Accreditation evidence
Chasing down backup logs, access reviews and continuity plans the week before your survey.
For GP clinics
IT that keeps your clinic accredited, online and out of the news.
Patient records are among the most valuable data a criminal can steal, and health is the most-breached sector in Australia. We run your clinic's IT and security so your team can focus on patients, not passwords.
Limited onboarding slots each year. Every application is reviewed.
The problems we fix
What keeps GP clinics up at night.
Fragile integrations
Clinical software, Medicare claiming, secure messaging and My Health Record breaking after an update.
Shared logins and stray laptops
Reception PCs everyone uses, ex-staff accounts that never got disabled and patient data on unencrypted devices.
Ransomware downtime
A single phishing email can stop consults dead and put patient data on the dark web.
What you get
Handled for you.
- Security controls and documentation that support your RACGP accreditation
- A tested backup and recovery plan for your clinical system
- Phishing-resistant MFA and individual logins for every clinician and receptionist
- Your clinical software, Medicare, secure messaging and My Health Record connectivity looked after
Fixed price. One bill.
We pay for all your cloud subscriptions and IT costs, and you get one convenient bill every quarter. No hourly rates, no surprise invoices.
The rules that apply
Obligations we help you stay on top of.
We align your IT to the expectations below. This is general information, not legal advice.
RACGP Standards for general practices
Accreditation expects documented information security, access controls, backups and a business continuity and information recovery plan. The 6th edition, released in August 2026, raises the bar further on cyber security and ICT governance.
Source: RACGP(opens in a new tab)My Health Record Rule 42
Organisations connected to My Health Record must have a written security and access policy that is communicated to staff, enforced, and reviewed at least once a year.
Source: OAIC(opens in a new tab)Notifiable Data Breaches scheme
Health service providers are covered by the Privacy Act regardless of turnover, and health was the most-breached sector in Australia in 2025. Eligible breaches must be assessed quickly and reported to the OAIC and the people affected.
Source: OAIC(opens in a new tab)ASD Essential Eight
Australia's baseline strategies for stopping cyber attacks. We align your environment to Maturity Level 1 or 2, the levels cyber insurers increasingly ask about.
Source: ASD's ACSC(opens in a new tab)Your software
We manage the apps you already use.
Product names are shown for identification only and belong to their respective owners.
- Best Practice (Bp Premier)
- MedicalDirector (Clinical, Pracsoft, Helix)
- HotDoc
- HealthLink
- Heidi Health
- Lyrebird Health
- Zedmed
- Medical-Objects
- HealthEngine
- Cubiko
- Microsoft 365
- Google Workspace
- Xero
- MYOB
- QuickBooks
- DocuSign
- Adobe Acrobat
Ready to hand over IT for good?
We only take on a limited number of GP clinics each year. Join the waitlist to secure your place in the queue.
Join the waitlist