Digital Service Provider OR Add-on Developer
The ATO's Operational Framework and the SSAM outline different requirements for Digital Service Providers (DSPs) and third party add-on developers.
Use this table to self assess whether your application should be certified under the ATO's Operational Framework or the SSAM. Or click the button below to take the quiz!
Digital Service Provider (DSP) | Third Party App/Add-on | |
Purpose |
|
eg. Point of sale, inventory, expense claim management |
ATO Integration |
|
|
API ecosystem |
|
|
Hosting |
|
|
TFN data stored or used in application |
|
|
Personal or financial data stored or used in application |
|
|
Certification |
|
|
Applicable Standard |
You can download a copy of the standard (PDF) here: Security Standard for Add-on Marketplaces (SSAM). Last updated August 2019.
How to register as a DSP:
If your application qualifies you as a Digital Service Provider (DSP), then you will need to register your software with the Digital Partnership Office at the ATO and complete the Operational Framework Security Questionnaire. Click here for more information.