Maree-CareFlow - Forensic Competitive Analysis
Side-by-Side vs. All Major Players in Australian NDIS / Allied Health Practice Management
Document Version: 1.6 - last reviewed at v1.3.71; current release v1.7.8 - NOT re-reviewed since Date: 2026-07-29 Maree-CareFlow Version: 1.3.71 Note: The current version is v1.7.8 and our BETA version will be v1.8.0 - v2.0.1
Table of Contents
- Platforms Assessed
- Executive Summary Scorecard
- NDIS-Specific Feature Depth
- Clinical Documentation
- Billing & Multi-Funder Support
- Scheduling & Smart Rostering
- Client & Participant Management
- Practitioner & Credential Management
- Compliance & Audit
- Security Architecture
- AI & Automation Features
- Integrations & Ecosystem
- Telehealth & Communications
- Reporting & Analytics
- Multi-Tenancy & Organisation Structure
- Deployment & Data Sovereignty
- Pricing Comparison (AUD)
- Mobile & Accessibility
- Support & Onboarding
- Tech Stack & Architecture
- Strengths & Weaknesses Matrix
- Ideal Customer Profile (ICP) by Platform
- Strategic Gaps & Opportunities
1. Platforms Assessed
| # | Platform | Origin | Primary Market | Business Model | Ownership |
|---|---|---|---|---|---|
| MCF | Maree-CareFlow | Australia | All 11 primary practice types: NDIS Provider · NDIS Plan Manager · Support Coordination Practice · SDA / SIL Accommodation Provider · Allied Health Practice · Physiotherapy · Occupational Therapy · Speech Pathology · Aged Care Provider (HCP / Support at Home) · Home Care Provider · Multidisciplinary / Mixed Provider | Self-hosted / SaaS | Private |
| 1 | Competitor A | Australia | Allied Health (broad) | SaaS only | Acquired (2023) |
| 2 | Competitor B | Australia | Allied Health (broad) | Freemium SaaS | Private |
| 3 | Competitor C | Australia | Allied Health (broad) | SaaS only | Private |
| 4 | Competitor D | Australia | Allied Health (physio focus) | SaaS only | Private |
| 5 | Competitor E | Australia | NDIS / Home Care | SaaS only | Private |
| 6 | Competitor F | Australia | NDIS / Disability Services | SaaS (built on a third-party CRM platform) | Private (Series A) |
| 7 | Competitor G | Australia | NDIS (Plan Managers) | SaaS only | Private |
| 8 | Competitor H | Australia | Allied Health (case mgmt) | SaaS only | Private |
| 9 | Competitor I | Australia | NDIS + Allied Health | SaaS only | Private |
| 10 | Competitor J | Australia | NDIS / Aged Care | SaaS only | Private |
| 11 | Competitor K | Australia | GP / Clinical Records | SaaS only | ASX-listed |
| 12 | Competitor L | Australia | NDIS / Home Care | SaaS only | Private |
| 13 | Competitor M | Australia | NDIS / Aged Care / Disability | SaaS only (AWS) | Private |
Note: All prices in AUD unless stated. Competitor pricing sourced from public pricing pages and verified 2025-2026 market research. Features verified from public documentation, changelog, community forums, and direct platform testing where available.
MCF primary market (full breadth): the commercial-packaging layer ships 11 primary practice types (see Section 17), so MCF's addressable market is wider than any single competitor's: NDIS provider, NDIS plan manager, support coordination practice, SDA / SIL accommodation provider, allied health practice (general / physiotherapy / occupational therapy / speech pathology), aged care provider (HCP / Support at Home), home care provider, and multidisciplinary / mixed provider. Most competitors target one or two of these segments; MCF spans all of them from one codebase.
2. Executive Summary Scorecard
Scored 0-10 per category. 10 = best-in-class.
| Category | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor E | Competitor F | Competitor G | Competitor H | Competitor I | Competitor J | Competitor K | Competitor L | Competitor M |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| NDIS Depth | 10 | 4 | 5 | 4 | 4 | 7 | 9 | 7 | 5 | 8 | 7 | 2 | 7 | 8 |
| Clinical Docs | 9 | 8 | 6 | 8 | 7 | 4 | 5 | 3 | 8 | 7 | 5 | 9 | 4 | 4 |
| Billing | 10 | 7 | 7 | 7 | 7 | 6 | 8 | 9 | 6 | 8 | 7 | 5 | 7 | 8 |
| Compliance/Audit | 10 | 6 | 6 | 5 | 5 | 7 | 8 | 6 | 7 | 7 | 7 | 7 | 6 | 7 |
| Security | 9 | 7 | 7 | 7 | 6 | 7 | 8 | 6 | 7 | 7 | 7 | 8 | 6 | 7 |
| AI Features | 9 | 3 | 2 | 2 | 2 | 2 | 4 | 2 | 2 | 5 | 2 | 3 | 2 | 2 |
| Scheduling | 9 | 8 | 7 | 9 | 8 | 7 | 6 | 5 | 6 | 7 | 6 | 4 | 6 | 8 |
| Integrations | 9 | 8 | 7 | 7 | 7 | 6 | 8 | 7 | 6 | 7 | 6 | 7 | 5 | 6 |
| Telehealth | 7 | 6 | 7 | 8 | 6 | 4 | 4 | 3 | 5 | 7 | 4 | 6 | 4 | 3 |
| Reporting | 9 | 7 | 5 | 7 | 6 | 6 | 8 | 7 | 7 | 7 | 6 | 6 | 5 | 7 |
| Data Sovereignty | 10 | 5 | 5 | 5 | 5 | 5 | 6 | 5 | 5 | 5 | 5 | 7 | 5 | 5 |
| Value/Pricing | 9 | 6 | 9 | 7 | 6 | 7 | 4 | 7 | 6 | 7 | 6 | 5 | 7 | 6 |
| TOTAL (/120) | 110 | 75 | 73 | 76 | 69 | 68 | 78 | 67 | 70 | 82 | 68 | 69 | 64 | 71 |
| RANK | 1st | 5th | 6th | 4th | 9th | 11th | 3rd | 13th | 8th | 2nd | 11th | 9th | 14th | 7th |
Interpretation: Maree-CareFlow leads the field comprehensively, particularly in NDIS depth, billing breadth, compliance rigour, AI integration, and data sovereignty. Competitor I is the closest overall competitor and Competitor F the closest enterprise competitor; Competitor C leads among the remaining standard SaaS-only peers. Competitor M - a cloud (AWS) NDIS & aged-care specialist - enters at 7th (71), strong on rostering, NDIS billing/claiming and plan management but with no AI, limited clinical documentation, and cloud-only delivery. (Totals are the verified column sums of the twelve category scores above, now across 13 competing platforms; Competitor D and Competitor K tie at 69 for 9th, Competitor E and Competitor J tie at 68 for 11th.)
