Our methodology is published. Because a score you can't interrogate is a score you can't stand behind.
Attesta is a compliance co-pilot: regulatory intelligence that reads your documents against the preloaded Standards, and a human sign-off workflow that keeps your organisation the decision-maker. Here is exactly how it works — the whole formula, in plain English.
The Standards are already inside.
Attesta comes preloaded with both Commonwealth legislative instruments, reproduced unmodified:
- the strengthened Aged Care Quality Standards (Aged Care Rules 2025) — all seven Standards in their Standard → Outcome → Action structure; and
- the NDIS Practice Standards (NDIS Provider Registration and Practice Standards Rules 2018) — the core module and supplementary modules.
You never configure, interpret or transcribe the framework. You upload only your own policies, procedures and governance documents — here's a cheat sheet of what to include. Attesta never ingests resident, participant, patient or clinical records; detected personal information is rejected and discarded, never stored.
Legislation attribution. Sourced from the Federal Register of Legislation at {{DOWNLOAD_DATE}}. For the latest information on Australian Government law please go to https://www.legislation.gov.au.
Action-level assessment, rolled up transparently.
1. Every Action gets one of four evidence ratings. Attesta reads your documents against each applicable Action (aged care) or quality indicator (NDIS) and rates it:
- Evidenced — a current document squarely addresses the requirement (worth 3 points);
- Partially evidenced — addressed, but incompletely or by an out-of-date document (2 points);
- Not evidenced — documents touch the topic but don't meet the requirement (1 point);
- No document found — nothing in your suite addresses it (0 points).
2. Ratings roll up: Action → Outcome → Standard → overall. Each Outcome's score is the points earned across its Actions divided by the points available. Standards roll up from their Outcomes the same way. Nothing is hidden in the aggregation — you can drill from your overall level down to the individual Action and the exact clause it cites.
3. The roll-up is evidence-weighted. Actions that require specific documentary evidence weigh more than those satisfiable by general policy statements. For residential aged care, Standard 2 (The Organisation) and Standard 5 (Clinical Care) carry a higher weighting in your overall Readiness Level, reflecting where assessment scrutiny concentrates.
4. Only human-confirmed findings count. Every finding must be accepted, rejected or deferred by a reviewer in your organisation. Rejected findings are excluded from your score (with the rejection recorded); deferred findings stay visible in the queue. The Readiness Level you report to your board is one your own people have signed off — not a raw machine output.
Four Readiness Levels. One flag. No jargon.
Your overall score maps to one of four plain-English bands. Attesta assesses readiness — the Aged Care Quality and Safety Commission and approved NDIS quality auditors determine conformance. We deliberately avoid maturity-model language: your board doesn't need "optimised", it needs to know if you're ready.
Not Ready
Material gaps across multiple Standards. An assessment now would likely produce significant findings. The fix-first list is the whole game.
Developing
A real evidence base exists but coverage is uneven. Focused work on the weighted Standards moves this fastest.
Substantially Ready
Most requirements evidenced; remaining gaps are identified and specific. Typically one or two focused quarters from Audit-Ready.
Audit-Ready
Requirements evidenced by current, signed-off documents. You could hand an assessor your evidence pack tomorrow.
Exceeding-track flag. Aged care providers whose evidence goes beyond conformance receive an Exceeding-track flag, aligned to the aged care exceeding rating — a signal worth having before you claim it anywhere that matters.
Citation. Confidence. Human sign-off.
No finding in Attesta is ever just an assertion. Each one carries (a) a citation to the exact clause of the standard it addresses, (b) a High / Medium / Low confidence indicator, and (c) a sign-off step where your reviewer accepts, rejects or defers it. Severity mirrors audit vocabulary — Major non-conformance risk, Minor non-conformance risk, Improvement opportunity — so nothing needs translating for your auditor or your board.
Here's what a finding looks like:
Incident management policy lacks a documented escalation pathway to the governing body
Your Incident Management Policy v3.1 defines incident classification and staff-level response, but does not document how serious incidents are escalated to the governing body, as the cited Action requires.
Illustration only — a fictional finding about a fictional document. In the product, these buttons record your reviewer's decision in the audit trail.
What the free snapshot includes — and what paid adds.
| Capability | Free snapshot | Paid plans |
|---|---|---|
| Overall Readiness Level | Included | Included |
| Per-standard readiness bars | Included | Included |
| Top-3 priority actions | Included | Full prioritised list |
| Full findings with citations, confidence & sign-off | — | Included |
| Effort / impact fix-first matrix | — | Included |
| Re-runs after policy updates | One-off | Unlimited |
| Policy currency monitor | — | Governance plan |
| Evidence vault & assessor question bank | — | Governance plan |
| Multi-standard & multi-site | — | Governance plan |
| Audit trail of reviewer decisions | — | Governance plan |
| Upload allowance | 10 documents · 50MB total · 25MB per file | Full policy suites |
Supported formats: PDF, DOCX, XLSX. See pricing for plan details.
Read the methodology. Then test it on your own documents.
The free snapshot runs this exact methodology on up to 10 of your governance documents — same scoring, same bands, no charge.