Skip to content

Risk and Compliance

When the assessor calls, the evidence is already there.

Every AISSA, ISV and AISNSW obligation, pre-loaded, with a named owner, a due date and an evidence trail that traces back to the regulation it came from.

Book your school a demoWhen the principal puts his head in, done already means evidenced.
EthosOne Compliance Overview for September 2026 showing completion, remaining and needs-attention counts with status and owner breakdowns in the Hogwarts demo tenant.
Real captures · Risk and Compliance · Hogwarts demo tenant.
In one paragraph

EthosOne's Compliance module is school compliance software for Australian independent schools.

Evidence is submitted, reviewed and accepted before an item counts as compliant, and exceptions are approved with a rationale and an expiry rather than hidden as complete.

What we keep hearing

It is 1:30 and the compliance officer is halfway through copying the association calendar from the PDF into the spreadsheet when the principal puts his head in: did the term one evacuation drill happen? Someone said it did. There is nothing in the folder, and the reviewer has asked for the evidence by Friday. Somewhere in that week, done still has to mean evidenced.

This is the room where it does.

What it does

Seven views, one reconciled picture. Each one drills to the record it came from.

  • EthosOne Compliance Overview for September 2026 showing completion, remaining and needs-attention counts with status and owner breakdowns in the Hogwarts demo tenant.
    01

    Overview: the month, reconciled

    Choose a month and year and the Overview shows completion, remaining, needs-attention, status mix and ownership, every figure reconciled to the items beneath it. Drill to the source items, or export the month as a PDF for the board.

  • The Compliance Management view with the template library open, showing jurisdiction-labelled school compliance calendars in the Hogwarts demo tenant.
    02

    Compliance: profiles and the work inside them

  • Three compliance profiles side by side in a school's library: the Independent Schools Victoria calendar with eight dated items, the AISSA calendar with four, and an ISO 27001 certification profile, each with its own owner and month.
    03

    Management: the library and the profiles

    Add a profile from the library, which holds the state association calendars (AISSA, ISV, AISNSW, ISQ and AISWA), or build one from scratch for an audit or accreditation stream. Edit, activate and archive profiles, set owners and scope, and run several calendars side by side.

  • The September 2026 Compliance Calendar showing dated school obligations and workload across the month in the Hogwarts demo tenant.
    04

    Calendar: workload and registration deadlines

    A month or term view shows where the work lands, where it collides and how close the registration deadlines are. Filter by owner or profile and open any occurrence from its day.

  • The Table view of Compliance for September 2026: fifteen tasks by status across the top, then every profile as a row with its owner, its task count and whether it needs attention, ready to expand, Hogwarts demo tenant.
    05

    Table: the source of truth

    The Table is the canonical occurrence register: every status, owner, due date and evidence state, sortable, searchable and exportable. Statuses separate the two things a calendar usually conflates: submitted is not the same as compliant, and an exception is a departure someone owns rather than a gap nobody noticed.

  • A compliance occurrence open at its Evidence tab: a PDF attached to this occurrence with its size, Link evidence for a file, a URL or an EthosOne artefact, and Update Compliance to apply it, Hogwarts demo tenant.
    06

    Evidence review: submission is not acceptance

    An owner submits a file or a link and the reviewer accepts or returns it. Until then the item reads Submitted and does not count as compliant; on acceptance EthosOne records the reviewer, the decision time and the evidence version.

  • 07

    Exceptions: departures, governed

    Where an obligation cannot be met or does not apply, the owner requests an exception or a Not applicable decision with a rationale, conditions and an expiry, and the authorised person approves it. The item shows that decision rather than Compliant.

Where it sits

Compliance is where the accountability spine does its everyday work: an obligation from the register in PolicyAI or a criterion from Regulatory Readiness becomes owned, recurring work here, and accepted evidence flows back to prove the position. Controls from the risk register are scheduled as items, Assurance logs supply evidence, and the Overview feeds Reporting and the board pack.

The embedded helper

The helper knows your profiles, owners and evidence rules and drafts from them: a readiness brief, a profile's likely gaps, requirement text from a verified source, a cadence, an evidence checklist and the month's workload hotspots.

It flags anomalies and orphaned items, and in review it checks a submission against the criteria. What stays with you: the helper cannot infer compliance, accept evidence or decide applicability. Every draft is a proposal that waits for a person to review and apply it.

Frontier AI, hosted via Amazon Bedrock in AWS Sydney.

What it does not do

It does not treat a calendar event as proof of compliance.
It does not mark an obligation compliant without accepted evidence where evidence is required.
It does not leave recurring work unowned.
Who it is for

Four seats, the same reconciled population.

Customer stories

It meets all of the real frustrations of business directors in one place.

Nick MillerDirector of Business, Blackfriars Priory School
Read the stories
Blackfriars Priory School · Case studyDemo to live in under a month. One South Australian school, one term, board-ready.Read the case study
Everything you asked us, answered

The six we are asked every time.

Still weighing something up? Thirty minutes with us, on your own registers, answers the rest.

Book your school a demo
  1. 01Does it track compliance deadlines?

    Yes. Every obligation is a compliance item with one owner, a recurrence rule and an evidence definition, and EthosOne generates the dated occurrences on weekly, monthly, quarterly, yearly, term or once-off cadences. Your state association's calendar can be loaded from the library and pruned to your school. An item reads Compliant only once a reviewer accepts the evidence, so the dashboard shows what is due, who owns it and what has quietly slipped.

  2. 02What is school compliance software?

    It holds a school's statutory and regulatory obligations as structured, recurring work rather than rows in a spreadsheet. In EthosOne each obligation is a compliance item with an owner, a recurrence rule, an evidence definition and a history.

  3. 03How do independent schools manage compliance calendars in Australia?

    Most receive an annual calendar from their state association (AISSA, ISV, AISNSW, ISQ or AISWA) as a PDF and copy it into a spreadsheet. EthosOne holds those calendars in its library: load the profile, prune it to your school and the occurrences are generated for you.

  4. 04Can compliance software assign ownership to specific staff?

    Yes. Every compliance item names one owner, and when an owner is reassigned the calendar, Actions, dashboard and group roll-up reconcile once the change is saved.

  5. 05Does a completed calendar entry count as compliant?

    No. Where an item requires evidence it reads Submitted until a reviewer accepts the evidence, and only then Compliant, with the reviewer, time and evidence version recorded.

  6. 06Risk and Compliance, in full: what does it cover?

    It holds every applicable obligation as a compliance item with a requirement, one owner, a reference, a recurrence rule and an evidence definition, then generates the dated occurrences on weekly, monthly, quarterly, yearly, term or once-off cadences. It is built for the business manager, the compliance officer and the item owners who do the work. Compliance is part of the Risk and Compliance Focus module.

PolicyAI

Before you book

What are the AI paragraphs you are currently missing from your policies? Watch how we do it.

Free, under ten minutes, and yours to keep whether or not you talk to us.

It meets all of the real frustrations of business directors in one place.
Nick MillerDirector of Business, Blackfriars Priory School
School governance and risk is a complex area without a clear solution.
David RuggieroPrincipal, Blackfriars Priory School

When the principal puts his head in,done already means evidenced.

Risk and Compliance: $5,000 a year with no per-user fees.