3. NDIS-Specific Feature Depth
This is the most critical differentiation axis for Australian disability services providers.
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor E | Competitor F | Competitor G | Competitor I | Competitor J | Competitor L | Competitor M |
|---|---|---|---|---|---|---|---|---|---|---|---|
| NDIS PACE API Integration (direct claiming) | No - BPR CSV for the myplace portal (PACE client is preview/mock) | No | No | No | No | Yes | No | Partial | No | No | Partial |
| NDIS Support Catalogue (price guide) | Manual import | Partial - Manual | Partial - Manual | Partial - Manual | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| NDIS Price Limit Validation (invoice) | Auto-block | No | No | No | Yes | Yes | Yes | Yes | Partial - Warn | Yes | Yes |
NDIS Number Format Validation (43XXXXXXX) | DB constraint | No | Partial | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| NDIS Funding Pool Tracking (burn rate, balance) | Yes | No | No | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Funding Period Types (annual/monthly/fortnightly/weekly) | All 4 | No | No | No | Yes | Yes | Yes | Yes | Partial | Yes | Partial |
| NDIS Group Billing (10-participant cap) | Automated | No | No | No | Yes | Yes | Yes | Yes | Partial | Yes | Partial |
| NDIS Plan Management (org as plan manager: per-purpose budget ledger Core/CB/Capital, inbound provider invoices with hard drawdown guard, disbursement + trust-accounting ledger, NDIA reimbursement claims + CSV, PM fee items 14033/14034) | Full | No | No | No | No | Partial | No | No | Yes | No | Yes |
| NDIS Cancellation Rules (short-notice analytics) | Full | Partial | Partial | Partial | Yes | Yes | Yes | Yes | Yes | Yes | Partial |
| NDIS Travel Billing (km split, remoteness caps) | Full | No | No | No | Partial - Basic | Partial | No | Partial | Partial | Partial | No |
| Postcode -> Remoteness Auto-Classification (metro/regional/remote, drives NDIS travel-time caps) | Auto | No | No | No | No | No | No | No | No | No | No |
| SDA Properties Management | Full | No | No | No | Partial | Yes | No | No | Partial | No | Partial |
| NDIS Incident Reporting (reportable flag) | Yes | No | No | No | Yes | Yes | Partial | Yes | Yes | Yes | Yes |
| Participant Goals Tracking | Yes | Partial | Partial | Partial | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Outcome Measures (standardised assessments) | Yes | Partial | Partial | Partial | No | Partial | No | Yes | No | No | No |
| NDIS Rostering (SCHADS-aware) | Yes | No | No | No | Yes | Yes | No | Partial | Yes | Yes | Yes |
| Holding Pool / Waitlist (DB-backed) | Yes | No | No | Yes | Partial | Yes | Partial | Partial | Yes | Partial | Partial |
| External Case Manager Portal | Full portal | No | No | No | Partial | Yes | Yes | Partial | Partial | Partial | No |
| Multi-funder on single participant | Yes | No | Yes | Partial | No | Yes | Yes | Yes | Yes | Yes | Yes |
NDIS Depth Legend
- Yes = Fully implemented
- Partial = Partial / limited implementation
- No = Not available
Key NDIS Finding
Maree-CareFlow is the only platform audited that combines portal-ready NDIS bulk payment request (BPR) files, automated postcode-remoteness travel-cap billing, SDA properties module, group billing fan-out, external case manager portal, and a built-in NDIS Plan Management subsystem (the org acting as a registered plan manager - per-purpose budget ledger, inbound provider-invoice capture with a hard budget-drawdown guard, provider disbursement, a trust-accounting ledger, NDIA reimbursement claiming and PM fee items) in a single integrated system at the Practitioner price point. Plan management is normally a separate product category (Competitor J is the notable specialist); MCF folds it into the same platform. Competitor F matches most clinical features but at 3-5× the cost and locked to third-party CRM platform infrastructure.
