.png)
Checkmate has completed an Australian Government IRAP Assessment, one of the most rigorous independent security reviews in the country, performed by an ASD-endorsed IRAP assessor.
Background screening sits at the intersection of sensitive personal data and high-stakes decisions. Every day, Checkmate's platform processes identity documents, police check results, reference outcomes, and employment histories for real people across hundreds of organisations. When you're handling that kind of data, "trust us" isn't enough.
We've always taken data security seriously at Checkmate, but completing an IRAP assessment is a different level of commitment. That's what led us to pursue an Australian Government IRAP Assessment, one of the most thorough independent security reviews available in this country.
IRAP is the Australian Government's framework for independently assessing whether a system or service meets the security requirements of the Information Security Manual (ISM). An ASD-endorsed assessor reviews your infrastructure, your processes, your people and your controls, covering everything from how data is encrypted and stored to how security incidents are detected and logged.
Checkmate's assessment was completed at OFFICIAL: Sensitive — the classification level that covers most sensitive government data, including information that could cause harm to individuals or organisations if disclosed without authorisation.
It's thorough. It takes time. And it doesn't let you off easy.
"This assessment has been nearly a year in the making. It's the most thorough security review we've ever been through — and honestly, it made us a better, more secure organisation in the process. We didn't just want to pass. We wanted to build something we could stand behind."
— Nathan Pye, Head of Service Delivery, Compliance & Integrations.
For government agencies handling data classified at OFFICIAL or above, an IRAP-assessed vendor is a baseline requirement. For enterprise organisations outside government, it's increasingly becoming a proof point that cuts through vendor security promises.
Checkmate already works with government organisations, but the IRAP assessment changes what we can take on. Federal departments handling data at the OFFICIAL: Sensitive classification require an independently assessed vendor. We're now that vendor.
The IRAP assessment process forced us to examine and tighten every part of our security posture, not just what was needed to pass, but what good looks like. That benefits every customer on the platform.
When you run background checks through Checkmate, you're running them on infrastructure that has been independently assessed against some of the most demanding security standards in the country.
At Checkmate, your candidate data has always been protected. Now that's been independently verified against the Australian Government's own security standard. When your board, risk team, or procurement function asks how data is being handled, you're not pointing to a policy doc or a vendor promise, you're pointing to independently assessed security controls.
This assessment reaffirms Checkmate's commitment to the organisations and people who rely on our platform, and to maintaining the highest standards for how their data is handled."
"Completing this assessment opens doors we haven't been able to walk through before, particularly in the Australian federal government market. But more than that, it signals the kind of company Checkmate is becoming. Security isn't a checkbox for us. It's how we're building”, says Nathan.
For organisations in government, regulated industries, or large enterprises wanting to understand what this means for your specific context, book a call with our team.
Checkmate has undergone an Australian Government IRAP Assessment for data classified up to OFFICIAL: Sensitive, conducted by an ASD-endorsed IRAP assessor. For further information on the IRAP program, visit cyber.gov.au/irap.
