Be ready for the Digital Duty of Care — and prove it.
Every online business, including small ones, will need to assess online safety risks every year and keep the records for six years. DigitalProof monitors your website every hour, issues a verifiable certificate, captures dated screenshots and stores your evidence — automatically.
- No credit card to start
- Hourly monitoring
- 6-year audit-ready records
What the duty means for your business
The Online Safety Amendment (Digital Duty of Care) Bill 2026 would require anyone responsible for an online service to take reasonable steps to keep it safe — in the same way workplace safety law works.
A general safety duty
Ensure, so far as reasonably practicable, a safe online environment for people using your website or platform.
Annual written risk assessment
Identify foreseeable harms, rate likelihood and severity, document your controls and review them at least yearly.
Records you can produce
Keep your assessments and evidence for years and be ready to hand them to the eSafety Commissioner on request.
How DigitalProof works
Add your website
Enter your address and verify you own it in a minute.
We scan every hour
Safety, transparency, reporting and security checks run automatically.
Fix and certify
Clear, plain-English fixes. Pass and your certificate is issued instantly.
Everything is stored
Scans, screenshots, certificates and assessments kept for six years.
Everything in one dashboard
Hourly scans
Continuous checks of privacy, terms, reporting routes, child-safety signals, HTTPS and exposed files.
Certificates
Download a PDF, share a public verification link or embed a live badge on your site.
Screenshots
Dated, fingerprinted captures of your site as evidence of what visitors saw.
Risk assessment tool
Guided register covering every harm category in the Bill, with versioned sign-off.
6-year record vault
Tamper-evident, hash-chained history you can export in one click.
Instant alerts
Know the moment your status changes — before a problem becomes a breach.
Multi-site
Manage one shop or twenty-five client sites from the same login.
Plain English
No legal jargon. Every check explains what it means and how to fix it.
A certificate you can show
When your website passes, we issue a certificate with a unique ID and a public verification page — useful for customers, insurers, partners and your own records.
The certificate is an independent record of automated checks. It is not a government certificate and does not guarantee legal compliance.
Certificate of Online Safety Readiness
yourbusiness.com.au
Simple monthly pricing
Start free for 7 days. Cancel any time.
Starter
One website, ideal for a sole trader or small shop.
- 1 monitored website
- Hourly safety scans
- Downloadable certificates
- Daily screenshots
- Annual risk assessment tool
- 6-year audit records
Business
Up to 5 websites for growing small businesses.
- 5 monitored websites
- Hourly safety scans
- Downloadable certificates
- Daily screenshots
- Annual risk assessment tool
- 6-year audit records
Agency
Up to 25 client sites under one dashboard.
- 25 monitored websites
- Hourly safety scans
- Downloadable certificates
- Daily screenshots
- Annual risk assessment tool
- 6-year audit records
Questions
Is the Digital Duty of Care in force today?
Not yet. The Bill is progressing through Parliament and a 12-month transition period is proposed after it passes. Starting now means your first assessment and records are in place well before the deadline.
Does it apply to small businesses?
The draft Bill contains no general small-business exemption — the duty applies to anyone responsible for an online service, with the Minister able to exempt low-risk classes. Final rules may change, so we track the Bill and update the checks.
Is this a government certificate?
No. There is no government certification scheme in the draft law. Our certificate is an independent, verifiable record that your website passed automated checks on a given date — evidence of diligence, not an official approval.
What do you store, and for how long?
Scan results, screenshots, certificates and risk assessments are retained for at least six years so you can produce them if asked. You can export your scan history at any time.
Do I need to install anything?
No. We only need to read your public website. You confirm ownership with a small meta tag or text file.