Six weeks of audit. Here's what the data shows.

A short read across the desk. The slim deck walks through the hooks; the take-home report unpacks every line below. This page is the bridge — it tells you what we found, what we recommend, and what to decide.

What we found

2,500 client records in an open share-link — active Privacy Act exposure.
One person creates 1,334 invoices a month — no backup trained, no automation.
$300K of paid invoices haven't been matched to clients.
DEX submissions tracked by cell colour — not auditable.
$556K less grant arriving than scheduled — the pattern points to Transport delivering ~21% of contracted trips.
One mobile holds every Transport booking — clients who can't get through call competitors.
30 contractors, no central compliance register — police checks, WWVP, insurance scattered across email and paper.
The same hour of service is recorded in different formats — "60 min", "1 hour", "90 minutes" — formats vary cell to cell. Even when data is captured, it doesn't add up cleanly.

What we recommend

Quick Wins · months 1–3

Data security lockdown
Workspace tenant migration
Operational sheet revamp
Xero-first invoicing + BPAY (handles invoicing AND reconciliation)
Google review automation

Big Swings · months 3–9

DEX submission automation
Aged care worker operations portal
Worker compliance register
AI voice agent (Transport + Home Maintenance)
Performance & compliance dashboards
WFH transition readiness (beats 1 Sep 2026 deadline)

$766K Year 1 value

$144,500 Total investment

530% Year-1 ROI

7+ FTE Of staff time recovered

The math is what Xero shows today. Whether it shows the right story depends on cleaning up the data — which is the foundation everything else builds on. That cleanup is what MR Labs Phase 2 delivers, and it's why the headline ROI understates what's actually being bought: clarity, defensibility, and the operational base for whatever comes next.

A note on what's coming — two regulatory shifts

Near-term · 1 September 2026. Victoria's Working-From-Home legislation commences for workplaces with 15+ employees (deferred to 1 July 2027 for under-15). Phase 2 BS6 — WFH Transition Readiness Stack — is sequenced to be operational before that date. Softphones, presence tracking, formal policy, OH&S framework, workstation kits.

Longer-term · no earlier than 1 July 2027. CHSP transitions to Support-at-Home. The Department hasn't yet published CHSP-specific transition mechanics; HCP precedent suggests guidance arrives 1–12 months before commencement. The Phase 3 retainer — ongoing fractional CTO at ~$5K/month — covers navigating that transition. When the rules drop, the response window will be short, and MR Labs is already inside the operation.

Three things to decide in the next two weeks

Which Quick Wins start month 1? Of the five Quick Wins in sub-phase A — which lands first? Recommended sequence in the take-home report.
Who at EC owns Phase 2 day-to-day? MR Labs builds; EC needs a single point of contact. Natural candidate: the General Manager.
Confirm Phase 3 retainer at month 12? Ongoing fractional CTO + SAH transition navigation. Mutual 30-day notice, no fixed-term.

Ready to sign? Phase 2 · Stage A SOW. The full agreement is online — review the scope, deliverables, fees, and digital signature panel.

sign.mrlabs.com.au/ec-phase2

Sign the SOW →