4. Clinical Documentation
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor H | Competitor I | Competitor K |
|---|---|---|---|---|---|---|---|---|
| Clinical Notes (structured templates) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Custom Report Templates | Yes | Yes | Partial | Yes | Yes | Yes | Yes | Yes |
| Template Approval Workflow | Yes | No | No | No | No | Yes | No | No |
| Outcome Measure Assessments | Yes | Partial | Partial | Partial | Partial | Yes | Yes | Partial |
| Risk Assessments (11 risk types) | Yes | No | No | No | No | Yes | Partial | Partial |
| Incident Reports (NDIS-flagged) | Yes | No | No | No | No | Partial | Yes | No |
| Session Transcription (AI-assisted) | AssemblyAI + Whisper | No | No | No | No | No | No | No |
| AI-Assisted Report Drafts | Ollama/Claude | No | No | No | No | No | Partial | No |
| Progress Notes (client timeline) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| PDF/Word/Excel Export | All 3 | Partial - PDF | Yes | Yes | Yes | |||
| E-signature on Intake (canvas) | Yes | No | Yes | Partial | No | No | Yes | No |
| Supervision Documentation | Full module | No | No | No | No | Partial | No | No |
| Client Portal (progress, docs, messages) | Yes | Yes | Yes | Yes | Yes | Partial | Yes | Partial |
| 7-Year Data Retention Enforcement | Automated | No | No | No | No | Partial | No | Partial |
| Immutable Clinical Record (soft-delete only) | Yes | No | No | No | No | Partial | No | Yes |
| HL7 v2 Referral Import (HealthLink/Argus) | Yes | No | No | No | No | Partial | No | Yes |
5. Billing & Multi-Funder Support
| Funding Source | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor E | Competitor F | Competitor I |
|---|---|---|---|---|---|---|---|---|
| NDIS Self-Managed | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| NDIS Plan-Managed | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| NDIS Agency-Managed (PACE Direct) | No - BPR CSV upload to myplace (PACE API is preview/mock) | No | No | No | No | No | Yes | Yes |
| Medicare (MBS) | via HICAPS/PRODA (PRODA-ready*) | Yes | Yes | Yes | Yes | No | No | Yes |
| Medicare Better Access (mental health items) | Yes | Partial | Partial | Partial | Partial | No | No | Partial |
| Medicare CDM / Chronic Disease | Yes | Partial | Partial | Partial | Partial | No | No | Partial |
| DVA (Dept of Veterans Affairs) | Yes | Partial | Yes | Partial | Partial | No | No | Partial |
| TAC (Transport Accident Commission) | Yes | No | No | No | No | No | No | No |
| MAIB (Motor Accident Ins Board, TAS) | Yes | No | No | No | No | No | No | No |
| iCare (NSW Workers Compensation) | Yes | No | No | No | No | No | No | No |
| WorkCover | Yes | Partial | Partial | Partial | Partial | No | No | Partial |
| Private / Health Fund | Yes | Yes | Yes | Yes | Yes | No | No | Yes |
| Stripe Online Payments | Yes | Yes | Yes | Yes | Yes | No | No | Yes |
| Invoice Batch Management | Draft/Submitted/Paid/Rejected | Yes | Partial | Yes | Yes | Yes | Yes | Yes |
| Bulk NDIS Claiming (500 line items) | Yes | No | No | No | No | Yes | Yes | Yes |
| Travel Billing (km split) | Full | No | No | No | No | Partial | Partial | Partial |
| Group Session Billing | Automated fan-out | Partial | Partial | Yes | Yes | Yes | Yes | Yes |
| Xero Integration | OAuth2 sync | Yes | Yes | Yes | Yes | Partial | Yes | Yes |
| QuickBooks Online | OAuth2 sync | Yes | Partial | Partial | Partial | No | No | Partial |
| MYOB | OAuth2 sync (v1.2.36; requires MYOB app keys) | Yes | Yes | Yes | Yes | No | No | Yes |
| Bank Feed / Open Banking (Basiq AU) | Assisted* | No | No | No | No | No | No | No |
| HICAPS Medicare Online | PRODA-ready* | Yes | Yes | Yes | Yes | No | No | Yes |
| Cancellation Revenue Analytics | At-risk, rate, impact | Partial | No | Partial | Partial | Yes | Yes | Yes |
| Payroll Export | Yes | Partial | No | No | Partial | Yes | Yes | No |
| STP Phase 2 Pay-Event Engine (PAYG, super, PAYEVNT.0004) | Yes | No | No | No | No | No | No | No |
| ABA / BECS Bank-File Generation (APCA format) | Yes | No | No | No | No | No | No | No |
| Aged Care (HCP + Support at Home) | Yes | No | No | No | No | Partial | Partial | No |
\* PRODA-ready = the Medicare/HICAPS claim workflow is built and calculates the full claim, but direct electronic lodgement via PRODA is credential-gated: it activates once the practice connects its own Medicare Online credentials and completes certification (until then the channel runs in preview/dev mode and never emits a receipt as if it were real). Assisted (Basiq) = the reconciler returns ranked suggested matches for a human to confirm; it does not auto-mark invoices paid. NDIS PACE direct claiming is NOT live and NOT certified: the PACE client is an honest mock, and the real claiming path is the BPR CSV the provider uploads to the myplace portal. See LIMITATIONS.md Sections 3, 7 and 8.
Key Billing Finding
Maree-CareFlow is the only platform in this field supporting TAC, MAIB, iCare, and WorkCover (13 schemes: TAC VIC, MAIB, iCare NSW, CTP QLD/SA/WA, MAIC ACT, MAC NT, WorkCover NSW/VIC/QLD/WA, SafeWork SA) as first-class billing funder types alongside portal-ready NDIS BPR claim files and assisted bank-feed reconciliation. This makes it uniquely suited to practices spanning disability, motor accident, and workers' compensation clients. It is also the only platform to combine Medicare Better Access (mental health items) and CDM chronic-disease billing with an in-built STP Phase 2 pay-event engine (PAYG, superannuation, PAYEVNT.0004) and ABA / BECS bank-file generation - so the same system that raises the claim can also run payroll and produce the bank payment file. No competitor in this comparison offers integrated STP Phase 2 payroll or ABA file generation.
6. Scheduling & Smart Rostering
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor E | Competitor F |
|---|---|---|---|---|---|---|---|
| Day/Week/Month Calendar Views | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Recurring Appointments (RFC 5545 RRULE) | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Travel-Time Optimised Scheduling (Haversine) | Yes | No | No | No | No | No | No |
| Multi-Practitioner View | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Multi-Location / Multi-Site | (3 locations) | Yes | Yes | Yes | Yes | Yes | Yes |
| Google Calendar Sync (2-way) | OAuth | Yes | Yes | Yes | Yes | No | No |
| Outlook/Microsoft Calendar | OAuth | Yes | Yes | Yes | Yes | No | No |
| Apple Calendar (iCal) | Export | Yes | Yes | Yes | Yes | No | No |
| Conflict Detection | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Online Booking Widget | 3-step public wizard | Yes | Yes | Yes | Yes | No | No |
| HMAC Intake Tokens (secure booking link) | Yes | No | No | No | No | No | No |
| Staff Rostering (SCHADS Award) | Yes | No | No | No | No | Yes | Yes |
| Waiting List (DB-backed queue) | Yes | Partial | Partial | Yes | Yes | Partial | Partial |
| Appointment Reminders (SMS + Email) | via Twilio | Yes | Yes | Yes | Yes | Yes | Yes |
| SMS Reminders (configurable timing) | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Group Session Scheduling | Yes | Partial | No | Yes | Yes | Yes | Yes |
Smart Scheduling Highlight
Maree-CareFlow's travel-optimised scheduling engine uses Haversine great-circle distance calculation to suggest appointment slots that minimise practitioner travel time between consecutive clients. This is unique in the market and directly reduces operational costs for community-based NDIS providers.
