An approved provider is running duties that move in hours, not weeks: 24 hours to notify a serious incident, 24 hours for an abuse allegation, 7 days for other prescribed matters. On top of that sit records on several different clocks — the longest, until the child turns 25, applying to incident, illness, injury and trauma records specifically, a device and image regime that landed in February 2026, a state child safety scheme with its own regulator and its own clock, and a long tail of childcare software holding children's information — which we do not integrate with, but which sits in a vendor register with criticality, contract clauses, notification clocks and the evidence you asked for. Most of it is tracked in spreadsheets and in the nominated supervisor's head.
Tier-A breadthNational Law · notification clocks · records & retention · child safety
Running more than one service?
A single service is $1,490 / service / year (or $160 / service / month billed monthly), self-serve. Do not multiply that out. From 3 services it becomes a different conversation — volume pricing, one group administrator, and consolidated posture across every site with each site still gated to its own jurisdiction, because a provider operating in more than one state genuinely carries different duties per service.
Multi-service pricing is quoted by sales — email sales@cybersentien.com. We do not publish a per-service rate for groups, because the right number depends on how many sites you run and which states they are in — and a figure invented on a web page is not a quote we could stand behind.
All subscriptions are prepaid. Your access period starts the day you pay and runs ~30 days on monthly billing, or a year on annual. Cancel any time — cancelling stops the next charge and you keep full access until the end of the period you have already paid for, not the moment you click. A refund ends access immediately.
Frameworks on the engine serving this vertical
Read from the live catalogue at build time — a framework that is not live on the engine never renders here. Depth is badged per framework: consultant-grade only where we go deepest (ISM/IRAP, Essential Eight), Tier-A breadth everywhere else.
Licence-gated catalogues carry control IDs and CyberSentien's own labels only — the full standard text requires your licence and is never reproduced.
Depth today — stated honestly
Tier-A breadth: 48 curated obligations, each traced to a named primary source and each stating the sector, the jurisdiction and the commencement that governs it. That last part is why this pack exists. The National Law is applied state by state and is not uniform: the December 2025 / February 2026 child safety package — staff devices, images of children, mandatory child safety training, the national worker register — is not in force in Western Australia, where the regulator says providers are merely “encouraged to comply”. Pick your state and the console separates what binds you from what is only good practice for you; an obligation that has not commenced where you operate is never reported as a gap. Three more things we refuse to fake: the National Quality Standard is carried as a rating benchmark, not a duty (no provision requires a service to “meet” it) — though a Working Towards or below rating now carries its own Commonwealth consequence through Child Care Subsidy approval; penalties are shown per jurisdiction, because the all National Law maximum penalties tripled on 2 January 2026 across every participating jurisdiction, Victoria adds a further multiplier for providers with 25 or more services, and Western Australia has not adopted the increases — so the same provision runs from $2,000 in WA to $102,600 for a large Victorian provider; and the Privacy Act is determined, not assumed — the health-service limb usually defeats the $3m small-business exemption, but that is a test on your facts, not a slogan.
The global angle
The SOCI Act is Australian, and there is no dedicated SOCI catalogue on the engine yet — this page says so rather than shading it green. The lanes serving the obligations mix Australian depth (Essential Eight, ISM) with internationally used instruments — NIST CSF 2.0, CIS Controls v8 — exactly as live on the catalogue.
See it on the real engine
Run the frameworks above against synthetic sample documents now, or tell us where you sit and we'll send a gated, revocable demo link.
CyberSentien