Breaking
NRF invests AU$22.5M in Vault Cloud - first Defence-capability deal First Australian cloud ASD-certified for classified workloads 100% sovereign: data, offices and cleared staff all in Australia Positioned as digital backbone for future submarine fleet OpenStack architecture across Sydney & Canberra data centres IRAP assessed: PROTECTED SIG, PROTECTED Cloud, SECRET Cloud NRF invests AU$22.5M in Vault Cloud - first Defence-capability deal First Australian cloud ASD-certified for classified workloads 100% sovereign: data, offices and cleared staff all in Australia Positioned as digital backbone for future submarine fleet OpenStack architecture across Sydney & Canberra data centres IRAP assessed: PROTECTED SIG, PROTECTED Cloud, SECRET Cloud
YesPress Dossier · Company Profile
Sovereign · Secure · Australian

Vault Cloud

Australia's national hyperscale cloud - the first certified to hold the government's most classified data, and it never leaves the country.

2012Founded
100%Australian owned
AU$22.5MSeries B (2024)
2Sovereign data centres
Vault Cloud logo - Australia's National Hyperscale Cloud
Vault Cloud · 2 Constitution Ave, Canberra · Photographed for the record
Share this dossier in · LinkedIn X · Twitter f · Facebook Instagram
The Story

A cloud built for the data nobody else can hold

Most cloud companies start with scale and add security later. Vault Cloud did the opposite. Founded in Canberra in 2012 by Rupert Taylor-Price, it set out to answer a narrow, stubborn question: where does Australia's most sensitive government data actually live, and who can be compelled to touch it? The answer became a business. Vault was the first cloud certified by the Australian Signals Directorate (ASD) for classified government systems, and it has spent more than a decade turning that head start into a moat.

The pitch is unusually literal. Vault Cloud is 100% Australian-owned and operated - the entire company, including its data centres, offices and security-cleared support staff, sits within Australia and under Australian jurisdiction. There is no offshore region to opt out of, no foreign parent that a court elsewhere could lean on. For a government agency worried about who can legally reach into a system, that is the whole product. Sovereignty here is not a marketing region; it is the architecture.

"Rupert established Vault Cloud driven by his strong desire to improve citizens' lives through government." Vault Cloud, company profile
1stASD-certified cloud in Australia
3IRAP-assessed environments
~64Employees, all cleared & local
Zone 5Secure Operations Centre rating
Customers & the problem

Who trusts Vault - and why the problem is hard

Vault's customers are the organisations that cannot afford a mistake: Australian federal and state government agencies, law enforcement, the Department of Defence, defence primes and the wider defence supply chain, plus regulated critical-infrastructure operators across banking, health, energy, transport, communications and water.

These buyers share a problem the global hyperscalers only partly solve. Their data is classified - PROTECTED, SECRET, in some cases TOP SECRET - and it is governed by strict Australian controls plus, increasingly, allied requirements. Data sovereignty, security clearance of the humans with access, and physical control of the facility all matter as much as uptime.

Vault's answer is to make compliance the default state rather than a configuration a customer has to get right. The Australian Government's security controls are built into and automated across the platform, so an agency inherits them instead of assembling them. That shifts risk off the customer and onto infrastructure that was certified for exactly this job.

The AUKUS era sharpens the challenge. As the company has put it, a single system may need to satisfy US, UK and Australian rules simultaneously - a compliance puzzle most providers never attempt. Vault has positioned itself to help provide the digital backbone for Australia's future nuclear-powered submarine fleet.

"The requirements for AUKUS are quite unique in that you need to comply with US, UK and Australian requirements, all in the same system." Rupert Taylor-Price, Founder & CEO
Classification ladder

From PROTECTED to the highest tiers

OFFICIALEveryday government workloads with baseline controls and sovereign hosting.
PROTECTEDIRAP-assessed PROTECTED Cloud and Secure Internet Gateway (SIG) environments.
SECRETSECRET Cloud - the environment expanded with the 2024 NRF investment.
TOP SECRETHighest-assurance workloads for defence and national security.
Products & services

What you can actually build on Vault

Community Cloud

Government Cloud

Secure cloud for federal, state and local agencies, law enforcement and defence, with Australian Government controls automated by default.

Regulated Sectors

Critical Infrastructure Cloud

Hyperscale capacity for banking, health, energy, transport, water and communications operators needing high assurance.

Network Security

Secure Internet Gateway

Monitored, certified gateway giving classified networks controlled, defensible access to the internet.

Classified

SECRET Cloud

Environment certified for SECRET and higher workloads, expanded via the 2024 National Reconstruction Fund investment.

Domain Isolation

Cross Domain Gateway

Controlled, audited data transfer between security domains of differing classification levels.