7. Client & Participant Management
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor E | Competitor F | Competitor I |
|---|---|---|---|---|---|---|---|
| Unlimited Active Clients | (paid) | Yes | Yes | Yes | Yes | Yes | Yes |
| NDIS Plan Fields (specialist fields) | Full | Partial | Partial | Partial | Yes | Yes | Yes |
| Medicare/DVA Number Storage | Encrypted | Yes | Yes | Yes | No | No | Yes |
| Client Goals (NDIS goals) | Yes | Partial | Partial | Partial | Yes | Yes | Yes |
| Funding Pool Tracking | Multi-pool | No | No | No | Yes | Yes | Yes |
| Client Contacts (NOK, guardians) | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Soft Delete (retention compliance) | Yes | No | No | No | Partial | Partial | No |
| Durable Digital Intake (5-section, e-signature, persisted submissions + signature, review -> convert-to-client) | Full | Yes | Yes | Yes | Partial | Partial | Yes |
| Client Lifecycle Stage Machine + Guided Onboarding Checklist (prospect -> pre_intake -> onboarding -> active; per-client checklist) | Full | No | No | No | Partial | Partial | Partial |
| Org First-Run Setup Wizard (steps computed from real data) | Yes | No | No | No | No | Partial | No |
| Client Portal (login, progress, docs) | Yes | Yes | Yes | Yes | Partial | No | Yes |
| Participant Self-Service Portal (schedule, funding, documents, self-booking requests) | Full | Partial | Partial | Partial | No | No | Partial |
| Equipment & Assistive Technology (AT assessment, register, billing, acceptance) | Full | No | No | No | Partial | Partial | No |
| External Case Manager Access | Full portal | No | No | No | No | Yes | No |
| Referral Tracking (HealthLink/Argus) | HL7 v2 | No | No | No | No | No | No |
| Injury Plan Management (motor accident) | Yes | No | No | No | No | No | No |
| Multi-Practitioner Assignment | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Client-Level KPI Dashboards | Yes | Partial | No | Partial | Partial | Yes | Partial |
| Document Storage (MinIO S3) | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
8. Practitioner & Credential Management
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor H |
|---|---|---|---|---|---|---|
| Ahpra register check workflow (one-click deep link, structured attestation, mismatch detection, yearly re-check clock, full audit trail) | Built in | No | No | No | No | Partial - Manual |
| AHPRA Expiry Alerts (90/30/7 days, automated daily email reminders) | Automated | No | No | No | No | No |
| PI Insurance Tracking | Yes | Partial | Partial | Partial | Partial | Yes |
| Working With Children Check | Yes | Partial | Partial | Partial | Partial | Yes |
| Supervision Relationships | Module | No | No | No | No | Yes |
| Multi-Location Assignment | Yes | Yes | Yes | Yes | Yes | Partial |
| Role-Based Access (9 roles) | Yes | 4-5 | Yes | Yes | Yes | Yes |
| Payroll Integration | Export | No | No | No | Partial | No |
| KPI Targets per Practitioner | Yes | No | No | Partial | No | Partial |
Key Credential Finding
Maree-CareFlow combines a guided Ahpra register-check workflow with automated expiry alerts, and it is deliberately honest about which half is which.
We do not claim a live register lookup, and no honest product can. Ahpra publishes no interface for software to query the Register of Practitioners, and their Terms of Use prohibit automated queries, bulk harvesting and programmatic reproduction of the register without written permission. Any vendor advertising an automatic Ahpra check is either doing something the regulator prohibits, or describing what we describe below.
What is built, and what is genuinely differentiating, is everything around the lookup:
- One click to the right page. The practitioner's Credentials tab opens Ahpra's own public register with the registration number ready to search - a single manual query, which is the use Ahpra permit.
- The system checks the information. It validates the registration number's format and profession prefix before a lookup is spent on it, and after a staff member records what the register showed, it compares that against the practitioner's profile and reports every disagreement - a renewed expiry against a stale record, a number filed against the wrong profession.
- A real audit trail. Every check is a dated row naming the person who made it and what they saw, so a practice can evidence "we verified each practitioner each year" rather than only showing a current value.
- A yearly re-check clock, brought forward automatically when a registration expires before the next check would fall due, plus a daily work list emailed to administrators covering anybody never checked or overdue.
- Automated expiry alerts - a daily task reading each practitioner's stored credential-expiry dates, emailing 90/30/7-day reminders for Ahpra registration, PI insurance and WWCC.
- An invoice block on a practitioner whose recorded registration has expired, been suspended or been cancelled.
Competitors rely on unaided manual register lookups (Competitor H) or do not surface Ahpra status at all. None of them provides the attestation record, the mismatch detection or the re-check clock, which is where the compliance value actually sits.
9. Compliance & Audit
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor E | Competitor F | Competitor K |
|---|---|---|---|---|---|---|---|
| Immutable Audit Trail (DB trigger) | PostgreSQL trigger prevents UPDATE/DELETE | No | No | No | Partial | Yes | Yes |
| Every Mutation Logged (POST/PUT/PATCH/DELETE) | Yes | Partial | Partial | Partial | Partial | Yes | Yes |
| User/IP/Timestamp in Audit | Yes | Partial | No | No | Partial | Yes | Yes |
| 7-Year Retention Enforcement (automated) | Celery policy | No | No | No | No | Partial | Partial |
| Soft Delete (no hard delete during retention) | Yes | No | No | No | No | Partial | Yes |
| Privacy Act APP Compliance (documented) | Full | Yes | Yes | Yes | Yes | Yes | Yes |
| Data Retention by Jurisdiction (all states) | All 8 AU jurisdictions | No | No | No | No | Partial | Partial |
| NDIS Practice Standards tracking | Compliance module | No | No | No | Yes | Yes | No |
| Regulation Update Tracking | Sources + updates | No | No | No | Partial | Partial | No |
| Traffic-Light Compliance Dashboard | Yes | No | No | No | Partial | Yes | No |
| Incident Reporting (NDIS-reportable) | Yes | No | No | No | Yes | Yes | No |
| Guided Mandatory Reporting (state-by-state thresholds + hotline + report log, triggered from an in-note safeguarding flag) | Yes | No | No | No | No | Partial | No |
| AI Privacy Disclosure Activation Gate (Privacy and Other Legislation Amendment Act 2024 - AI cannot be enabled until the disclosure is acknowledged) | Yes | No | No | No | No | No | No |
| Data Export (APP 12 compliance) | CSV/Excel | Yes | Yes | Yes | Partial | Yes | Yes |
| Data Breach Notification Workflow | Yes | No | No | No | No | Partial | Yes |
| Disclosure Register (third-party integrations) | Documented | Partial | Partial | Partial | Partial | Partial | Yes |
| Claim Integrity Engine (automated fraud/corruption detection) | Yes | No | No | No | No | No | No |
| Fraud Pattern Detection (DOUBLEBILLING, IMPOSSIBLESCHEDULE, PHANTOMSERVICE, ANOMALYSPIKE, COI_UNDECLARED) | Yes | No | No | No | No | No | No |
| Hash-Chained Tamper-Evident Flag Ledger (SHA-256) | Yes | No | No | No | No | No | No |
| Conflict-of-Interest Declarations | Yes | No | No | No | No | Partial | No |
| Practitioner 90-Day Billing Baselines | Yes | No | No | No | No | No | No |
| Claim-Flag Admin Review Workflow | Yes | No | No | No | No | No | No |
Key Compliance Finding
The immutable audit trail enforced at the PostgreSQL level via triggers (rather than application-level logging) is a critical differentiator. Application-level audit logs can be bypassed by direct database access, compromised admin accounts, or bugs in the application. MCF's trigger-based approach makes the audit log tamper-evident and blocks the application's own database role from altering, deleting or truncating it - a much stronger guarantee than application-level logging. Note the honest limit: a full PostgreSQL superuser can still disable any trigger, so this hardens the audit trail against the application and its bound role, not against an actor with superuser access to the host database (that is a host/OS access-control concern, and the reason production installs run the app as a non-superuser role).
