Engineering for Australian companies.
Australian companies pay properly and expect properly. The Privacy Act reforms and the Notifiable Data Breaches scheme have made supplier security a board-level question, which favours a partner holding an audited information security management system rather than a policy PDF.
- Daily overlap
- 14:30–17:30 AEST
- Contract currency
- AUD
- Data regime
- Privacy Act 1988 and the Australian Privacy Principles
- Regulator
- Office of the Australian Information Commissioner (OAIC)
- Working language
- English
Hours, money,
and paperwork.
The three things that decide whether a cross-border engagement works, answered before you ask. Everything here is specific to Australia rather than a global average.
Time overlap
14:30–17:30 AEST
AEST is four and a half hours ahead of IST, so our day opens at your 14:30 — three hours of overlap at the end of your afternoon, and none at all in your morning. This is the narrowest window of any market we serve, quoted precisely. Standups, reviews and demos are scheduled inside it; everything else runs on written reporting and formal change control so nothing sits blocked overnight. Where a project needs more, we extend the window by shifting the assigned engineers and name that in the engagement.
Currency and tax
AUD
Quoted and invoiced in Australian dollars, which keeps the currency risk on our side of the contract rather than yours. Nothing Indian is added to the invoice — exported services attract no tax at source. As a non-resident supplier we do not charge Australian GST; a GST-registered business accounts for it under the reverse charge.
Data protection
- Governing law
- Privacy Act 1988 and the Australian Privacy Principles
- Authority
- Office of the Australian Information Commissioner (OAIC)
- Our role
- Processor, on your instructions
Named sub-processors, written consent before any addition.
We process on your instructions under a data processing agreement, with APP 8 cross-border disclosure obligations addressed contractually and every sub-processor named. Our incident process supports your obligations under the Notifiable Data Breaches scheme: assessment within the statutory window, written notification, and a post-incident review. Australian data residency is available and fixed at contract where required.
Answered
before you ask.
The questions we are asked most often from Australia, answered straight. Where we do not hold something, it says so.
APP 8 cross-border disclosure
Addressed contractually. We accept obligations equivalent to the Australian Privacy Principles in the DPA, so your disclosure to us does not leave you carrying an unmanaged risk.
Notifiable data breach support
Our incident process is built to feed yours: assessment, written notification with scope and categories affected, and a post-incident review. We maintain an internal breach register rather than reconstructing events after the fact.
ISO 27001 certificate for supplier onboarding
Certificate 25-07-21156763, issued by Anglia Compliance Group in the UK, verifiable by number without contacting us. Supplied at onboarding rather than requested from us.
Australian data residency
Available. Both major cloud providers operate Australian regions; residency is written into the agreement and reflected in the architecture rather than set at deploy time.
Certificate numbers, accreditation status and the verification route are published on our trust page. Check them without asking us.
The problems
that arrive.
The work that comes to us from Australia most often. If one of these is yours, send us the brief.
Replacing a departed development shop
A product built by an agency that has moved on, with no documentation and no one who can safely change it. Audit first, written assessment of what is load-bearing, then restructuring.
Field and operations software
Mining, construction, logistics and utilities work where the interface has to survive a phone, a glove and no signal. Offline-first is an architectural decision, not a feature.
Team extension at a sustainable cost
Australian engineering salaries make a five-person team expensive. Named engineers inside your repository on a monthly allocation, with a three month minimum and no recruitment fee.
Why Australia works with us
- ISO 27001 with a verifiable certificate number, which the post-reform Privacy Act environment has made a standard requirement.
- Three hours of overlap in your time zone, quoted precisely. The engagement is built around written reporting and formal change control, so progress does not depend on catching someone live.
- Product refinement is a defined practice, not an exception — most Australian enquiries we receive are about software someone else built.
The overlap is the weakest of any market we serve: three hours, 14:30 to 17:30 AEST, and nothing in your morning. If your team needs live collaboration through your morning, an Australian or South-East Asian supplier will serve you better and we will say so on the first call. We have no Australian entity and are not on any Commonwealth procurement panel.
Asked from
Australia.
Answers open with the answer. The general set — pricing, process, IP, security — is on the FAQ.
- How do you handle the time difference with Australia?
- Three hours of overlap, 14:30 to 17:30 AEST, and we quote it in your time rather than ours. AEST is four and a half hours ahead of India, so our working day opens mid-afternoon in yours and your morning falls entirely outside it. Standups, reviews and demos are scheduled inside the window; the rest runs on weekly written reporting and formal change control. Where a project genuinely needs more, we shift the assigned engineers and name the extended window in the engagement. If you need live collaboration through your morning, a closer supplier fits better and we will say so.
- Do you meet Australian Privacy Act obligations?
- We process personal data on your instructions under a data processing agreement that addresses APP 8 cross-border disclosure by accepting obligations equivalent to the Australian Privacy Principles, and that names every sub-processor. Our incident process supports your Notifiable Data Breaches obligations with assessment inside the statutory window, written notification and a post-incident review. Australian data residency is available and fixed at contract.
- Can you take over a product another agency built?
- Yes, and it is a defined practice rather than an exception. It begins with a codebase audit and a written assessment of what is load-bearing and what has to be replaced — before any rewrite is recommended. Most enquiries we receive from Australia are exactly this: a product that works, has no documentation, and cannot safely be changed.
Where else
we work.
Working hours, currency and data protection, covered for every market we serve.
Working with Australia.
Contracted in AUD, governed by Privacy Act 1988 and the Australian Privacy Principles, delivered inside the 14:30–17:30 AEST overlap window.
Cognimit Technologies LLP · Monday to Friday, 10:00–18:00 IST · IST (UTC+5:30)