Guard
Guardrails Pack
Fixed scope · 10 working days · AU $2,900 ex GST
Shadow AI audit, plain-words acceptable-use policy, AI register with owners aligned to the Guidance for AI Adoption, Privacy Act ADM wording and a staff briefing.
Fixed scope · 5 working days · AU $1,900 ex GST - From 10 December 2026 your privacy policy must say where computers make decisions. Most do not know yet.
The Privacy Act now requires APP entities to disclose the kinds of personal information used, and the kinds of decisions made, by automated decision-making that can significantly affect people. We find every one in your business and draft the wording, in five working days.
5 working days · AU $1,900 ex GST · Founder-led by Manish Kumar · No lock-in
Where this sits in the ladder
- Step 1: Check
- Step 2: Discover
- Step 3: Guard (current)
- Step 4: Ship
- Step 5: Sustain
Who it is for - Right for you if this sounds familiar.
A fit when
- Businesses over AU $3 million turnover that use scoring, screening, pricing, eligibility or triage tools, including AI assistants that shape those decisions.
- Recruitment, finance, insurance, health, property and education firms, where automated decisions about people are common.
- Firms that have adopted AI in the last two years and never mapped where it touches a customer or an employee.
Not the right step when
- Small businesses under the AU $3 million threshold that are not APP entities. We will tell you on the call, and you may not need this at all.
- Legal certification. We prepare the register and wording for your lawyer or privacy officer to approve.
What you get - Deliverables, not a transformation.
01
ADM inventory
Every automated or AI-assisted decision that could significantly affect a person, found through a structured walk-through of sales, HR, finance and service processes.
02
Significance assessment
Which decisions meet the "significantly affect rights or interests" test, with reasoning recorded for each, following the OAIC's guidance.
03
Privacy-policy wording
Draft text for the kinds of personal information used and the kinds of decisions made, ready for legal review and publication.
04
ADM register
A living register with owner, data, review date and the human-review step for each decision, so the disclosure stays true after 10 December.
05
One-hour readout
What we found, what must be published, what should change, and what does not need to be disclosed.
How it runs - Scope · Baseline · Build · Prove · Hand over
5 working days, on the same five steps as every engagement.
- Day 1ScopeKickoff, process list agreed, existing privacy policy reviewed.
- Days 2 to 3BaselineWalk-throughs with the people who run each process. Inventory built.
- Day 4BuildSignificance assessed, wording and register drafted.
- Day 5ProveReadout with leadership and your privacy officer or lawyer.
- AfterHand overRegister and wording in your tools, with a review date set for the first quarter after commencement.
Pricing - One price per tier. Ex GST. No upsell at the end.
For APP entities: businesses with turnover over AU $3 million, and smaller ones that opt in or handle health information.
Lean
AU $1,900ex GST
One entity, up to five processes, wording and register.
Most clients choose this
Standard
AU $2,900ex GST
One entity, all processes, plus a staff explainer and the human-review procedure.
Plus
AU $4,500ex GST
Group of up to three entities, board briefing, and a check-in in the month after commencement.
Guarantee, in the same words every time
Delivered on the scoped date or 20 % refunded. Fixed price. No lock-in. You own the work.
Questions we get asked - Straight answers.
- Does using ChatGPT or Copilot count as automated decision-making?
- Only where a computer program makes, or does something substantially and directly related to making, a decision that could significantly affect a person. An assistant that drafts an email usually does not. A tool that scores a job applicant or sets a price for a customer usually does. The review draws that line for each case.
- What happens if we do nothing?
- From 10 December 2026 the OAIC can issue compliance and infringement notices for a privacy policy that does not meet the requirement. More practically, a customer or employee can ask, and you will need an answer.
- Can you publish the wording for us?
- We deliver it ready for your lawyer to approve and your web team to publish. If you want the privacy page rebuilt as well, that is a small fixed-scope addition.
The ADM Transparency Review prepares an inventory, register and draft wording for review by your legal adviser or privacy officer. It is not legal advice and does not certify compliance.
Evidence: Requirement introduced by the Privacy and Other Legislation Amendment Act 2024, commencing 10 December 2026, with OAIC guidance in consultation (Gilbert + Tobin, White & Case, OAIC, 2026).
Founder
Manish Kumar
Manish Kumar is the founder of Successify Media. He has an MBA in entrepreneurship from UTS, a background in business analysis and web application delivery, and a Cert IV in cyber security in progress. He runs every engagement personally from Wollongong, NSW.
Fixed scope is not a pricing trick. It is the only way one person can promise a date, keep it, and still say no to work you do not need.
Often paired with - The steps before and after this one.
Check
AI Readiness Check
Fixed scope · 5 working days · AU $990 ex GST
A 12-page report: where AI is already in use, data and licence readiness, three ranked opportunities and a guardrails gap list. Credited against the next step.
Guard
Cyber Readiness
Fixed scope · 5 working days · from AU $799 ex GST
A Microsoft 365 security posture evidence pack: human-reviewed findings, technical evidence aligned to ASD guidance, and a prioritised remediation roadmap.
Book a call about the ADM Transparency Review.
Twenty minutes. We confirm fit and tell you if a different step, or no AI at all, is the honest answer.
Book a call
+61 490 083 850 · Wollongong, NSW