Questions and answers

made. Shield is compliance evidence software for Australian organisations: it maps your policies, records and incidents to the obligations of each framework you adopt, shows the gaps in plain English, and keeps a tamper-evident evidence trail.

Each framework you adopt becomes a programme with its own obligations, evidence, gaps, owner-assigned actions and scheduled re-checks. The AI drafts and proposes; your people confirm, and a named person issues every report.

made. Shield is for the people who answer for compliance in Australian organisations: compliance, legal and risk teams, work health and safety managers, executives and boards, and owners of smaller businesses.

Each person picks the focus that suits their work when they sign up. It changes what they see first, not what they can do. Board members can be given read-only access.

See how each role uses it

made. Shield covers the Privacy Act and the Australian Privacy Principles, with the Notifiable Data Breaches scheme; work health and safety laws for each state and territory and the Commonwealth, including Victoria's Occupational Health and Safety Act; the ASD Essential Eight; the National Employment Standards; APRA CPS 230; APRA CPS 234; and custom frameworks built from your own codes, contracts and standards.

Every obligation is taken from its primary source, such as the official legislation register or the regulator's own publication, and records where and when it was read.

See every framework

Yes. Your GRC tool can read programmes, controls, evidence, findings and posture from made. Shield through its read-only API, or import its CSV and JSON exports.

Administrators create a named access key for each tool and can revoke it at any time. Live connections into other systems, such as SharePoint or your HR and safety platforms, aren't offered yet; talk to us about what you need.

Ask about integrations

Yes. made. Shield connects to Claude, Microsoft 365 Copilot and OpenAI Codex, so your team can read programmes, propose evidence and draft reports from the assistant they already use.

A connected assistant can draft and propose, but it can't confirm evidence or issue a report: a person does that in Shield.

made. Shield's AI reads your documents, proposes which obligations they evidence, explains gaps in plain English and drafts reports; your people confirm or reject every proposal and set each obligation's status.

A named person issues every report, optionally with a second approver. Shield doesn't give legal advice and doesn't decide whether a breach or incident must be notified: it records the assessment and the person's decision.

Yes. made. Shield lets you build a custom framework from your internal codes of conduct, policies, customer contracts or group standards, and run it as a programme like any other.

Custom frameworks are included on every plan, during the trial too.

made. Shield uses the law of each jurisdiction your organisation chooses: there is no default state. You pick the states and territories you operate in, and each work health and safety programme names the jurisdictions it covers.

Every state and territory and the Commonwealth has its own set of obligations, with its regulator, its sections and its effective dates, so a duty one state doesn't have is shown as absent there rather than guessed.

See each state and territory

Yes. Victoria hasn't adopted the model work health and safety laws, so made. Shield keeps Victoria's own obligations under the Occupational Health and Safety Act 2004 and its Regulations, administered by WorkSafe Victoria.

Where a model-law duty has no Victorian equivalent, the Victorian programme shows it as none in Victoria, and duties only Victoria has are listed in their own right.

See Victoria's obligations

Every obligation in made. Shield comes from its primary source: the official legislation register, the regulator's standard or the framework owner's publication, never a secondary guide.

Each one records the section it comes from, the version in force and the date it was read. Our framework pages print the same facts, with links to the sources.

Browse the frameworks

When a change is published before it starts, made. Shield lists the controls to re-map and the date the change takes effect, so you can update your evidence in time.

Programmes keep the version that applied on each date, so an earlier report still reads against the obligations in force when it was issued.

Yes. made. Shield keeps a breach assessment record against the Notifiable Data Breaches scheme's elements and assessment timeframe, from when you became aware of a suspected breach.

The decision whether a breach is notifiable is your organisation's. Shield prepares the record and any statement for you to submit; it doesn't lodge anything with the Commissioner.

See the Privacy Act obligations

Yes. made. Shield lists each Essential Eight mitigation strategy's requirements by maturity level, so you can see where you are and what reaching the next level takes.

Set a target maturity level, link the evidence for each requirement, and draft a maturity uplift report for a named person to issue.

See the Essential Eight requirements

Yes. made. Shield includes CPS 230 Operational Risk Management and CPS 234 Information Security, for APRA-regulated entities.

Each paragraph is a control with its citation and effective dates, including the remade CPS 230 where it applies.

Browse the frameworks

Bring evidence into made. Shield by upload, by email to your programme's own address, or from Claude, Copilot or Codex.

Each programme and your organisation's library has a private address at intake.madeshield.com. Your administrators choose who may send to it, and mail that fails sender checks is refused.

made. Shield reads PDF, Word and Excel files, other spreadsheets, CSV and text files, emails with their attachments, and images such as photographs and scans.