DevSecOps

Secure Container Cloud

Container-as-a-Service on OpenStack, Kubernetes and Rancher for secure, modern application delivery.

Resilience

Backup as a Service

Sovereign backup and disaster recovery held entirely within Australian data centres.

On-Premise

VaultStack

Sovereign cloud stack for on-premise, pre-production and air-gapped environments.

Enablement

Vault Academy

Training and enablement for the verified community of partners building on the platform.

How Vault is different

Sovereignty, measured

Global hyperscalers offer Australian regions; few match all four sovereignty dimensions at once. This is an illustrative read of where Vault concentrates its advantage - legal and personnel sovereignty, not just where the servers sit.

Physical hosting
In Australia
Legal jurisdiction
AU only
Cleared personnel
All staff
Classified certification
ASD / IRAP
Open standards
OpenStack

Bars are indicative of positioning rather than audited benchmarks. Competitors include AWS (and its Australian sovereign/classified regions), Microsoft Azure, Google Cloud, Oracle, and local providers such as AUCloud, Sliced Tech and Macquarie Government.

The business model

Vault runs a B2B and business-to-government infrastructure-as-a-service model: subscription and consumption-based access to its sovereign hyperscale cloud, layered with managed security services and gateways. Its ASD and IRAP certifications are the commercial engine - they take years to earn, which limits competition and supports pricing power in a market where trust is the product.

Where the expertise sits

The company pairs open-source cloud engineering - an OpenStack architecture, Kubernetes, Ceph and Rancher - with deep national-security domain knowledge. Its board includes a former Department of Defence CIO and a former ADF Academy Commandant, while the executive team spans FinTech, SaaS and secure digital transformation. It runs on hyperscale hardware: Intel Xeon CPUs, NVMe SSDs and AI/ML accelerators.

Milestones

A decade of earning trust

2012

Vault founded in Canberra

Rupert Taylor-Price starts Vault Systems to build a cloud purpose-built for Australian government security.

2015

First ASD-certified cloud

Vault becomes the first cloud certified by the Australian Signals Directorate for classified government systems.

2018

Fujitsu PROTECTED Cloud

Fujitsu Australia launches a PROTECTED Cloud SaaS offering for government in partnership with Vault Systems.

2024

AU$22.5M NRF Series B

The National Reconstruction Fund makes its first Defence-capability investment to expand SECRET Cloud and hire ~60 staff.

2024

AUKUS submarine backbone

Vault positions to provide sovereign digital infrastructure for Australia's future nuclear-powered submarine fleet.

Leadership & board

The people behind the clearance

RT

Rupert Taylor-Price

Founder & CEO

Founded Vault in 2012; previously eight years as CEO of JN Solutions building government SaaS.

PL

Peter Lawrence

Chair

Former Chief Information Officer at the Department of Defence (2012-2017).

MS

Margaret Staib

Non-Exec Director

Former Commander of Joint Logistics and CEO of Airservices Australia.

JR

Joe Ruggero

Chief Operating Officer

Global scaling and operations experience across technology businesses.

AB

Andrew Boniface

Chief Financial Officer

20+ years across professional services and technology.

GT

Gavin Talbot

Chief Information Officer

Digital transformation leadership within secure environments.

Watch & listen

Interviews & talks

Funding & backing

The Commonwealth buys in

In December 2024, the National Reconstruction Fund Corporation invested AU$22.5 million in Vault Cloud - the first investment under the AU$10 billion fund's Defence-capability stream, and one of three deals the NRF closed within ten days.

The capital is earmarked to expand existing offerings such as SECRET Cloud, develop new services, increase capacity and hire roughly 60 additional staff, as Vault prepares to underpin sensitive AUKUS-era workloads. Reported total funding stands near US$19.9 million.

Questions

Frequently asked

What does Vault Cloud do?
It provides secure, sovereign, hyperscale cloud infrastructure - built on OpenStack - for Australian government, defence and critical-infrastructure customers, including classified PROTECTED and SECRET workloads.
What makes Vault Cloud "sovereign"?
The entire company - data centres, offices and security-cleared staff - is located within Australia and subject only to Australian jurisdiction, so there is no offshore data exposure by default.
Who owns and founded Vault Cloud?
It is 100% Australian-owned, founded in 2012 by Rupert Taylor-Price, who remains CEO. The Commonwealth also holds a stake via the National Reconstruction Fund.
What certifications does Vault Cloud hold?
Vault was the first cloud certified by the Australian Signals Directorate (ASD) and is IRAP assessed for PROTECTED SIG, PROTECTED Cloud and SECRET Cloud environments.
How is it different from AWS, Azure or Google Cloud?
Unlike the global hyperscalers, Vault operates exclusively within Australia with cleared staff and was certified for classified workloads first, making legal and physical sovereignty its core differentiator rather than an add-on region.
Connect

Find Vault Cloud