Capability Statement

Company Overview

Our applications let users engage with evidence-informed content, including session-based visualisation and customisation tools, across multiple devices and contexts. We built the platform for reliability, accessibility and security, and we take seriously the expectations of Australian government and enterprise customers.

Digital Wellbeing and Mindset Programs

• Session-based programs that help users build positive mindset habits through structured, repeatable engagement. Content is personalised to each user.
• Native iOS and Android apps plus web access, so people get a consistent experience whether they are on their phone, tablet or computer.
• Users can upload their own images and set preferences to personalise their sessions and get more out of the program.
• Backend tools for program configuration, user management and usage insights, where privacy and consent settings allow.

Software Development and Delivery

• We host on reputable cloud infrastructure with high availability, encryption and backup.
• RESTful APIs with OpenAPI specs so you can integrate with your existing identity, billing and content systems.
• Infrastructure is defined as code, which means deployments are controlled, auditable and recoverable.
• Static analysis, automated testing, code review and dependency management are all part of how we build software.

Service and Support Models

• Standard subscription access for organisations and individuals.
• Tailored deployment and configuration for larger organisations and government. We can customise to fit your requirements.
• Documented escalation paths and support processes that align with service level expectations.
• Training materials and onboarding processes for both administrators and end users.

Suitability for Australian Government

We have structured Positive Prime to support Australian government agency requirements. This includes:

• Workplace wellbeing and mental fitness programs for public sector employees, contractors and volunteers.
• Scalable delivery of evidence-informed mindset and wellbeing content for community and health initiatives.
• Use by government-funded or contracted service providers (employment services, health and community organisations) to support their program participants.
• Participation in whole-of-government or agency-specific ICT and services panels where our capabilities match.

We understand government procurement. We can complete standard questionnaires, security assessments and due diligence requests as part of tender and onboarding.

Compliance and Security Summary

We maintain a formal Cyber Security Statement that covers governance, data protection, incident response and third-party risk. In summary:

• We collect, use and disclose personal information in accordance with the Privacy Act 1988 and Australian Privacy Principles.
• We have processes to assess, notify and report eligible data breaches under the Notifiable Data Breaches scheme.
• Data is encrypted in transit (HTTPS/TLS) and at rest. We use secure credential storage and role-based access control.
• Production runs on Amazon Web Services with infrastructure-as-code (Terraform), network segmentation and managed databases.
• We use the ACSC Essential Eight as a guiding framework for security uplift. Maturity levels vary by strategy and we do not claim formal certification.
• We are not ISO 27001 certified yet but we are progressively aligning our practices with recognised standards.

See our Cyber Security Statement for full details.

Past Performance and Experience

We have delivered and operated our platform for individuals and organisations across consumer, enterprise and program-delivery contexts. Our experience includes:

• Operating a multi-tenant SaaS platform with user accounts, content delivery and billing integrations.
• Integrating with third-party identity, payment and communication providers.
• Supporting subscription, licensing and enterprise deployment models.
• Responding to security, privacy and operational incidents within defined processes.

Case studies, references and contract examples can be provided on request for tender evaluation.

Key Differentiators

• We are Australian-based. Our leadership and operations are in Australia and aligned with Australian regulatory and cultural expectations.
• The platform was purpose-built for mindset and wellbeing programs, not retrofitted from a generic content or LMS product.
• We use widely supported frameworks and cloud-native services, which makes it easier to keep things secure and add features over time.
• Privacy and security matter to us. We have documented policies, a Cyber Security Statement, and processes aligned with the Privacy Act, APPs and government expectations.
• Our cloud architecture supports growth and recovery from operational incidents.
• We are happy to complete security questionnaires, participate in assessments and provide documentation to support procurement decisions.