OnestopApprove
OnestopApprove
It gives BAS-agent and bookkeeping firms a fast, provable way to get a client's authorisation before a Payday Super run, or any other sign-off, and exports the approval chain audit-ready for the ATO and TPB.
Payday Super means SG contributions must generally reach the fund within seven business days of each payday, so super is paid every pay run rather than quarterly. Authorising each payment of a client's funds needs the client's sign-off for that run, an enduring authority doesn't cover authorising individual payments, so you need a fast, provable per-run approval, captured and retained properly.
Yes. An electronic approval is a valid declaration under the Electronic Transactions Act 1999 when it states the information is true and correct and that the client authorises the agent to act, and is retained for the required period (up to five years).
A single PDF recording who approved what, when, from which channel (app, web or email reply), and against which exact report, the report is bound to the approval by a SHA-256 content hash, along with the declaration the client agreed to. It carries a verifiable hash so you can show the record hasn't been altered since it was generated.
Every request, revision and decision is stored append-only and chained with cryptographic hashes. The certificate includes that hash chain, so anyone with the export can re-check it. A later change to the underlying data would no longer match. It's tamper-evident by design; it doesn't ask you to just trust us.
Each request's full history: who it was sent to, every revision, each approve or decline with a timestamp, the channel used, the declaration agreed to, and the client's electronic-authorisation consent. Delivery attempts (push and email) are logged too, so you can see the request was actually sent.
Approval records and their audit trail are retained for five years, in line with ATO record-keeping expectations, and stay exportable while your account is active.
Emailing payroll reports leaks employee names and salaries through email (an Australian Privacy Principles problem), and reconstructing the approval chain for an audit is slow and weak. OnestopApprove keeps the file in a controlled, access-logged store and turns the approval into a one-click, tamper-evident export.
It does, and that's fine for clicking yes. But that email isn't bound to the exact report by a content hash, isn't tamper-evident, and can't be exported as an independently-verifiable certificate, and it doesn't give you one place to act across every client. OnestopApprove turns the same approval into proof that stands up in an audit, not just a click in an inbox.
Yes. The 2024 Code determination expects substantive review and sign-off before work is lodged, proper records kept for five years, and appropriate supervision. OnestopApprove captures that sign-off, from the right person, with the record to prove it. It helps you meet those obligations. It isn't a TPB endorsement, and no tool makes you automatically compliant.
Yes: in-app, on the web, or by replying to a single-use, time-limited email address. Sensitive files are served from the secure store via an expiring link, never attached to the email itself.
No. Payday Super is the launch use case, but OnestopApprove handles any approval where you need a clear, provable yes from the client: ad-hoc payments, lodgement sign-offs, engagement authorisations. It isn't a field-by-field document-signing template tool; for itemised signature blocks on a contract, use a dedicated e-signature product.
$34.99 per year for the whole firm (unlimited clients, approvers and approvals), with a 14-day free trial. It's free for firms with an active Onestop CPE or QMS subscription. See pricing.