The principal is on the hook. We give you the system.
From 1 July 2025, the TPB Code makes practice principals responsible for staff competency, supervision and a documented QMS. Onestop QMS for Teams gives the principal a single compliance view and gives every staff member the role-based access to do their bit. The audit becomes provable, not promised.
Three things every principal already knows.
Two staff working off two versions of the same policy because the shared drive doesn't lock. Audit asks "what was the policy on X day", you have no answer.
PI insurance expires on the 7th. Cyber sign-offs lapsed last quarter. Code-of-conduct acknowledgements were never recorded. All flagged on audit week.
An incident happened in February, was sort of resolved in March, never actually closed. Was anyone supervising? Auditor wants the trail.
Every register, every staff member, every expiry. One screen.
The compliance dashboard surfaces what the audit will surface: open incidents, breaching SLAs, overdue document reviews, lapsed training, expiring insurance. The principal sees it before the auditor does.
- ✓ Live status across every register
- ✓ Heat-map of overdue items by category
- ✓ Drill from the dashboard into the underlying record
Four roles. Each one sees what they need.
Staff log incidents and sign off mandatory items. Compliance officers manage the registers. Admins handle org settings. Auditors get read-only access for review. No one has more access than the role requires.
Run the organisation
Org settings, member invites, role assignment, billing. Full read-write across every register.
Operate the QMS
Manage registers, schedule reviews, approve documents, investigate incidents and breaches. Full register access without org-admin scope.
Live the QMS
Log incidents, complete training, sign off mandatory items, declare conflicts. See what's required of you, and what's outstanding.
Review the trail
Read-only access across the org. Full audit trail, every register, every document version. Nothing edits.
Code of conduct. Cyber. WHS. Conflicts.
Every staff member has a list of things they need to acknowledge regularly — the practice's code of conduct, the cyber policy, the WHS policy, conflict-of-interest declarations. The system asks each person to sign off and dates the acknowledgement. The audit asks "do all your staff understand the code of conduct?" and you actually have an answer.
- ✓ Configure mandatory sign-offs per practice
- ✓ Annual or quarterly cadence with auto-reminders
- ✓ Per-staff completion view in the principal dashboard