Governance, compliance and safety evidence · Australia
Know where you stand, and prove it.
made. Shield maps the operational records you send it to the obligations of each framework you follow, tells you in plain English what's missing, and keeps a tamper-evident evidence trail: any later change shows. The AI drafts. A named person issues.
No card needed. $299 a month at our launch price (AUD, ex GST) including one user.
Watch in 90 seconds
Know which obligations you can evidence, and show it.
Read the transcript
Privacy, safety, cyber and employment obligations keep changing. The proof sits in policies, registers and inboxes, until someone asks for it.
made. Shield turns each framework you adopt into a programme: the Privacy Act, WHS law for the states you choose, the Essential Eight, APRA's standards, or your own codes.
Upload your records, or email them in. Shield proposes which obligations each document evidences, with the passage it relies on. Your people confirm each link.
Where evidence is missing or out of date, Shield explains the gap in plain English. Each finding gets an owner, a due date and an action to close it.
Shield re-checks evidence on a schedule. When a change to a framework is published before it starts, it lists the controls to re-map and the date.
Every confirmed link, decision and report joins a tamper-evident evidence trail. Any later change shows.
Shield drafts posture reports and audit responses. A named person reviews and issues each one as a digitally certified PDF.
See where you stand with made. Shield. Try it free for fourteen days, with no card. Visit madeshield.com.
The hard part is rarely the policy.
It is proving the organisation follows it, keeping that proof current between audits, and knowing what a change in the law means before it starts.
made. Shield keeps each framework's obligations, the evidence behind them and the actions still open in one programme, so the answer to "are we compliant, and how do we know?" is a click away. Days of admin become a single review.
From your records to a report you can stand behind
Every obligation, from its source
Adopt a framework and its obligations arrive as controls, each with its section or paragraph, the version in force and where it was read. Build your own frameworks from internal codes and contracts beside them.
Evidence where it counts
Upload once into one organisation library. Shield proposes which obligations each policy, record or incident evidences, with the passage it relies on, and a person confirms.
Gaps in plain English
Obligations without current evidence become findings that say what's missing, with an owner, a due date and an action to close it. The reasons for each finding are recorded in plain English.
Current posture, updated as evidence arrives
Each obligation is re-checked on its schedule and as soon as new evidence reaches Shield. Stale evidence is flagged before an auditor finds it.
Reports a named person issues
The AI drafts posture reports, audit responses and gap assessments. A named person reviews and issues each one as a digitally certified PDF, anchored to a tamper-evident evidence trail.
The frameworks Australian organisations answer to
made. Shield covers the Privacy Act and the Australian Privacy Principles, with the Notifiable Data Breaches scheme; work health and safety laws for each state and territory and the Commonwealth, including Victoria's Occupational Health and Safety Act; the ASD Essential Eight; the National Employment Standards; APRA CPS 230; APRA CPS 234; and custom frameworks built from your own codes, contracts and standards. Every obligation comes from its primary source.
Privacy Act and APPs
Map your privacy policy, collection notices, data handling procedures, access requests and breach response plan to each Australian Privacy Principle and the Notifiable Data Breaches scheme.
Work health and safety
Each jurisdiction's duties, regulator and notification rules, from its own legislation. Choose the states and territories you work in; there is no default.
Essential Eight
Every requirement of the ASD Essential Eight maturity model, grouped by mitigation strategy and maturity level, so you can see where you are and what the next level takes.
National Employment Standards
Map your employment contracts, policies, leave records and the Fair Work Information Statement to each National Employment Standard in the Fair Work Act.
APRA CPS 230
For APRA-regulated entities: the standard's requirements for the risk management framework, controls, incidents, business continuity and service providers, each with its paragraph and effective dates.
APRA CPS 234
For APRA-regulated entities: roles, information security capability, policy, asset classification, controls, incident management, testing, internal audit and APRA notification.
Work health and safety, for the jurisdictions you choose:
The AI drafts. A named person issues.
- Shield proposes: it reads your documents, suggests the obligations they evidence and explains each gap.
- Your people confirm: they accept or reject each link, set statuses and own the actions.
- A named person issues each report as a digitally certified PDF, optionally with a second approver.
- Anyone can check it: the certification opens in any PDF reader, and the evidence pack you hand an auditor shows nothing changed behind the report.
Different responsibilities. One record to answer from.
Compliance, legal and risk
Know which obligations you can evidence today.
Work health and safety
Safety duties for every place you work, kept current.
Executives and boards
See where the organisation stands, and what it rests on.
Owners and principals
Compliance you can answer for, without a compliance department.
Common questions
What is made. Shield?
made. Shield is compliance evidence software for Australian organisations: it maps your policies, records and incidents to the obligations of each framework you adopt, shows the gaps in plain English, and keeps a tamper-evident evidence trail.
Each framework you adopt becomes a programme with its own obligations, evidence, gaps, owner-assigned actions and scheduled re-checks. The AI drafts and proposes; your people confirm, and a named person issues every report.
Who is made. Shield for?
made. Shield is for the people who answer for compliance in Australian organisations: compliance, legal and risk teams, work health and safety managers, executives and boards, and owners of smaller businesses.
Each person picks the focus that suits their work when they sign up. It changes what they see first, not what they can do. Board members can be given read-only access.
Which frameworks does made. Shield cover?
made. Shield covers the Privacy Act and the Australian Privacy Principles, with the Notifiable Data Breaches scheme; work health and safety laws for each state and territory and the Commonwealth, including Victoria's Occupational Health and Safety Act; the ASD Essential Eight; the National Employment Standards; APRA CPS 230; APRA CPS 234; and custom frameworks built from your own codes, contracts and standards.
Every obligation is taken from its primary source, such as the official legislation register or the regulator's own publication, and records where and when it was read.
Does made. Shield work with our GRC tool?
Yes. Your GRC tool can read programmes, controls, evidence, findings and posture from made. Shield through its read-only API, or import its CSV and JSON exports.
Administrators create a named access key for each tool and can revoke it at any time. Live connections into other systems, such as SharePoint or your HR and safety platforms, aren't offered yet; talk to us about what you need.
Can we use made. Shield from Claude, Copilot or Codex?
Yes. made. Shield connects to Claude, Microsoft 365 Copilot and OpenAI Codex, so your team can read programmes, propose evidence and draft reports from the assistant they already use.
A connected assistant can draft and propose, but it can't confirm evidence or issue a report: a person does that in Shield.
What does made. Shield decide, and what do people decide?
made. Shield's AI reads your documents, proposes which obligations they evidence, explains gaps in plain English and drafts reports; your people confirm or reject every proposal and set each obligation's status.
A named person issues every report, optionally with a second approver. Shield doesn't give legal advice and doesn't decide whether a breach or incident must be notified: it records the assessment and the person's decision.