Most small business software cannot. It sends your payroll somewhere else and something further down the line does the lodging. Vaulco is a registered ATO Digital Service Provider, certified for Single Touch Payroll Phase 2 in its own right.
Getting there took ten months, an Operational Security Framework certification, thirty conformance test cases and more than forty test pay events read by hand at the ATO. This page says exactly what it covers, and exactly what it does not.
Certification is granted for specific services and income types, not for a product in general. These are ours.
Pay events lodged directly to the ATO from Vaulco. Not exported to another product, not handed to a clearing house.
The income type the overwhelming majority of Australian employers report.
A whole pay event can be replaced when something needs correcting, rather than patched.
Salary sacrifice and other employer contributions reported as the ATO requires.
Garnishee and deduction amounts, reported at both employee and payer level.
Published in full, because a certification page that only lists the good news is not worth reading. If your business needs any of the below, Vaulco is not the right tool for that part of your payroll today.
Additional components can be certified by completing further ATO test cases. If one of these matters to you, tell us. It is a useful signal about what to certify next.
Before a provider is allowed near payroll data the ATO assesses it against the Operational Security Framework. Vaulco passed in July 2026, across all twelve controls: encryption in transit and at rest, multi-factor authentication, audit logging, data hosted in Australia, incident response, supply chain and personnel.
Your data is held in Sydney. Tax file numbers are never written to our audit logs. Lodging a pay event requires a second authentication factor, every time. The full security detail is on our security page.
The ATO certifies that software correctly reports what it says it reports. It does not endorse, recommend or guarantee any product, including this one, and we would not claim otherwise.
Vaulco is not a registered tax or BAS agent. The software calculates and transmits the figures you enter and approve. You review every figure and accept the ATO declaration yourself before anything is sent. If you want tax advice you can rely on, speak to a registered tax or BAS agent. You can check anyone's registration on the Tax Practitioners Board register.
If you are weighing up whether to move a client, the questions you would normally have to ask are answered above. Happy to answer the ones that are not.