Welcome to the AA Solutions Trust Centre
AA Solutions provides SMSF administration, investment and portfolio administration, tax and accounting support, bookkeeping and corporate secretarial services to accountants, financial advisers and their clients across Australia. Every day we are trusted with some of the most sensitive information a person has: tax file numbers, bank details, superannuation balances and the financial records of their business and family.
We take that seriously. Protecting client information is not a compliance exercise for us — it is the basis on which accountants and advisers can put their clients' affairs in our hands.
How we protect your information
Our Information Security Management System is built on ISO/IEC 27001:2022, the international standard for information security, and is independently assessed. It covers every part of our business — our people, our Sydney office, our PIMS platform and the cloud services behind it — and is owned personally by our Director.
In practice that means:
- Information is classified and labelled according to its sensitivity, with tax file numbers and financial data given the highest level of protection under the Privacy Act and the TFN Rule.
- Access to client data is limited to people with a genuine need, enforced by multi-factor authentication and reviewed regularly.
- PIMS, our client and portfolio management platform, is developed in-house to documented secure-coding standards and is tested by an independent security firm at least annually.
- Our systems run on Microsoft 365 in Australian data centres, with managed devices, encryption in transit and at rest, and tested backups.
- Staff and contractors are screened, trained annually, and bound by confidentiality obligations before they touch client information.
- We have a documented incident response process, tested through regular exercises, with clear obligations to notify affected clients and the Office of the Australian Information Commissioner where the law requires it.
- Business continuity is planned and tested, so that client processing continues if our office, a supplier or a system is unavailable.
Our obligations
As a registered tax practitioner and SMSF administrator we operate under the Tax Agent Services Act, the SIS Act, the Corporations Act and the Privacy Act 1988, including the Notifiable Data Breaches scheme. Our legal and regulatory obligations are recorded, reviewed and built into our controls.
Working with us
Our clients trust us with their most important financial relationships. In return we commit to handling their information with care, transparency and discipline, and to telling them promptly if something goes wrong.
If you require further information — including our ISO/IEC 27001 Statement of Applicability, information security policies, penetration testing summaries or privacy documentation — you can request it through this page.