Smart Lock App
Platforms Guide

When you buy a smart lock, you are buying two things at once: the physical hardware on your door, and the software platform that manages everything behind it. The platform determines how credentials are created and shared, whether remote access is possible, how audit trails are stored, where your data lives, and what happens when the internet goes down. Two locks that look identical on a shelf can behave completely differently because they run on different platforms.

Gold Coast Smart Locks stocks hardware across five platforms: TTLock (the Sciener cloud platform, running McGrath, Lockton, Austyle, Vault and the TTLock half of the FORGE range), Igloohome (algoPIN offline technology), Yale Home / Lockwood Home (ASSA ABLOY — one platform under two brand apps; the only one in our range with native Apple HomeKit), Carbine Connect (Bluetooth-only, no cloud), and — since October 2026 — Forge Smart (Tuya), FORGE’s own app on the Tuya platform, with Wi-Fi built into the lock. Tuya is also the platform behind most generic smart locks sold through marketplaces; the FORGE range is the only Tuya-platform hardware we stock and support. This chapter covers each platform's architecture, feature set, security profile, and data sovereignty so you can make an informed decision before committing to hardware.

TTLock Platform

Sciener Technology Co., Ltd. · Beijing, China · McGrath Locks app (AU) · TTLock app (global)

☁ Cloud + Bluetooth

Architecture

Lock communicates via Bluetooth to the phone (local) and via a G-series gateway to the Sciener cloud (remote). All six passcode types are stored on the lock itself — entry works without internet. Remote access, audit trails, and PMS integration require a gateway.

Passcode types (6)

Permanent (must be used within 24 hrs of generation, then valid indefinitely) · Time-Limited (hour-accurate window up to 1 year) · One-Time (valid 6 hrs, single use) · Erase (wipes ALL codes — never share) · Cyclic (daily/weekday/weekend/day-specific) · Customised (user-defined code with custom validity). Full detail in Chapter 14 — TTLock Platform Guide.

Other credentials

eKeys (4 types: Permanent, Timed, One-Time, Cyclic) · IC card / RFID (enrolled at lock or remotely via gateway) · Fingerprint · Bluetooth app (including Touch-to-Unlock)

Gateway options

G2 (2.4 GHz WiFi — most common; fails on band-steering routers) · G3 (Ethernet/PoE only — commercial) · G4 (2.4 GHz + 4G SIM fallback — remote properties) · G5 (dual-band 2.4+5 GHz — eliminates band-steering problem, recommended for new installs). Browse the gateways and bridges range, or read the full comparison in Chapter 08 — Gateway Comparison.

Integrations & extras

Amazon Alexa · Google Home (gateway required for both) · Attendance Management (staff timesheets, holiday calendars) · PMS integration via Hospitable, Uplisting, RemoteLock, Hosthub, Cloudbeds, SabeeApp · Lock Groups (bulk management) · Freeze/Unfreeze codes

Best scale

3 to 500+ locks. One account manages dozens of properties. See McGrath brand profile in Chapter 10.

Resources

▶ McGrath Locks App Video ▶ TTLock App Video ↓ TTLock User Manual PDF → App Reference Manual → Chapter 14 — TTLock Deep Dive → TTLock for Airbnb in Australia → TTLock Tips & Tricks

The richest passcode scheduling of any platform in the Gold Coast Smart Locks range. TTLock is the correct choice for multi-property rental operators using a PMS, commercial installations requiring attendance management, and any deployment managing scale across many locks. The main trade-offs are cloud dependency for remote features and data residency in China. See the security section immediately below. PMS integration detail →

The 24-hour activation rule — the #1 cause of "my code doesn't work" calls

Permanent, Time-Limited and Cyclic passcodes must be used at least once within 24 hours of generation, or they auto-expire permanently and must be regenerated. This catches every new user and causes the majority of "code failure" support calls. Instruct all users, cleaners and guests to test their code the moment they receive it. The Erase code is equally dangerous: one use deletes all passcodes from the lock. Never share it. Full explanation of all passcode behaviour in Chapter 14.