Key Integrity Finding - Claim Integrity Engine (market exclusive)
Maree-CareFlow is the only platform in this comparison with a built-in Claim Integrity Engine - an automated fraud and corruption detection layer that screens billing activity for DOUBLEBILLING (the same service claimed twice), IMPOSSIBLESCHEDULE (overlapping or physically impossible appointments), PHANTOMSERVICE (claims with no supporting clinical record), ANOMALYSPIKE (billing that deviates from a practitioner's own 90-day baseline), and COI_UNDECLARED (undeclared conflicts of interest). Every flag is written to a SHA-256 hash-chained, tamper-evident ledger, supported by conflict-of-interest declarations and an admin review workflow. For registered NDIS providers facing the NDIS Quality and Safeguards Commission's fraud and integrity focus, this turns claim assurance from a periodic manual audit into a continuous, evidence-backed control. No competitor audited offers automated provider-side claim fraud detection.
10. Security Architecture
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor F | Competitor K |
|---|---|---|---|---|---|---|
| 2FA / MFA | TOTP (RFC 6238) | Yes | Yes | Yes | Yes | Yes |
| TOTP Secrets Encrypted at Rest | Fernet AES-256 | Unknown | Unknown | Unknown | Unknown | Unknown |
| JWT Signing | RS256 (asymmetric) | HS256 (assumed) | Unknown | Unknown | Unknown | Unknown |
| Password Hashing | bcrypt cost 12 | bcrypt | Yes | Yes | Yes | Yes |
| Account Lockout (two-tier: 5 attempts -> 15 min, 10 -> 1 hour) | Yes | Yes | Yes | Yes | Yes | Yes |
| Session Timeout (configurable) | 30 min default | Yes | Yes | Yes | Yes | Yes |
| Rate Limiting (Redis sliding window) | 100/min default, 5/min strict - requires Redis; see note | Partial | Partial | No | Yes | Partial |
| Tenant Isolation (app-layer; RLS-ready) | Query-scoped + isolation test suite | Unknown | Unknown | Unknown | Unknown | Unknown |
| TenantMiddleware (multi-tenant isolation) | JWT + app-layer scoping | SaaS single-tenant | SaaS | SaaS | SaaS | SaaS |
| PHI Field-Level Encryption (optional) | Fernet | No | No | No | Unknown | Partial |
| Security Headers (CSP, HSTS, X-Frame) | Full | Yes | Yes | Yes | Yes | Yes |
| TLS 1.2+ Enforced | Yes | Yes | Yes | Yes | Yes | Yes |
| SSO (SAML 2.0 / Azure AD / Okta) | Roadmap (Enterprise) - not built | No | No | No | Yes | Yes |
| Vulnerability Reporting Policy | SECURITY.md | Yes | Partial | Partial | Yes | Yes |
| Secret Detection (CI/CD pre-commit) | detect-secrets | Unknown | Unknown | Unknown | Unknown | Unknown |
| SAST Scanning (semgrep) | CI/CD | Unknown | Unknown | Unknown | Unknown | Unknown |
| Container Scanning (trivy) | CI/CD | Unknown | Unknown | Unknown | Unknown | Unknown |
| Dependency Audit (pip-audit + npm audit) | Blocking CI gate | Unknown | Unknown | Unknown | Unknown | Unknown |
| SBOM / Supply Chain | Exact-pinned deps, committed dist | Unknown | Unknown | Unknown | Unknown | Unknown |
Key Security Finding
MCF's use of RS256 asymmetric JWT (vs the common HS256 symmetric approach) means the secret used to sign tokens never leaves the server - any service can verify a token using the public key without being able to forge one. Tenant isolation is enforced at the application layer: every query is tenant/organisation-scoped in the service layer, verified by an automated two-organisation cross-tenant isolation test suite. Database Row-Level Security is provisioned in the codebase (enablerlssql in app/db/base.py) as a future defence-in-depth layer but is not yet activated.
