Security, reliability, and responsible AI - all in one place.

Since 2020, Breathe has been owned by Australian software provider ELMO (ASX:ELO), who were founded all the way back in 2002. 

ELMO are the fastest-growing HR software company in the region and offer the only integrated HR, payroll & rota, time and attendance in Australia and New Zealand. 

Your data is held in our highly secure data centre in London (as of 14th December 2020) where the data protection regulations are some best in the world. If you are a UK or Irish based company, rest assured that none of your data leaves the United Kingdom so you will comply with data protection regulations.

The security of your data is our number one priority. Breathe uses HTTPS encryption that ensures your data is always encrypted as it travels from our servers to your web browser.

A dedicated access server monitors, logs and controls all access to our data servers. It provides a single point of entry and ensures that your data can only be accessed from specific locations that we control. This process uses multiple layers of authentication and any attempt to access our servers from any other location will be denied and logged.

Our servers are held in a highly secure data centre in London that has complete CCTV coverage, motion sensors, reinforced access doors, controlled key storage systems, and an array of additional physical controls.

Beyond protecting your data at an infrastructure level, we are committed to the responsible use of AI within our platform. Our ISO 42001 accreditation means that wherever AI features appear in Breathe — from intelligent reporting to automated workflows — they are subject to the same rigour and oversight we apply to every other part of our security programme. 

Breathe HR software is hosted in two independent secure locations both in the United Kingdom, the first in London, the second failover centre is in the UK. With data and code synchronised in real-time to both locations, Breathe has complete redundancy even in the event of a complete site failure.

The system is backed up on a daily basis to a third party location using industry-leading standards of security and encryption. Backups are kept for seven days. In addition, a backup is kept for the 1st of each month for three months. The backup includes all client data and documents.

It is very easy to import your employee data in to Breathe. Full instructions can be found at Breathe Support.

Yes, it is very simple to export your data from the application and your documents can be individually downloaded. If you have any questions just email our Support Team.

Yes - you'll have the option to switch this on within your settings. Once switched on, your people will need to provide a unique code from an authenticator app - as well as their usual password - each time they log in. This extra layer of security provides peace of mind and keeps your people's data extra-safe. 

Yes. We were awarded ISO/IEC 42001:2023 accreditation in June 2026 — the international standard for Artificial Intelligence Management Systems. This certification confirms that an independent third party has validated how we govern the development and use of AI within our platform. It sits alongside our long-standing ISO 27001 information security certification. Together, they reflect our commitment to keeping your data secure and ensuring that the technology we build is ethical, transparent, and responsibly managed.