Compliance
Built for the Code of Conduct and OMARA's guidance on AI.
You stay responsible for the advice. Pathway keeps the records that show you took care, and won't let AI near a file until the client says yes.
What the rules ask, and what Pathway does
Your obligations, carried by the software.
Using AI with client files
OMARA guidance on AI, March 2026- Clients should be told in advance that AI will be used.
- The questionnaire asks the client in plain words. If they agreed in writing another way, you record that instead.
- Get written consent before personal information goes into an AI system.
- The AI advisor and letter drafting refuse to run on a client's file until their consent is recorded, with when and how it was given.
- The agent remains fully responsible for advice an AI helped with.
- Every AI draft stays marked as a draft until a registered agent reviews and approves it, with their name on the record.
- Confidentiality duties apply to AI platforms.
- Only the client's own file is sent, only for the question you ask, and only after consent.
Client agreements and records
Code of Conduct for registered migration agents- Give the client the Consumer Guide before starting work, and record that you did.
- The client accepts the Consumer Guide in their portal, and the exact text they saw is kept.
- Agree services and fees in writing.
- Your agreement for services and fees is accepted online, with the exact text and time kept on the file.
- Keep proper records.
- Notes, a full activity timeline for each client, and an audit log for the practice.
The record
Every step, timed and kept.
When a principal, an insurer or OMARA asks how a piece of advice came together, the answer is already on the file: what the client accepted, when they consented, and who approved the advice.
- 09:41Consumer Guide givenAccepted by the client in their portal, exact text kept
- 09:43Agreement for services and feesAccepted online: $3,850 incl. GST
- 09:44Written consent to AI assistanceGiven by Raj Sharma
- 11:02Advice letter drafted with AIHeld as a draft
- 11:26Advice approved and sentBy Asha Verma, MARN 1234567
Security
Security a practice can show its insurer.
Two-step sign-in
With an authenticator app. Owners can require it for everyone in the practice.
Audit log
Sign-ins, downloads, exports and changes, readable by the practice owner.
Devices and passwords
See every signed-in device and sign out a lost one. Nobody ever chooses or sees another person's password.
Each practice kept apart
Every query is scoped to your practice, and tests try to reach one practice's data from another on every route.
Stored in Sydney
Client files, documents and the database are hosted in Sydney, Australia.
Yours to take
Export every record and every document as one zip, whenever you like.
Pathway helps you meet your obligations; it doesn't replace your professional judgement. When you use the AI advisor, the client's file is sent to Anthropic to answer your question, which is why consent comes first.
Compliance that keeps itself.
Try Pathway with your real practice details. If it isn't for you, export everything and go.
14 days free. No card needed.