Cellebrite says its cloud-based digital evidence management platform, Cellebrite Guardian, has completed an assessment under the Infosec Registered Assessors Program (IRAP) at the PROTECTED classification level for Australian government agencies.
According to the company, the assessment was conducted by CyberCX, an Australian Signals Directorate (ASD)-endorsed IRAP assessor. Cellebrite said the outcome is intended to support adoption of Guardian by Australian law enforcement, public safety, correctional, defence and national security agencies.
IRAP assessments are commonly used by Australian agencies to obtain independent assurance that a product’s security controls align with government requirements, particularly for systems handling sensitive information up to the PROTECTED level. Agencies typically still need to complete their own internal authorisation processes before using a service in production.
Cellebrite said Guardian is designed to help investigators manage, review and collaborate on digital evidence, including maintaining chain-of-custody records. The company argued that as digital evidence volumes increase from sources such as mobile devices, drones, cloud services and IoT systems, on-premises infrastructure can create bottlenecks that slow evidence review and case progress.
“Every day that an agency waits to move digital evidence to the cloud is a day spent struggling with technology infrastructure instead of protecting communities, nations and businesses,” said Philippe Ouimette, Vice President of Sales, Australia and New Zealand at Cellebrite. “This assessment means Australian agencies no longer have to choose between speed and security — Guardian gives them both, backed by independent evidence they can take straight into their own authorisation process.”
Cellebrite said it will support Australian agencies through their internal authorisation steps by providing security architecture documentation aligned to Information Security Management (ISM) expectations, along with information covering data handling, sovereignty controls, auditability and chain-of-custody documentation for Guardian.
