Security
Built so that the boundaries hold.
CremTrack™ carries compliance records and private family journeys. This page explains how they are kept apart.
iHow it is protected
Six principles, built into the system.
- Organisation separation
- Access is enforced server-side across the tested routes and roles, which keeps each crematorium, practice and application to its own data.
- Role-based access
- Owners, operators, drivers, practices, inspectors and ANC staff each have their own permissions, and staff have individual accounts.
- Audited history
- Custody, credit and regulator histories are audited or append-only where the tested system enforces it.
- No payment on this website
- This website takes no payment and collects no card details. Your plan and its terms are confirmed in writing.
- Care codes stay private
- A care code is checked in your browser, which takes you straight to the current tracker. It is never sent to this website.
- Inspector access
- Limited to one premises and a set time, revocable and audited. Inspectors cannot edit source records. Their requests, findings and comments sit in a separate regulator layer.
iiFamily privacy
Families see care, and nothing else.
A family's page holds one companion's journey, reached by a private care code. It shows no readings, prices or staff names.
Family contacts, tracking links and prices are excluded from inspection workspaces and commercial movement documents.
To report a security concern, email hello@cremtrack.com.
Designed around current published requirements. APHA has not approved, accredited or endorsed CremTrack™.
This page describes how the platform is designed. CremTrack™ does not claim any security certification.

Bring your records somewhere protected.
Choose the route that fits your premises.
