Fixed-price automations for Microsoft 365 and your practice management system. Hosted in Australia. Sensitive data stays onshore.
Settlement figures, trust account instructions, claims and ID documents move through email every day. Fraudsters target the moment money changes hands, and regulators expect you to show your controls, not describe them.
AML/CTF Tranche 2 is live. Lawyers providing designated services, such as property transactions, company and trust setup and handling client money, must enrol, run an AML program and do customer due diligence.
What Tranche 2 means for your workflows →
Cyber is a licence obligation. Insurance brokers hold an AFS licence. ASIC has now taken two licensees to court over cyber controls, most recently Fortnum Private Wealth, penalised $1.35 million in 2026.
Complaint and breach clocks. AFS licensees must resolve standard complaints within 30 calendar days and report reportable situations to ASIC within 30 days.
Data that needs to stay in Australia stays here, in your Microsoft 365 tenant or our Australian Azure. Where a project genuinely benefits from a more capable overseas model, we use it only for data that is allowed to leave, with your sign-off.
Automations that handle client PII, ID, TFNs or financial data run on Australian-hosted solutions only. Rules and Microsoft-native tools first.
You know the cost before we start. Anything outside the standard stack is quoted upfront.
Built and managed by a cyber security MSP that already looks after professional practices, not a generic automation agency. Every engineer is based in Australia: no offshore developers or helpdesk.
Built for Microsoft 365 Business Premium with SharePoint. LEAP, Actionstep and broking platforms on request.
Correspondence on the file, not in the inbox.
Emails with a matter or client reference file themselves to the right place, with a 7-year retention safety net and a weekly unfiled report; a prompt before send to follow.
Early access, about a 4-week lead time: book a practice review
No money moves on an email alone.
Requests to change settlement, trust, refund or claim payment details are flagged, and a call-back to a number already on file is assigned and logged, so your team verifies before paying.
Prove your AML program actually runs.
For law firms providing designated services. New matters trigger ID checks, sanctions and PEP screening, beneficial-owner capture and a risk rating, with the evidence on file.
Early access: quoted after a practice review
Find the ID and claims data you didn’t know you had.
We scan email and OneDrive for ID documents, TFNs and health or claims information, report exposure by mailbox, and warn staff before the next one is sent.
Never miss a 30-day clock.
Log a complaint or incident in a minute. Reminders run ahead of the deadline, and possible reportable situations are flagged for review.
Products 01, 02 and 04 together.
Correspondence on file, payment changes verified, and exposed client data found, in one engagement.
Matter & Client Email Filing joins when released; the rest can start now, and the bundle price is held for 6 months. Register interest
Of the 5 products here: 3 available now and 2 in validation. Last reviewed 29 October 2026.
Built on Microsoft 365 features and tools we already run. We can install it today at the published price.
Being piloted with a client before general release. Early access, quoted after a practice review.
Being built. Register interest and we will tell you when it is ready; we take no payment until it is released.
Two of the five products, as your team would see them. Everything runs inside your own Microsoft 365.
Every product stands alone. Tick the ones that fit and the bundle discount applies itself.
All prices ex GST for firms of up to 10 staff. Larger firms, and practice management or broking platforms outside Microsoft 365, are quoted upfront. The AML pack applies to law firms providing designated services. Evisent managed clients receive 10% off setup, or the bundle price if that is lower (not both). ID verification checks are passed through at cost.
The products cover the jobs most practices share. Your business has its own. Tell us the job that eats your team’s week and we’ll scope a custom automation inside your Microsoft 365, quoted at a fixed price before we start.
A 30-minute call to map your systems and pick the right product.
Scope and price in writing before any work starts.
Built in your own tenant and tested with your team.
We monitor it, keep it working through vendor changes and review it quarterly.
You can. Self-serve AML tools start at about $50 to $300 a month, and you run them yourselves. We build the workflow into the systems you already use (Microsoft 365 and your practice management system), run the checks, keep the evidence in your AML register and client file, and manage it every month. If a self-serve tool suits you better, we will say so in the practice review.
Usually not. General insurance broking is not a designated service under the AML/CTF Act; Tranche 2 is aimed at lawyers, accountants, real estate agents and similar professions. We confirm it against the services you actually provide in the practice review. Brokers typically start with the payment guard, the complaints register and the exposure sweep.
Those sit outside the standard stack, so we quote the integration upfront after the practice review. The Microsoft 365 side works the same either way.
Not the data that needs to stay here. Client personal information, ID, tax file numbers and financial data stay in your Microsoft 365 tenant or our Australian Azure. If a project would genuinely benefit from a more capable model hosted overseas, we use it only for data that is allowed to leave, with your sign-off and within your compliance obligations.
The classic settlement and claims fraud: a spoofed or compromised email changing where money goes just before it moves. The email is flagged, a call-back to a number already on file is assigned and logged, and if you choose the email is held until that call is done. We cannot block a payment in a banking or trust account system, so the call-back has to be part of your process.
Thirty minutes to map your systems and pick the right product. If nothing needs doing, we will tell you that.