Skip to main content
Create Free Account

About ComplyFlow

Founded in Manly in 2009. Still Fixing the Same Problem.

Phil Wallach, Mitch Bourne, and Sam Bourne started ComplyFlow because proving that every contractor, Worker, and site met the standard was a job done in spreadsheets and folders. Seventeen years on, the company is still in Sydney, still run by the people who built it, and the job is the same.

  • Founded in Manly, Sydney, in 2009
  • ISO 27001 certified since 2019
  • AWS Qualified Software since 2023
  • Serving Australia and New Zealand

From prequalification, to on-site, and next year’s SOP review. ComplyFlow makes compliance easier, faster, and AI-driven.

In plain words: every contractor company, every Worker, every site, and every safety document lives in one place. When something is missing or out of date, ComplyFlow tells you before it becomes a problem. That has been the job since 2009; the AI is how it gets done faster now.

The Story

Seventeen Years, One Problem.

Where ComplyFlow came from, one dated step at a time. The photographs are from the projects and the places.

  1. Founded in Manly, Sydney.

    Phil Wallach, Mitch Bourne, and Sam Bourne start ComplyFlow in Manly to make compliance and risk across contractors and sites something a business can actually prove, built for the standards regulated industries are held to.

    Manly, Sydney, where ComplyFlow was founded in 2009
  2. The First Civil Construction Clients.

    ComplyFlow’s first major Clients are civil construction businesses, an industry with some of the most demanding contractor and safety requirements there are. The platform is refined against their real sites.

    Civil construction site
  3. Government and Education.

    Australian Catholic University and the Department of Home Affairs become Clients, the first outside construction.

    Australian Catholic University
  4. The Toowoomba Second Range Crossing.

    ComplyFlow is engaged on the AU$1.6 billion Toowoomba Second Range Crossing with Ferrovial Agroman Australia and Acciona Infrastructure, managing compliance, contractor safety, and plant across a major infrastructure build.

    Toowoomba Second Range Crossing project
  5. A First Project Overseas.

    The D4R7 motorway project in Slovakia is ComplyFlow’s first outside Australia and its first in another language.

    D4R7 international infrastructure project
  6. An Award, and Qantas.

    ComplyFlow wins H&S Solution of the Year at the Australian Construction Awards. Qantas becomes the first aviation Client, replacing Avetta.

    Qantas, ComplyFlow's first aviation client
  7. ISO 27001, a Board, and BHP.

    • Bob Denby joins as the first Chairman of the Board, after a long executive career
    • ComplyFlow wins the BHP FastTrack Challenge against 27 other entrants
    • ISO 27001 certification, held since
    • BlueScope Steel becomes the first manufacturing Client
    BHP FastTrack Challenge win
  8. Sydney Water, Toll, and OZ Minerals.

    • A contract of more than ten years on the D4C Sydney Water program
    • Toll Group and OZ Minerals join on the new service model
    Sydney Water project
  9. Connect: One Profile for Every Client.

    ComplyFlow launches Connect. A contractor holds one profile and one annual licence, and shares it with every Client on ComplyFlow, while each Client keeps its own requirements.

    ComplyFlow Connect contractors
  10. The Investment NSW Global Export Program.

    ComplyFlow joins the Investment NSW Global Export Program, taking the platform to United Kingdom businesses working under complex regulation.

    Investment NSW Global Export Program
  11. AWS Qualified Software.

    ComplyFlow achieves AWS Qualified Software status for the security, scalability, and reliability of the platform, which matters to Clients with strict data requirements.

    AWS Qualified Software certification
  12. A Rebuilt Platform and a New Design System.

    The platform is refactored end-to-end and a new design system launched, the base for everything since.

    ComplyFlow platform design system
  13. AI Agents in the Product.

    ComplyFlow ships its AI tools: agents you configure against your own criteria to review documents and forms, with a person making the decision on the record.

    ComplyFlow AI safety agent platform

ComplyFlow Is Already Trusted.

Property, transport, resources, manufacturing, government, and more. Some of these have been Clients for more than a decade.

  • ISPT
  • Toll Group
  • Lendlease
  • CBRE
  • National Intermodal
  • NSW Department of Planning, Industry and Environment
  • BlueScope
  • Maersk
  • ISO 27001 certified ISO 27001Certified 2019
  • AWS Qualified Software Certified 2023
  • GDPR, General Data Protection Regulation Compliant 2020
  • Microsoft Okta Single sign-on

Security & Data

Certified, Audited & Hosted in Australia.

Your compliance record is the evidence you rely on when somebody asks, so where it lives and who can reach it matters. ComplyFlow is ISO 27001 certified, runs on AWS in Australia, and your people sign in with the accounts they already have.

Meet the People Running It.

The leadership team, what each of them does, and how to reach them.

Questions

Questions People Ask About the Company.

Where is ComplyFlow based?

Sydney, Australia, where it was founded in Manly in 2009. The team works Australian hours and serves Australia and New Zealand.

Who founded ComplyFlow, and who runs it now?

Phil Wallach, Mitch Bourne, and Sam Bourne founded it in 2009. Mitch is Managing Director, Phil is Chief Technology Officer, and Sam is Director of Risk and Compliance. The leadership page has the rest of the team.

What certifications does ComplyFlow hold?

ISO 27001 for information security, certified since 2019, and AWS Qualified Software status since 2023. Data is hosted in Australia. The Security page sets out how access, encryption, and audit trails work.

Which industries does ComplyFlow work in?

Fourteen, from construction, property, and facilities management to transport, mining, utilities, manufacturing, healthcare, and government. Each has its own page with the requirements that matter in that sector.

Compliance fails in the gaps between systems. ComplyFlow doesn’t have any.

Book a 30-minute demo. We will show you ComplyFlow working with your kind of sites, your kind of contractors, and your rules. No slides, no hard sell.

  • ISO 27001
  • Hosted on AWS
  • Microsoft & Okta SSO
  • API & MCP
  • Data in Australia

Compliance you can prove, instantly.