Practice Protect is priced per user and suits firms of every size — from sole practitioners to larger multi-partner practices. Your free consultation is the best place to confirm the right setup for your firm

A password manager is a vault — it stores your logins in one place. That’s a real step up from a spreadsheet, but it answers a narrower question than most firms think: once someone is in the vault, the passwords are theirs to see, copy and take with them, and each person still manages their own.

Core™ is built for a firm, not an individual. Your team logs in without ever seeing the password, multi-factor authentication is enforced on every app, and access is locked to expected locations. You get one dashboard of who can reach what, a full audit trail, and one-click offboarding that removes a leaver’s access everywhere at once. When a major consumer password manager was breached, the encrypted passwords stayed encrypted — but the vault data around them didn’t. Core™ is the access and identity control layer a practice needs, not just a place to keep passwords.

It also does what no password manager can: the Cyber Security Compliance Hub™ gives you the policy templates and audit-ready records to support your obligations under the TPB Code, the Privacy Act and the Notifiable Data Breaches scheme — all backed by a support team that only works with accounting and bookkeeping firms, and understands the regulations, the apps and the stakes your practice faces.

Core™ is for firms that want complete control over who can reach client data — especially with remote or offshore team members working across your accounting apps. Rather than each person managing their own passwords, the firm controls access for everyone: who’s in which app, from where, with instant removal the moment someone leaves.

If password sprawl across Xero, Karbon and Dext, shared logins, or ex-staff who still have access sound familiar, Core™ is the foundation that closes those gaps. It also includes the Cyber Security Compliance Hub™ — ready-to-use policy templates and audit-ready access records that help your firm meet its obligations under the TPB Code, the Privacy Act and the Notifiable Data Breaches scheme, and produce the evidence when a regulator, auditor or PI insurer asks.

Complete™ is for firms ready to extend protection beyond access. Once who-can-get-in is under control, the next risks sit in email fraud, unmanaged devices, and the day-to-day running of your technology. Complete™ adds accounting-aware email protection, device security for every firm computer, and hands-on management of your Microsoft 365, Google Workspace and accounting apps.

It’s the choice for firms that want one partner across security and technology, rather than a patchwork of tools — and it extends your compliance coverage across email and devices, adding the layers that support Essential Eight and the ‘reasonable steps’ expected under the Privacy Act.