Fixed-price automations for Microsoft 365 and Xplan. Hosted in Australia. Sensitive data stays onshore.
Client instructions, advice documents and ID move through email every day. Licensees now expect practices to show their cyber controls, not just describe them.
$1.35 million for weak cyber oversight. The Supreme Court of NSW penalised Fortnum Private Wealth $1.35 million after it admitted it failed to adequately oversee and monitor the cyber resilience of its more than 200 authorised advisers. Expect your licensee to ask for verified evidence, not self-attestation.
Advice records on demand. Personal advice records must be kept for seven years and given to your licensee on request.
Complaint and breach clocks. Standard complaints must be resolved within 30 calendar days, and licensees must report reportable situations to ASIC within 30 days.
Data that needs to stay in Australia stays here, in your Microsoft 365 tenant or our Australian Azure. Where a project genuinely benefits from a more capable overseas model, we use it only for data that is allowed to leave, with your sign-off.
Automations that handle client PII, ID, TFNs or financial data run on Australian-hosted solutions only. Rules and Microsoft-native tools first.
You know the cost before we start. Anything outside the standard stack is quoted upfront.
Built and managed by a cyber security MSP that already looks after advice practices, not a generic automation agency. Every engineer is based in Australia: no offshore developers or helpdesk.
Built for Microsoft 365 Business Premium and Xplan. Other advice platforms and licensee-mandated registers on request.
Advice records filed, not left in the inbox.
A 7-year retention safety net and a weekly report of unfiled client email, with filing into Xplan once our integration is confirmed.
Early access, about a 4-week lead time: book a practice review
Every withdrawal request flagged for a call-back.
Requests to withdraw, roll over or redirect funds are flagged, and a call-back to a number already on file is assigned and logged.
Find the TFNs you didn’t know you had.
We scan email and OneDrive for TFNs, ID and statements, report exposure by mailbox, and warn staff before the next one is sent.
Verified evidence, not self-attestation.
Evisent completes your cyber insurance renewal questionnaire or licensee attestation from your Evisent Live evidence and attaches the pack.
Never miss a 30-day clock.
Log a complaint or incident in a minute. Reminders run ahead of the deadline, and possible breaches are flagged to your licensee.
Products 02, 04 and 05 together.
Answers your licensee’s three hardest questions: fraud, cyber evidence and complaints.
Of the 5 products here: 4 available now and 1 in validation. Last reviewed 29 October 2026.
Built on Microsoft 365 features and tools we already run. We can install it today at the published price.
Being piloted with a client before general release. Early access, quoted after a practice review.
Being built. Register interest and we will tell you when it is ready; we take no payment until it is released.
Two of the five products, as your team would see them. Everything runs inside your own Microsoft 365.
Every product stands alone. Tick the ones that fit and the bundle discount applies itself.
All prices ex GST for practices of up to 10 staff. Larger practices, other advice platforms and licensee-mandated registers are quoted upfront. Insurer & licensee submissions draw on Evisent Live, which is included with Evisent Managed IT. Evisent managed clients receive 10% off setup, or the bundle price if that is lower (not both).
The products cover the jobs most practices share. Your business has its own. Tell us the job that eats your team’s week and we’ll scope a custom automation inside your Microsoft 365, quoted at a fixed price before we start.
A 30-minute call to map your systems and pick the right product.
Scope and price in writing before any work starts.
Built in your own tenant and tested with your team.
We monitor it, keep it working through vendor changes and review it quarterly.
Yes. We answer the questionnaire from your Evisent Live evidence and attach the Live Evidence Pack, and Evisent Live comes with Evisent Managed IT. One submission a year is included for managed clients. The other four products work whoever runs your IT.
Not the data that needs to stay here. Client personal information, ID, tax file numbers and financial data stay in your Microsoft 365 tenant or our Australian Azure. If a project would genuinely benefit from a more capable model hosted overseas, we use it only for data that is allowed to leave, with your sign-off and within your compliance obligations.
Usually, yes. Licensee-mandated registers sit outside the standard stack, so we quote that integration upfront after the practice review.
The common fraud: a compromised or spoofed client email asking to redirect a withdrawal. The email is flagged, a call-back to a number already on file is assigned and logged, and if you choose the email is held until that call is done. We cannot block a payment in your banking system, so the call-back has to be part of your process.
Thirty minutes to map your systems and pick the right product. If nothing needs doing, we will tell you that.