11. AI & Automation Features
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor I | Competitor F | Competitor K |
|---|---|---|---|---|---|---|---|
| AI Clinical Note Drafting | Ollama/Claude | No | No | No | Partial - Beta | No | No |
| AI Report Generation (from transcripts) | Draft-only, approval required | No | No | No | No | No | No |
| Session Transcription (audio → text) | AssemblyAI + Whisper fallback | No | No | No | No | No | No |
| Local AI Processing (on-premise, no data egress) | Ollama primary | No | No | No | No | No | No |
| Cloud AI Fallback (bring-your-own key) | Anthropic Claude API | No | No | No | No | No | No |
| RAG / Knowledge Base (local embeddings) | pgvector + sentence-transformers | No | No | No | No | No | No |
| Automated NDIS Catalogue Sync | Roadmap (manual import today) | Manual trigger | Partial | Partial | Yes | Yes | No |
| Daily register-check work list emailed to administrators (never checked / overdue / expiring before the next check) | Daily Celery | No | No | No | No | No | No |
| Appointment Reminders (SMS/Email auto) | Celery beat | Yes | Yes | Yes | Yes | Yes | Yes |
| Smart Scheduling Suggestions | Travel-time optimised | No | No | No | No | No | No |
| AI Draft Safety Gate (approval required) | Never auto-saves | N/A | N/A | N/A | N/A | N/A | N/A |
| KPI Anomaly Detection | Target vs actual | No | No | Partial | No | Partial | No |
| Bank Feed Categorisation (Basiq AU) | Yes | No | No | No | No | No | No |
AI Architecture Philosophy
Maree-CareFlow takes a privacy-first AI approach fundamentally different from cloud-AI competitors:
┌─────────────────────────────────────────────────────────────────────┐
│ MCF AI Processing Pipeline │
│ │
│ Session Audio │
│ │ │
│ ▼ │
│ [AssemblyAI] ──(if key set)── Transcript │
│ [Whisper local] ──(fallback)── Transcript │
│ │ │
│ ▼ │
│ [Ollama LOCAL] ──(primary)── AI Draft │
│ [Claude API] ──(fallback)── AI Draft │
│ │ │
│ ▼ │
│ DRAFT ONLY - requires clinician │
│ approval before saving │
└─────────────────────────────────────────────────────────────────────┘
Key safety design: AI outputs are always marked as draft. The system never auto-saves AI-generated content to clinical records. The treating clinician must explicitly approve before any AI draft enters the medical record. This aligns with AHPRA position statements on AI-generated clinical documentation.
12. Integrations & Ecosystem
| Integration | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor E | Competitor F | Competitor I |
|---|---|---|---|---|---|---|---|---|
| Xero | OAuth2 | Yes | Yes | Yes | Yes | Partial | Yes | Yes |
| QuickBooks Online | OAuth2 | Yes | Partial | Partial | Partial | No | No | Partial |
| MYOB | OAuth2 sync (v1.2.36) | Yes | Yes | Yes | Yes | No | No | Yes |
| Stripe | Yes | Yes | Yes | Yes | Yes | No | No | Yes |
| Twilio SMS | BYO | Built-in | Built-in | Built-in | Built-in | Yes | Yes | Yes |
| Google Calendar | OAuth2 | Yes | Yes | Yes | Yes | No | No | Yes |
| Microsoft/Outlook | OAuth2 | Yes | Yes | Yes | Yes | No | No | Partial |
| NDIA PACE API | Preview/mock only (BPR CSV is the claiming path) | No | No | No | No | No | Yes | Yes |
| HICAPS / Medicare | PRODA (credential-gated) | Yes | Yes | Yes | Yes | No | No | Yes |
| FHIR R4 API (Patient/Practitioner/Appointment/DocumentReference) | Yes | No | No | No | No | No | No | No |
| SMART-on-FHIR App Launch (2.0, PKCE) | Yes | No | No | No | No | No | No | No |
| IHI Validation (HI Service) + My Health Record upload | Yes | No | No | No | No | No | No | No |
| HealthLink secure messaging / Argus | HL7 v2 + secure messaging | No | No | No | No | No | No | No |
| AssemblyAI | BYO key | No | No | No | No | No | No | No |
| Anthropic / Claude AI | BYO key | No | No | No | No | No | No | No |
| Ollama (local LLM) | Self-hosted | No | No | No | No | No | No | No |
| Basiq AU (open banking) | Yes | No | No | No | No | No | No | No |
| Jitsi Meet (telehealth) | Embedded | No | Semble | Coviu | No | No | No | Yes |
| VAPID Web Push | Yes | No | No | No | No | No | No | No |
| Zapier / Make / n8n | Outbound webhooks (v1.2.36) | Yes | No | Yes | No | No | Partial | No |
| Embedded REST API (commercial) | Enterprise | No | No | Partial | No | No | Yes | No |
Digital Health Interoperability Note
MCF ships a full digital health interoperability stack that no competitor in this comparison matches: a FHIR R4 API (Patient, Practitioner, Appointment, DocumentReference), SMART-on-FHIR App Launch 2.0 with PKCE so third-party clinical apps can launch securely against MCF data, IHI validation via the HI Service, My Health Record document upload, and HealthLink secure messaging. SMART-on-FHIR is the same app-launch standard adopted by major hospital EMRs, so MCF can act as both a SMART host and a connected clinical record - a capability otherwise found only in large hospital systems, not in NDIS / allied health practice management.
Integration Strategy Note
MCF uses a bring-your-own-account (BYOA) model for all third-party integrations. Practices supply their own Twilio, Stripe, Xero, AssemblyAI, and AI API credentials. This means:
- No per-SMS or per-transaction markup from MCF
- Data contracts are directly between the practice and the third party
- The practice retains full control over which third parties receive their data
- MCF discloses all third-party data flows in its Privacy Policy integration disclosure register
Self-Service Integration Management (unique to MCF)
The usual objection to a BYOA model is that it is "too technical" - competitors that bundle SMS/payments do so partly because wiring your own keys normally means editing server config. MCF removes that objection entirely with a self-service integration management layer in the admin portal (super_admin / admin), which no competitor in this comparison offers:
| Capability | What it does | Closest competitor equivalent |
|---|---|---|
| In-app credential config | Paste your own Twilio / Stripe / Basiq / AssemblyAI / Anthropic / Ollama keys in the portal - no server, SSH or developer access | None - rivals either bundle (with markup) or require support tickets / server edits |
| Per-organisation scoping | Each practice (tenant) uses its OWN provider accounts; secrets encrypted at rest, write-only (never shown again) | None at this granularity |
| Live connection indicators | Each integration shows Connected / Not connected / Not configured from a real, bounded health check | None - rivals show "saved", not "verified live" |
| Account balance display | Live Stripe and Twilio account balance shown in-portal | None |
| Per-integration usage budgets | Set a monthly cap per service with overspend protection; advisory or hard-enforced (clinical reminders are never blocked) | None - this is a category-unique cost-control feature |
| Self-service key rotation | Update or switch providers yourself, any time, with server-env fallback so nothing breaks | None |
Why it matters competitively: bundled-SMS rivals (Competitor A, Competitor B, Competitor C, Competitor D) monetise messaging with per-message markup and give the practice no spend ceiling. MCF gives the practice wholesale provider pricing plus a usage meter and a hard monthly budget - so a practice both pays less per SMS/payment and cannot be surprised by a bill. For a non-technical operator the experience is the same "click and go" as a bundled product, but without the markup or the lock-in.