Drawings (DWG and DXF) are kept and can be linked as evidence, but their contents aren't read. Original files are never changed.

made. Shield keeps a tamper-evident evidence trail for every programme: each evidence link, status change, finding, action and report is recorded in order, and any later change to an earlier entry shows.

Every issued report is anchored to the trail at the moment it was issued, so an auditor can check that nothing behind it was changed afterwards. The trail records what happened and who did it, without copying personal information into it.

made. Shield re-checks each obligation on a schedule you set, and again as soon as new evidence reaches it, so your posture stays current without a quarterly scramble.

Evidence that has passed its review date is flagged as stale, and checks that are due appear on your team's My work list in the app.

People do. made. Shield proposes which obligation a document evidences, with the passage it relies on, and a person confirms or rejects each proposal.

The reasons for each finding are recorded in plain English, so anyone reviewing the programme can see why an obligation is marked as it is.

No. made. Shield keeps one library for your organisation, with policies, incidents, contracts, HR records and safety logs, and each document can evidence obligations in any number of programmes.

When a document is replaced, every programme that relied on it is re-checked.

made. Shield drafts posture reports for boards and executives, audit responses, gap assessments, remediation plans, maturity uplift plans, breach and incident assessment records, and letters to auditors, regulators or customers.

Every claim in a report must cite its evidence or a figure from the register, and the pre-issue checks stop a report that doesn't.

A named person in your organisation issues every made. Shield report, after their review. The issued PDF is digitally certified with your organisation's digital ID.

Your organisation can require a second approver. The AI and connected assistants can only submit a report for approval.

Yes. made. Shield has a read-only board access level: directors see posture, programmes, findings, actions and issued reports, but not drafts, working notes or personal information.

Administrators set a director's access before inviting them, so they never have write access, even briefly.

An auditor can check a made. Shield report's digital certification in any PDF reader, and check its evidence trail with the evidence pack you give them, without signing in.

Members of your organisation can also verify any issued report inside Shield by its reference or by uploading the file.

No. made. Shield prepares a document ready for you to submit; it doesn't lodge anything with a regulator.

Your organisation decides what to notify and submits it through the regulator's own process.

Yes. Each made. Shield organisation has its own isolated workspace, with its own storage, separate from every other customer's.

Only the people your organisation adds can open it, and every visit by our support team is recorded in your own activity record.

See how we keep it secure

made. Shield runs on Cloudflare's global network. Processing isn't limited to Australia, and the Privacy Policy sets out who helps us provide the service and where.

Our sub-processors page lists every provider in one place.

See our sub-processors

No. We don't use your content to train AI models. made. Shield's built-in assistant runs on models hosted on Cloudflare's network, chosen and kept up to date by us.

If your team connects Claude, Copilot or Codex, what they read through that connection goes to that provider under the account each person connects.

People sign in to made. Shield with a one-time code sent to their work email: there are no passwords to leak.

Only the people your administrators add can open your organisation's workspace.

Yes. made. Shield can hold incident reports, HR records and other documents with personal information, and a person can flag a document as personal or sensitive.

Flagged documents are withheld from board members' views and from the read API by default, and administrators decide whether exports include them.

made. Shield costs $299 a month (AUD, excluding GST) including 1 user, plus $99 a month for each additional user, at our launch price.

Every feature is included, with no limit on programmes for paying organisations. The standard price isn't set yet; prices may change later with at least 30 days' notice.

See pricing

Yes. In made. Shield, board members with read-only access are users like anyone else, at $99 a month each after the first user.

Talk to us about a larger board or a group of entities.

Ask about bulk pricing

Yes. made. Shield includes a daily fair-use allowance of 300 assistant requests per paid user, at least 600 for the organisation, renewed each midnight Sydney time.

If your team needs more, talk to us.

Yes. Organisations that need more users than a standard made. Shield plan can apply for bulk pricing.

Tell us how many people would use it and we'll reply with a quote.

Apply for bulk pricing

The made. Shield free trial lasts 14 days, needs no card and includes every feature, for up to 5 people, 3 programmes, 2 GB of documents and 150 assistant requests a day.

Start with a work email; your organisation's private workspace is ready in minutes.

Start a free trial

When the made. Shield trial ends, when you're ready to continue, we'll set up your subscription with you personally during launch.

If you don't continue, your workspace is locked and your programmes are kept safe for 90 days, then deleted. Administrators can download read-only exports in that time.