policies, please refer to:

This overview provides general information about Curia's approach to privacy and security. For specific questions about how we handle your firm's data, contact Curia directly.