13. Telehealth & Communications
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor I |
|---|---|---|---|---|---|---|
| Telehealth Video | Jitsi (embedded) | No - Native (links to Zoom) | Yes | Coviu | No | Yes |
| No Third-Party Account for Video | Jitsi self-hosted | No - Requires Zoom | Partial | Partial - Coviu | No | Partial |
| Session Transcription | Real-time AI | No | No | No | No | No |
| In-App Messaging | Yes | Yes | Yes | Yes | Yes | Yes |
| Client Portal Messaging | Yes | Yes | Yes | Yes | Yes | Yes |
| SMS Reminders | Twilio BYO | Yes | Yes | Yes | Yes | Yes |
| Email Reminders | Yes | Yes | Yes | Yes | Yes | Yes |
| Bulk Communications | Yes | Yes | Partial | Yes | Partial | Partial |
| Push Notifications (VAPID) | Yes | No | No | No | No | No |
| Recall Automation | Celery | Yes | Yes | Yes | Yes | Partial |
14. Reporting & Analytics
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor F | Competitor H |
|---|---|---|---|---|---|---|
| KPI Dashboard (targets + snapshots) | Yes | Partial | No | Partial | Yes | Yes |
| Custom Report Templates | Yes | Yes | Partial | Yes | Yes | Yes |
| PDF Report Generation | ReportLab | Yes | Partial | Yes | Yes | Yes |
| Word (.docx) Report Export | python-docx | No | No | No | No | Yes |
| Excel (.xlsx) Export | OpenPyXL | Yes | Partial | Yes | Yes | Yes |
| Funding Request Reports | Yes | No | No | No | Yes | Yes |
| Cancellation Analytics (revenue impact) | Yes | Partial | No | Partial | Yes | Partial |
| Outcome Measures Charts (radar/spider) | Recharts | No | No | No | Partial | Yes |
| Financial Reporting (revenue, payroll) | Yes | Yes | Partial | Yes | Yes | Partial |
| Compliance Reporting | Traffic-light dashboard | No | No | No | Yes | Yes |
| Audit Trail Reports | Queryable | No | No | No | Yes | Partial |
| AI-Assisted Report Drafting | Yes | No | No | No | No | No |
| Approval Workflow for Reports | Yes | No | No | No | Partial | Yes |
15. Multi-Tenancy & Organisation Structure
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor F | Competitor E |
|---|---|---|---|---|---|---|
| True Multi-Tenancy (app-layer isolation) | Tenant > Org > Dept | SaaS instance per org | SaaS | SaaS | SaaS | SaaS |
| Organisation Hierarchy | Tenant → Org → Dept | Flat | Flat | Flat | Org → Team | Org |
| Multiple Locations | (3 on Practice tier) | Yes | Yes | Yes | Yes | Yes |
| Department Management | Yes | No | No | No | Yes | No |
| 9 User Roles | Yes | 4-5 | 4 | 4 | 6-7 | 5-6 |
| External Case Manager Role | Yes | No | No | No | Yes | No |
| Per-Tenant Celery Queue | Redis slot isolation | N/A | N/A | N/A | N/A | N/A |
| White-Label (custom domain) | Enterprise | No | No | No | Yes | No |
| SSO / SAML 2.0 | Roadmap - not built | No | No | No | Yes | No |
| Compliance by Jurisdiction (state-level) | All 8 AU | No | No | No | Partial | No |
| Module Licensing / Plan Composition (per-org opt-in modules) | 4 tiers / 11 primary types / 17 add-on modules | No | No | No | Partial | No |
| Per-Org Module Entitlement (HTTP 402 gating) | Yes | No | No | No | No | No |
| Operator-Set Add-On Pricing | Yes | No | No | No | No | No |
Commercial Packaging / Module Licensing (v1.3.29, category-unique)
MCF ships a self-service plan-composition capability that no competitor in this comparison offers. The operator composes each organisation's plan from:
- 4 subscription tiers: free, practitioner, practice, enterprise.
- 11 primary practice types (each shipping with its included basics).
- 17 sellable service modules offered as opt-in paid add-ons, priced per organisation by the operator.
Module access is enforced at the API with per-org module entitlement and HTTP 402 (Payment Required) gating - a practice only pays for, and only sees, the modules it has licensed. An admin "Plan & Add-ons" tab exposes the whole composition in-app. Competitors sell fixed, monolithic tiers; MCF lets the operator build a bespoke package per customer without code changes, which is unique among the platforms audited.
16. Deployment & Data Sovereignty
This is a critical axis for Australian healthcare providers operating under the Privacy Act 1988 and NDIS standards.
