Frequently asked questions.
Honest answers about the TPB Code, what a QMS actually is, registers, security and pricing.
TPB Code & ICB Standards
The TPB Code of Professional Conduct introduced new obligations from 1 July 2025 (or 1 January 2025 for firms with more than 100 employees). Every registered tax practitioner must now establish and maintain a Quality Management System covering governance, training records, supervision, client engagement and staff competency.
- Practice principals are responsible for staff competency and ongoing training.
- Documented procedures need supervision and competency verification.
- Records of policies, sign-offs, training, incidents and breaches must be available for review.
This applies to Registered Tax Agents, BAS Agents and Tax (Financial) Advisers. Onestop QMS is purpose-built for these obligations.
A QMS is the documented system of policies, procedures, registers and records that proves your practice operates to a defined standard.
For an accounting or bookkeeping practice it covers: how you engage clients, how you supervise staff, how you handle complaints and breaches, how you manage risk, how you keep documents current, how you train and competency-check the team. The TPB and ICB both expect documented evidence that the system is in operation, not just on paper.
Yes. ICB members have had a QMS obligation for a while and the structure overlaps significantly with the TPB Code — documented policies, supervision, complaints handling, ongoing professional development. Onestop QMS supports both at once: hold an ICB membership and a TPB registration on the same org and the system handles both.
Australian regulated professional service practices — especially:
- Tax Agents and BAS Agents (TPB Code obligations)
- Bookkeepers (ICB QMS Standards)
- Accountants (CPA / CA ANZ / IPA)
- Financial Advisers
- Compliance officers across regulated sectors
It works equally well for sole practitioners and multi-staff practices.
What's in the product
Five operational registers, all live, all audit-logged:
- Risk register — 5×5 likelihood-impact matrix, controls, treatment, review cadence.
- Incident log — injuries, near misses, IT/security events, with investigations.
- Complaints register — SLA deadlines (1/3/5/10 business days).
- Breach register — data, privacy, security, compliance breaches.
- Conflict register — declarations and management.
Each document has a review cadence (annual, biannual, quarterly, custom). The system surfaces overdue reviews on the dashboard and emails the document owner. When a new version is approved it supersedes the old one — the old version is archived, not deleted, so the audit can see what was current on any given date.
A single rolled-up indicator that combines: are documents in date, are training and sign-offs current, are registers being reviewed on schedule, are SLAs being met, are insurances and memberships current. The dashboard breaks the score down so the principal can see exactly where the gaps are.
Every create, update, status change and approval is logged with: which user did it, when (timestamp), what changed (old values vs new values). The audit log is read-only — it can't be edited, only appended. Export the log for any date range as PDF or CSV.
Setup & data
Yes. Bring documents (PDF, Word, plain text), seed registers from CSV, upload existing training records. The first onboarding session walks you through it.
QMS Manual exports as PDF (versioned, audit-stamped). Each register exports as PDF or CSV. Audit trail exports as CSV for any date range. Documents export as their original file format with version metadata.
Yes. Identity is managed by Clerk (industry-leading auth). Data is encrypted at rest and in transit. Australian data residency. Role-based access control restricts who sees what within the org. The full detail is in our Privacy Policy.
Pricing & getting started
$10 per month, or $100 per year (save $20). One plan, full access. First month is free with no credit card required to start. See pricing.
Yes. No lock-in. Cancel from the app any month and keep access until the period you've paid for ends. Export everything before you go — the data belongs to you.
Hit Get the app or sign up at portal.onestopqms.com.au. The first sign-in walks you through org setup, services, memberships and inviting your team. The QMS Manual auto-generates from what you enter; you adapt it from there.
Still have a question?
Email us at support@squirrelhog.com or open the contact page.