In March 2024, CERT/CC published advisory VU#949046 documenting eight unpatched vulnerabilities in the Sciener firmware, TTLock app and G2 gateway that underpin TTLock, McGrath, Lockton, Austyle, Vault and FORGE’s TTLock locks. Sciener was notified in November 2023 and did not respond; as at 1 November 2026 its vendor status on the note is still “Unknown” and the note was last revised on 18 March 2024. Gold Coast Smart Locks discloses these in full below; the canonical treatment, with mitigations, is Chapter 14’s security section.

Seven of the eight require Bluetooth proximity — within approximately 10 metres

Seven of these vulnerabilities need an attacker physically present at your door with specialised equipment and technical capability; the exception is CVE-2023-7007, a server-side gateway-impersonation flaw that needed a gateway’s MAC address rather than proximity (an earlier version of this chapter said none could be exploited remotely — corrected here). For the overwhelming majority of Australian residential and short-stay rental properties, this is a manageable and contextually low risk. It is a materially different threat profile to a remote network attack. That said, for high-security commercial installations, strata management offices, or any site where sophisticated physical threats are plausible, these disclosures should be weighed in the platform selection decision. We recommend raising this with us directly before specifying TTLock for sensitive commercial environments. See our platform selection guide →

TTLock data sovereignty — event logs transit Sciener’s servers, location unpublished

Remote commands (remote unlock, code management, activity log retrieval) and event data are processed by Sciener’s cloud. Sciener is a Chinese company subject to Chinese law; since 2022 it has served accounts outside China through a separate endpoint, but it does not publish where that infrastructure is hosted. Local Bluetooth operations — entering a PIN at the keypad, swiping an IC card, or using Bluetooth app unlock — do not use the cloud. For most residential and short-stay rental users this is unlikely to be a material concern. For NDIS clients, body corporates, commercial property managers, or anyone with data sovereignty requirements, this is a factual consideration to weigh. No Australian-hosted TTLock option currently exists. TTLock vs Tuya data comparison →

Igloohome App

Igloohome Pte Ltd · Singapore · algoPIN offline technology · Airbnb Connect certified

✓ Airbnb Connect Certified

Key technology: algoPIN

The lock and app share a cryptographic key and time-based algorithm. When you generate a PIN in the app, the algorithm produces a code valid for the specified window. When the guest enters it at the door, the lock itself runs the same algorithm to validate it — no server, no gateway, no internet at the property required. This is fundamentally different to every cloud-validated system. See algoPIN explained in Chapter 07 and the operational deep-dive in our Igloohome Airbnb blog.

Airbnb Connect integration

Igloohome reads check-in/check-out times from Airbnb, generates a unique algoPIN for the stay, and sends it to the guest via Airbnb messaging — all automatically on booking confirmation, with no host action per booking. Code deactivates at checkout. Full workflow in Chapter 07 — Airbnb Connect.

Code types

algoPIN (time-limited, offline) · Permanent (no expiry) · Recurring (daily/weekly schedule) · One-time · RFID card/fob · Bluetooth app unlock. Note: algoPIN codes are typically longer than a standard 4-digit PIN — include this in guest check-in instructions.

Remote access (optional)

The Igloohome Bridge is an optional add-on that connects the lock to home WiFi (2.4 GHz only — band-steering routers need a separate 2.4 GHz SSID), adding: real-time activity log retrieval, remote lock/unlock, push notifications, and event log access from anywhere. The Bridge is not required for algoPIN to function. Without it, event logs are stored locally on the lock and retrieved via Bluetooth proximity. One Bridge covers up to five devices — see the compatible locks table.

Security & data

No published CVEs. algoPIN validation occurs entirely on-lock — no server is involved in code validation, which eliminates that attack surface entirely. Event data (when Bridge is connected) resides on Igloohome's servers in Singapore.

Best for

1–5 Airbnb or VRBO properties · Properties with unreliable WiFi or NBN · Hosts wanting automated guest access without a PMS · Any situation where WiFi-drop guest lockouts are unacceptable. See the Igloohome recommendation in Chapter 07.

