Privacy Policy & APP 8 Compliance

1. Introduction & Overview

MCR Global ("we", "us", "our") operates as a cloud-native technical capacity provider to Australian accounting practices, tax agents, bookkeeping agencies, and wealth advisory firms. We are committed to safeguarding all personal, financial, and taxation information entrusted to us in strict accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. APP 8 (Cross-Border Disclosure) Commitments

Under Australian Privacy Principle 8 (APP 8), Australian registered Tax Agents, financial practices, and advisory firms that disclose personal information to overseas service providers must take reasonable steps to ensure the overseas recipient does not breach the APPs. MCR Global legally warrants and covenants that:

• We handle all client data strictly for the contracted purpose of accounting, tax, wealth back-office, and financial reporting preparation.
• We never sell, rent, disclose, or transfer personal or financial data to any third party.
• We adhere to data protection standards equivalent to those required under Australian sovereign law.

3. Zero Local Storage Technical Architecture

To eliminate cross-border data leakage risks, MCR Global operates on a strict Zero Local Storage security policy:

• Cloud Access: Delivery accountants log directly into the partner practice's multi-tenant cloud applications (Xero, MYOB, Class, LodgeiT) hosted in Australian sovereign data centers (AWS / Azure Australia regions).
• Remote Desktop Protocol (RDP): For server-based tools like Access HandiSoft or Reckon Elite, accountants work inside encrypted RDP/VDI sessions hosted on your infrastructure. Local downloads, clipboard transfers, and local file exports are strictly blocked.
• Session Isolation: Workstations are secured with disk encryption, endpoint detection, and enforced Multi-Factor Authentication (MFA).

4. AI Tooling & Data Privacy Policy

MCR Global does not train proprietary or open-source artificial intelligence models on client accounting data. All commercial AI tools utilized in delivery (such as Xero JAX, Dext Precision, Hubdoc, or Claude for Excel) are enterprise-licensed commercial solutions operating under vendor data processing agreements prohibiting customer data retention for model training.

5. Contact Our Privacy Officer

If you have questions regarding our data privacy governance or wish to request a copy of our Standard Data Processing Addendum (DPA), please contact: