For ACCHOs · NDIS providers · NGOs

Case management that holds the case.

From referral through closure. Solution-focused practice in the data model. Practitioner wellbeing as a first-class feature. Cultural safety as default. Hosted in Sydney.

Talk to us Read the future-proofing memo →
AU residency · AES-256 encryption · SHA-256 audit chain · 715/715 tests passing

The lifecycle

Every case has a shape. We hold it.

From the first referral to the closure ceremony — and reopening when the family reaches back out. Five named states, transitions that audit themselves, role rules that match how supervision actually works.

Intake

Referral landed. Worker assigned.

Assessment

Strengths, concerns, kinship circle.

Planning

Goals agreed with the family.

Progress

The work happens. Notes accumulate.

Closure

Wins named. Future-self letter.

Every state change goes through one auditable RPC. No direct writes. Reopens, transfers, and supervisor approvals are first-class transitions, not workarounds.

The hidden iceberg

Built quietly underneath the launch app.

The note app you launch on day one is the same product as the case-management system you flip on later. Same database. Same RLS. Same audit chain. Different surface.

Backbone shipped

  • 13 SQL migrations — case lifecycle schema, dual-write triggers, polymorphic case_records
  • 7 code modules — workflow engine, AI artefact framework, attachments, encryption, audit chain, feature flags, telemetry
  • State machines — practice_v1, record_v1, artefact_v1, wellbeing_v1
  • Multi-tenant + per-org single-tenant — same code, different deployment
  • Dual-write trigger — every note save populates case-shape data invisibly

Compliance evidence

  • 715/715 tests passing
  • 59 audit events, chain verified
  • ap-southeast-2 Sydney residency
  • AES-256-GCM wellbeing encryption
  • SHA-256 tamper-evident audit chain
  • APP 11 + 12 mapped

Audit chain

Tamper-evident by construction.

Every state change is hashed with the previous one. A single altered byte breaks the chain — and we can prove the timeline.

AU data residency

Supabase ap-southeast-2. Vertex AI australia-southeast1. Azure Australia East. No cross-border replication.

AES-256-GCM encryption

Wellbeing notes are owner-only. Column-level GRANT denies SELECT to supervisors. Loss of passphrase = unrecoverable note. By design.

SHA-256 audit chain

Per-org chain with chain_sequence ordering. No app-layer INSERT — only SECURITY DEFINER RPCs can write events. verify_audit_chain() available to auditors.

Privacy Act compliant. APP 11 + APP 12 mapped. Annual third-party security review. Production gate doc available on request.

Cultural safety as default

Built with Aboriginal community-controlled organisations, not for them.

Kinship attendees are first-class data — not free-text. Sorry Business is a cohort marker the workflow respects. The audit chain captures cultural-safety decisions alongside clinical ones.

Every copy decision goes through review with the ACCHO partner org. Cultural decisions stay with Aboriginal staff — never enforced by a Postgres trigger.

  • Kinship as data — auntie, grandmother, eldest sister, cousin-brother held as structured attendees on every case
  • Sorry Business cohort — flagged on the case timeline and the audit chain, never silently buried
  • Yarn — not chat — language calibrated by the community, not by us
  • SEWB lens — wellbeing model maps to Social and Emotional Wellbeing, not just clinical mental-health categories

Launch narrow → expand on demand

We listen before we ship.

Five measurable signals tell us when an organisation is ready for the case-management surface. Until then the launch app is enough and the backbone stays quietly underneath.

  • 01

    Cross-note search

    ≥ 20% of orgs search across notes for a single client → cases UI flips on.

  • 02

    Team visibility ask

    ≥ 3 supervisors per org request "see all my workers' notes" → case-team UI flips on.

  • 03

    Bulk export same family

    ≥ 5 exports of multiple notes for the same family → document generation flips on.

  • 04

    Wellbeing concern

    ≥ 1 supervisor flag from any worker → wellbeing check-in flips on.

  • 05

    Closure ritual

    ≥ 3 closures with reflective letters → closure ceremony flips on.

Ready to talk?

Optionality is the asset.

Your team launches on the focused note app today. The case-management surface flips on per-org as the signals fire — no migration, no rebuild, no re-training. Ready when you are.

Talk to us Future-proofing memo (PDF)

For ACCHO procurement teams: a 12-page technical brief with security audit, lifecycle architecture, and roll-out plan.