Resources

▶ Igloohome App Video ↗ Igloohome App Quick Start Guide → Using Igloohome for Airbnb → Chapter 07 — Airbnb & Short-Stay → Igloohome Retrofit Lock Case Study

Terry's default recommendation for any Airbnb or short-stay rental application. algoPIN offline code validation means guests never get locked out due to a technology failure at the property — no internet, no problem. Airbnb Connect removes manual code management for standard bookings. The Bridge is the right add-on for hosts who also want a real-time activity log. Browse the full Igloohome range →

algoPIN's offline architecture eliminates the most common Airbnb lockout scenario

A connected lock that validates PINs on a remote server fails if the server is unreachable, the gateway loses power, or the property's NBN drops. algoPIN codes are validated on the lock's own processor using the same mathematical algorithm that generated the code in the app. The property's internet connection is irrelevant to guest entry. This is not a workaround — it is the fundamental architecture. Full explainer: Airbnb Smart Locks — Do You Really Need WiFi?

Yale Home / Lockwood Home App

Yale & Lockwood · ASSA ABLOY Group · one platform, two brand apps · Apple HomeKit native · Google Home · Alexa

✓ Apple HomeKit Compatible

Architecture

Yale locks operate standalone — PIN keypad, fingerprint (select models) and Bluetooth app all work without any hub or internet connection. The Yale Connect Plus Hub 2 adds remote access, Apple HomeKit, Google Home, Alexa, DoorSense and Auto-Unlock. The Hub is an optional add-on, not required for local operation — check what the Hub 2 works with before assuming your model is supported. Lockwood smart locks run this identical platform through the Lockwood Home app — see the note below the card.

Access methods

PIN keypad · Fingerprint (select models) · RFID card/fob · Bluetooth app (Yale Home, Yale Access) · Mechanical key backup. Guest codes issued and managed via the Yale Home app. Activity log accessible with Hub 2 connected.

Hub 2 features

Apple HomeKit (native — unique in the Gold Coast Smart Locks range) · Google Home · Amazon Alexa · DoorSense (real-time door open/closed/ajar monitoring) · Auto-Unlock (geofence-based automatic entry) · Remote lock/unlock · Push notifications · Real-time activity log. See Chapter 08 — Yale Connect Plus Hub 2.

Home automation modules

Yale Unity series supports swappable Zigbee and Z-Wave modules for integration with home automation controllers (SmartThings, Home Assistant etc.). Module compatibility varies by Yale model — see Yale module interchangeability guide.

Security & data

No published CVEs found. For both the Yale Home and Lockwood Home apps (one ASSA ABLOY platform), Australian end-user data is held in Ireland and the UK under the GDPR framework — the data controller is Security & Risk Communications Ltd, Dublin (part of the ASSA ABLOY Group; Swedish-headquartered parent) — not on mainland-China infrastructure. ASSA ABLOY also publishes a per-model statement of compliance for its Australian smart range — see what Yale and Lockwood compliance actually looks like. Local operations (keypad, Bluetooth) do not require cloud connectivity at all. Battery life is the most common real-world complaint — see battery life detail in the Yale guide.

Best for

Apple ecosystem households wanting HomeKit lock integration · Users who want DoorSense (door state monitoring) · Home automation setups using Zigbee or Z-Wave · Properties where Auto-Unlock is a priority. Yale brand profile in Chapter 10 →

Resources

▶ Yale Home App Video ↓ Yale Home App User Guide PDF → Yale Smart Locks — An Honest Guide → Chapter 08 — Gateway Comparison → Yale Unity Slim Reset Guide ↗ Lockwood Home App (lockweb)

Yale Home is the right choice when Apple HomeKit integration is the priority — it is the only platform in the Gold Coast Smart Locks range with native HomeKit support via the Connect Plus Hub 2. DoorSense (knowing whether the door is physically open, closed, or ajar) is a genuine differentiator for home users. Lockwood smart locks run the same platform, so this platform assessment applies to them too. One important caveat: Yale's coastal warranty exclusion applies to most models, detailed below. Check this before installing on any property with direct salt-air exposure. Is Yale right for you? →

Yale Home and Lockwood Home are one platform — two brand apps

Lockwood is an ASSA ABLOY brand, and its smart locks — the Lume interior lever, the 001Touch Plus deadlatch and the Latitude Slim multipoint lock, plus the Lockwood Home Hub — run the identical backend to Yale Home. The Lockwood Home and Yale Home apps are brand-skinned front-ends to the same system: either app can control both Yale and Lockwood devices, and the cyber security declarations ASSA ABLOY publishes list the software as "Yale Home / Lockwood Home" together. Everything on this page about Yale Home — the standalone-first architecture, the Ireland/UK data residency and the compliance position — applies equally to Lockwood. One nuance worth checking per product: some Lockwood hub-dependent features (remote access, voice assistants, Apple Home) are delivered through the Lockwood Home Hub rather than at the lock, so confirm the specific model's capability on its product page.

Coastal properties — read the Yale warranty terms before installing

Most Yale smart lock models exclude salt-air and coastal environments from their warranty. For Gold Coast and any beachside property exposed to direct salt air, this is a material consideration. The lock may perform adequately but warranty coverage for corrosion-related failures will typically not apply. Confirm the warranty terms for the specific model with us before purchase if your property is within direct coastal exposure range. Yale coastal installation guide →

Yale is the only platform in the Gold Coast Smart Locks range with native Apple HomeKit support

If your household runs HomeKit automations — unlocking the front door when you arrive home, locking at a set time, integrating with lights or alarm systems via Apple Home — Yale via the Connect Plus Hub 2 is the only platform in our range that supports this natively. TTLock offers Alexa and Google Home; Igloohome and Carbine Connect do not have voice assistant integration. If HomeKit is a requirement, Yale is the answer.

Carbine Connect App

Davcor Pty Limited (Carbine brand, Australian distributor) · white-labelled Sunion Technology platform · Bluetooth-only · No cloud · No gateway · SilentGrid-audited

✓ SilentGrid Security Audited

Architecture

Bluetooth Classic only. No WiFi. No cloud. No gateway. All credential management — adding codes, changing settings, retrieving the event log — requires the phone to be within approximately 10 metres of the lock. This is a fundamental architectural difference from every other platform in the Gold Coast Smart Locks range. It is a privacy feature as much as a limitation. Carbine Connect is a white-labelled build of the Sunion Technology platform — it is not TTLock and not Tuya, so none of the disclosures affecting those platforms applies to it.

PIN access types (3)

Always Active — no schedule, valid until manually deleted · Time Period — active between two set dates, deactivates at the end date · Recurring — active on a weekly, weekday-only, or weekend-only schedule. Full behaviour of each type in the Carbine Connect passcode types guide.

Other access methods

RFID card/fob · Bluetooth Auto-Unlock (geofence, ~10m, requires Bluetooth + WiFi + GPS active on phone) · QR code user sharing (one QR per user, each QR for one recipient only) · Mechanical key backup

Security audit

The CEL2-BT leverset has been independently penetration-tested by SilentGrid (Australian cybersecurity firm). Result: low risk profile. AES-encrypted authentication handshakes. One-time-use encryption keys (eliminates replay attacks). Resistant to token sniffing, brute-force entry, magnet attacks and EMP disruption. No published CVEs. Audit applies to the leverset; confirm scope with Davcor for the deadbolt variant. Audit findings in detail: the Carbine Connect security section.

Code capacity & battery

CEL2-BT-SL8 leverset: 100 combined PIN + RFID codes ⚠ verify with Davcor before specifying · CEL2-BT-DB deadbolt: 200 PIN codes · Battery: AA alkaline only — no lithium, no rechargeable. Auto-Unlock mode (constant Bluetooth scan) reduces battery life significantly.

App settings

Vacation Mode (disables all codes except admin and app users) · Dual Credential (requires PIN + RFID simultaneously) · Auto-Lock timer (5–900 seconds) · Event Log (proximity access only) · Factory Reset. See Carbine Connect App Screen FAQ (Flipsnack) →

Resources

▶ Carbine Connect App Video ↗ App Screen FAQ (Flipsnack) → Carbine CEL&CDL Range Guide → Carbine Connect Platform Guide → Carbine brand profile — Chapter 10

Carbine Connect is the right platform when privacy, simplicity, and no-cloud operation are the priority. No access event data is transmitted to or stored on any third-party server — your entry history stays on the lock and your phone. The SilentGrid audit gives it a verified security baseline that few smart lock platforms at this price point can match. The hard limitation is proximity management: if you need to issue or revoke a code without being at the property, this is not the right platform. When Carbine Connect is the right choice →

SilentGrid audit — independent Australian cybersecurity verification

SilentGrid is an Australian cybersecurity consultancy. Their Bluetooth penetration test of the CEL2-BT leverset found: AES-encrypted authentication, one-time-use session keys (each unlock uses a fresh key — a captured key from one session cannot be replayed to open the lock again), resistance to token sniffing and brute-force entry, and no firmware extraction vulnerability. This is one of the few independent published security audits on any Australian smart lock platform. Few products at this price point have equivalent documentation.

What "proximity management only" means in practice

Adding a new PIN code, changing the auto-lock timer, retrieving the event log, or deleting a credential all require your phone to be within Bluetooth range of the lock (≈10m). For a home or small office where you are regularly on-site this is not a limitation — you manage the lock the same way you always have, just via the app rather than physically programming the keypad. It becomes a limitation if you need to issue or change access while away from the property. For that use case, TTLock or Igloohome are the better fit. See the platform selection guide →

Forge Smart (Tuya) Platform

FORGE Electrical, Melbourne (brand) · Tuya Inc., Hangzhou, China (platform) · Forge Smart app · Wi-Fi built into the lock · No gateway

☁ Wi-Fi direct to cloud

Architecture

Every Forge Smart (Tuya) lock carries its own 2.4 GHz Wi-Fi radio and connects straight to the router and the Tuya cloud — there is no gateway to buy or place. Bluetooth works at the door. Remote unlock is request-based: a visitor presses a key at the lock, you get a notification and approve or decline in the app; on-demand off-site unlock, scheduled passage mode, Alexa/Google and API access are TTLock-with-gateway features. A handful of FORGE’s Bluetooth-only Tuya models use FORGE’s Zigbee + Bluetooth gateway instead. Written “Forge Smart (Tuya)” on this site so the platform is never hidden.

Access methods

PIN, fingerprint, RFID card, app and mechanical key on most models; palm vein and 3D face recognition on the premium push-pull locks; video doorbell and camera on the A60, A80, G4, RD6, S1 and D5. Remote passcodes and entry records work from anywhere; passage mode is set at the lock rather than scheduled in the app.

Smart home & app

Tuya scenes and automations (tie the lock to lights, sensors and routines). FORGE’s comparison lists no Alexa or Google voice control on its Forge Smart (Tuya) locks. The H100 manual lists Forge Smart, Tuya Smart and Smart Life as compatible apps; which one Australian customers should install is being confirmed.

Security & data

No lock-specific CVEs published for the platform. At platform level Tuya’s Trust Center lists ISO/IEC 27001:2022 and 27701:2019 certification, SOC 2 Type II and SOC 3 reports and a bug-bounty programme, and in 2022 TÜV SÜD issued an ETSI EN 303 645 attestation for Tuya’s WBR3 Wi-Fi module. By Tuya’s own country table, Australian accounts sit in its Central Europe data centre; the region the Forge Smart app uses is being confirmed. Tuya is a Chinese company subject to Chinese law — see the data-sovereignty table below.

Range, warranty & support

The 59-product FORGE range (both platforms) is supplied through Terry’s with a two-year warranty, FORGE’s own manuals and app support, and our installers behind it. Five models are sold as a TTLock variant or a Forge Smart (Tuya) variant of the same hardware at the same price, so the platform can be chosen after the lock. Compliance paperwork under the Cyber Security Rules 2025 is underway for the range; FORGE Electrical is the manufacturer under the Act.

Battery

Wi-Fi in the lock costs battery life: FORGE rates its Forge Smart (Tuya) locks “medium” against “long” for its Bluetooth TTLock locks paired with a gateway. Budget for more frequent battery changes on a busy door.

Resources

→ FORGE H100 gate lock (Forge Smart (Tuya), IP68) → Why Terry’s recommends TTLock first, and how FORGE changed the Tuya answer → Tuya in the platform decision guide → Australian brands on global platforms — who the manufacturer is under the Act → Where TTLock and Tuya host their data

Forge Smart (Tuya) is the right platform when Wi-Fi reaches the door, you want remote passcodes and entry records without buying a gateway, and approving a visitor from your phone is enough. It is not the platform for on-demand off-site unlock, scheduled passage mode, voice assistants or PMS automation — for those, choose the TTLock version of the same FORGE lock and add a G5 gateway. Grey-import Tuya locks from marketplaces are a different proposition: no Australian distributor, warranty or installer support, and we do not install or support them.

Tuya the platform vs the locks that run on it

Tuya Inc. (Hangzhou, China; NYSE and HKEX listed) is one of the world’s largest IoT platform providers, powering well over 100,000 product types across tens of thousands of brands. Many generic smart locks sold on Amazon, eBay and in general hardware stores run on it under the Tuya Smart or Smart Life app, and those are the locks that gave the platform its reputation among Australian locksmiths for difficult commissioning and no local support. FORGE answers the after-sale objections — distribution, warranty, installer support, its own app and manuals — without changing the platform’s feature trade-offs. For the two platforms head to head, see TTLock vs Tuya — the full feature comparison.

The table below maps common Australian installation scenarios to the platform that best fits. For complex situations — fire doors, DDA requirements, strata rules, coastal environments — the right platform depends on hardware compatibility as much as software preference. If no app is wanted at all, the prior question is answered in Chapter 16 — mechanical versus smart.

Platform and hardware compatibility are not always interchangeable

The platform determines the software experience; the hardware determines what fits your door. A fire-rated lever on a Carbine Connect platform does not exist — the fire-rated Carbine models (CEL2-3IN1-SL8-FRKIT) are standalone, not Bluetooth-app-connected. Similarly, DDA-compliant levers are available on TTLock and Yale hardware only within the Gold Coast Smart Locks range. Always confirm door compatibility, bolt type, and compliance requirements before selecting a platform. Chapter 02 — Measuring Your Door and Chapter 04 — Door Types are the starting points.

The table below summarises the security and data residency profile of each platform. "Cloud needed for entry" means whether the internet must be live at the property for a guest or user to unlock the door — the answer is no for all five Gold Coast Smart Locks platforms, which is the minimum standard we consider acceptable for residential and short-stay use.

A note on data sovereignty — and why the concern is mainstream, not fringe

For most residential users and short-stay hosts, data held by a Chinese company (TTLock, Tuya) or in Singapore (Igloohome) is an accepted norm, comparable to other smart-home platforms, and there is no public evidence that any smart-lock platform has handed customer data to a foreign government. But for NDIS clients, body corporates, commercial property managers, government tenants, or anyone with data-sovereignty requirements, where access-event data is held — and who could compel access to it — is a material procurement consideration.

The concern is structural rather than an accusation. Under China's National Intelligence Law (2017), Chinese organisations and citizens are required to support and cooperate with state intelligence work, and intelligence agencies can demand that assistance; the country's 2017 Cybersecurity Law adds data-localisation and state-access provisions. A platform run by a China-domiciled company (Sciener behind TTLock; Tuya behind Forge Smart (Tuya)) therefore sits within that legal framework regardless of the company's own intentions — so the issue is what could lawfully be compelled, not proof that anything has been.

This is a mainstream, government-level concern rather than a fringe one. Australia barred Huawei from its 5G network in 2018; in February 2023 the Defence Department and other agencies removed more than 900 Chinese-made surveillance cameras, intercoms and electronic entry systems (Hikvision and Dahua) from government buildings; and in April 2023 the federal government banned TikTok from official devices — each on the advice of intelligence and security agencies. Those steps mirrored the United States, United Kingdom, European Union, Canada and New Zealand acting on the same legal exposure, and the pattern has continued: Australia removed DeepSeek and Kaspersky from government systems in 2025, and in March 2026 the US FCC blocked new authorisations for all foreign-made consumer Wi-Fi routers. The companies involved dispute the risk and no public breach of a smart-lock platform has been demonstrated, but governments have repeatedly chosen caution for sensitive settings.

For a normal home this rarely changes the recommendation. For a sensitive or government-linked installation it is a legitimate factor to weigh — and Carbine Connect's no-cloud architecture removes the question entirely for anyone who can accept proximity management. If this applies to you, raise it before committing. The full consumer-facing treatment — which platforms host where, and the legal frameworks behind each — is in our data sovereignty guide, including why the ASSA ABLOY hosting position differs. Ask us before you commit →

Since 4 March 2026 — a mandatory cyber security standard applies too

Separate from where data lives, the Cyber Security (Security Standards for Smart Devices) Rules 2025 now require connected locks manufactured on or after 4 March 2026 to meet three baseline requirements — no universal default passwords, a published channel to report security issues, and a published security-update support period with an end date — with the manufacturer issuing a statement of compliance and the supplier not supplying the product without one. Within this range, ASSA ABLOY (Yale and Lockwood) publishes individual per-model cyber security declarations for its Australian smart range, which is a clear, inspectable example of what the standard asks for. For the TTLock/Sciener platform, the CVEs above were reported through the proper channel and went unanswered, and no published vulnerability-disclosure channel or support-period end date is readily found — relevant context when weighing that platform. Ask any supplier for the declaration on newer stock — what a statement of compliance should contain is set out in Chapter 11. Full detail: Chapter 11 — Cyber Security: Australia's Smart Device Law.

Disclaimer: Platform features, third-party integrations, app functionality and hosting arrangements change over time with firmware, platform and corporate updates. CVE information reflects CERT/CC advisory VU#949046, published March 2024 and last revised 18 March 2024 (vendor status Unknown as at 1 November 2026) — check the current position at kb.cert.org. Data-residency and compliance statements reflect what each vendor published as at 1 November 2026; FORGE platform statements are taken from FORGE Electrical’s published TTLock vs Forge Smart comparison. Verify the current position with your supplier before purchasing, and ask for the statement of compliance on any lock manufactured on or after 4 March 2026.

Which Smart Lock Platform Is Right for You?

Decision-tree blog covering the five Gold Coast Smart Locks platforms, with a gate-lock section and specific use-case scenarios. Start here if you're unsure.

Airbnb Smart Locks: Do You Really Need WiFi?

Igloohome vs TTLock decision framework for Australian short-stay hosts — the foundational platform comparison blog.

Using TTLock for Airbnb in Australia

How gateways, PMS platforms and passcode scheduling work in practice. The operational guide for TTLock Airbnb setups.

Using Igloohome for Airbnb in Australia

How algoPIN and Airbnb Connect actually work day-to-day — including what happens when the property internet drops.

TTLock vs Tuya — Smart Lock Platforms Australia

Why Gold Coast Smart Locks stocks TTLock and not Tuya — an honest platform-to-platform comparison including data sovereignty.

Carbine Connect Platform Guide

Full operational guide to Carbine Connect — setup, PIN types, auto-unlock, event log retrieval and the SilentGrid security audit explained.

Yale Smart Locks in Australia: An Honest Guide

What Yale does well, what to be aware of, battery life realities, and the coastal warranty question answered plainly.

Your Data and China: The Risks and Reality

Where each platform actually hosts your access data, the legal frameworks behind it, and what it means for an Australian buyer.

Not sure which platform suits your property?

Tell us your door type, use case, whether you need remote access, and whether Airbnb automation or HomeKit matters. We will match you to the right hardware and platform combination from day one.

Get a Free Expert Recommendation (07) 5601 1867

Terry's Gold Coast Smart Locks Ready to shop? Browse our full range — same team, same expert advice.

Shop All Locks → Get Expert Advice (07) 5601 1867