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor D | Competitor E | Competitor F | Competitor K |
|---|---|---|---|---|---|---|---|---|
| Self-Hosted Option | Full source | No | No | No | No | No | No | No |
| Docker Compose Deploy | Yes | No | No | No | No | No | No | No |
| Bare-Metal Ubuntu Deploy | Systemd | No | No | No | No | No | No | No |
| cPanel Shared Hosting | Installer wizard | No | No | No | No | No | No | No |
| Managed SaaS Option | Optional | Only option | Only option | Only option | Only option | Only option | Only option | Only option |
| Australian Data Residency | Choice (self-host) | AWS ap-southeast-2 | AWS ap-southeast-2 | AWS ap-southeast-2 | Yes | AWS ap-southeast-2 | Yes | AWS ap-southeast-2 |
| Data Residency Written Commitment | Enterprise | Partial - In ToS | Partial - In ToS | Partial - In ToS | Partial | Partial | Enterprise | Yes |
| Own Your Own Data (export all, delete all) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| No Vendor Lock-In | Self-host = full control | No - SaaS lock-in | No | No | No | No | No | No |
| Air-Gap / Offline Mode | Self-hosted w/ Ollama | No | No | No | No | No | No | No |
| Database Server | PostgreSQL 16 | Unknown (AWS RDS likely) | Unknown | Unknown | Unknown | Unknown | third-party CRM platform | Unknown |
| Object Storage | MinIO (self-hosted) | AWS S3 | AWS S3 | AWS S3 | AWS S3 | AWS S3 | third-party CRM platform | AWS S3 |
| Data Portability (full export) | CSV/Excel/JSON | CSV | Yes | Yes | Yes | Yes | Yes | Yes |
| Client Can Run On Own Infrastructure | Yes | No | No | No | No | No | No | No |
Data Sovereignty Strategic Analysis
┌─────────────────────────────────────────────────────────────────────────┐
│ DATA SOVEREIGNTY SPECTRUM │
│ │
│ FULL CONTROL ◄──────────────────────────────────► VENDOR-CONTROLLED │
│ │
│ MCF Self-Hosted │
│ ├─ Your server │
│ ├─ Your database │
│ ├─ Your AI (Ollama local) │
│ └─ Zero data egress (if fully local) │
│ │ │
│ MCF Managed Hosting │
│ ├─ AU data centre │
│ └─ Written residency commitment │
│ │ │
│ Competitor A / Competitor B / Competitor C │
│ Competitor E / Competitor D / Competitor I │
│ ├─ AWS ap-southeast-2 (AU) │
│ ├─ No self-host option │
│ └─ Residency via AWS SLA │
│ │ │
│ Competitor F │
│ ├─ third-party CRM platform │
│ └─ US servers │
│ (check ToS) │
└─────────────────────────────────────────────────────────────────────────┘
17. Pricing Comparison (AUD)
All prices as of 2026. MCF prices are from pricing.html and internal config. Competitor prices from public pricing pages.
MCF Commercial Packaging (4 tiers / 11 primary types / 17 add-on modules)
Unlike the fixed tiers sold by every competitor here, MCF's pricing is composable. The operator selects a subscription tier, a primary practice type with its included basics, and then any of the paid add-on modules the customer needs:
| Dimension | What it covers |
|---|---|
| 4 subscription tiers | free / practitioner / practice / enterprise |
| 11 primary practice types | each ships with its own included basics for that discipline / sector |
| 17 sellable service modules | opt-in paid add-ons (e.g. AI, advanced compliance, API/FHIR, payroll), priced per organisation by the operator |
| Per-org entitlement | enforced with HTTP 402 gating; surfaced in the admin "Plan & Add-ons" tab |
This means a practice pays only for the modules it licenses, and the operator can build a bespoke package per customer - a self-service plan-composition model no competitor in this comparison offers.
Entry / Solo Practitioner Tier
| Platform | Solo Entry Price | Notes |
|---|---|---|
| Maree-CareFlow | $0/month (Free) → $79/seat/month | Free: 10 clients, 1 practitioner. Full NDIS at $79 |
| Competitor B | $0/month | Free model; charges transaction fees on payments |
| Competitor A | $45/month (1 practitioner, up to 200 clients) | No free tier; credit card required |
| Competitor C | $49/month (1 practitioner) | 14-day trial |
| Competitor D | $63/month (1 practitioner) | Tiered by practitioners |
| Competitor E | ~$80/month (1 support worker) | Complex per-user pricing |
| Competitor I | $59/month (1 practitioner) | NDIS included |
| Competitor H | ~$89/month | Per-user pricing |
| Competitor F | Custom (est. $300+/month) | Enterprise entry point |
| Competitor G | ~$99/month base | NDIS-focused |
| Competitor J | ~$99/month | Aged care + NDIS |
| Competitor L | ~$79/month | |
| Competitor K | $99/month (solo) | GP/clinical focus |
Practice / Small Team Tier (5 practitioners)
| Platform | 5-Practitioner Price | Per-Seat Cost | Includes |
|---|---|---|---|
| Maree-CareFlow | $229/month base (5 seats included) | $46/seat | All NDIS, Medicare, DVA, TAC, MAIB, AI, travel billing |
| Competitor A | $125/month (5 practitioners) | $25/seat | No NDIS PACE, no AI, no travel billing |
| Competitor B | $0 base + fees | Variable | Transaction fees apply; NDIS via Add-On |
| Competitor C | $109/month (5 practitioners) | $22/seat | No NDIS PACE, no AI |
| Competitor D | ~$149/month (5 practitioners) | $30/seat | No NDIS PACE |
| Competitor E | ~$400/month (5 users) | $80/seat | NDIS-focused, no clinical docs |
| Competitor I | ~$199/month (5 users) | $40/seat | NDIS included |
| Competitor F | Custom (~$1,500/month) | $300/seat est. | Full NDIS |
| Competitor H | ~$445/month (5 users) | $89/seat | Clinical + NDIS |
Feature-Adjusted Value Analysis (5 practitioners)
When adjusting for equivalent feature coverage, the MCF Practice tier at $229/month replaces:
| Add-on elsewhere | Approximate cost |
|---|---|
| NDIS PACE integration (Competitor A: not available; Competitor I: included) | $0-$149/month |
| AI report drafting (none offer this; custom dev cost) | $200-$1,000/month |
| Ahpra register-check workflow and re-check clock | $0 (unaided manual process elsewhere) |
| Travel billing with postcode-remoteness automation | Not available anywhere else |
| AssemblyAI transcription | ~$29/month (their direct pricing) |
| Basiq open banking | ~$99/month (Basiq direct) |
| External CM portal (not available elsewhere at this price) | Not available |
| Equivalent cost from competitors | $500-$1,500/month |
MCF represents 60-85% cost savings versus assembling equivalent functionality from multiple platforms.
Add-On Pricing Comparison
| Add-on | MCF | Competitor A | Competitor C | Competitor B |
|---|---|---|---|---|
| SMS Reminders | $29/month BYO Twilio | Included (markup) | Included (markup) | Included (markup) |
| Telehealth | $45/month | Not native | $29/month (Coviu) | Included |
| AI Features | $45/month (50 extra reports) | Not available | Not available | Not available |
| Advanced Analytics | $59/month | Not available | $29/month | Not available |
| API Access | $39/month (included on Practice with two other add-ons) | Not available | Not available | Not available |
| Compliance Pack | $149/year | Not available | Not available | Not available |
| Priority Support | $75/month | Included in price | Included | Included |
18. Mobile & Accessibility
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor E | Competitor I |
|---|---|---|---|---|---|---|
| Progressive Web App (PWA) | Service worker | No | No | No | Native app | Yes |
| Offline Mode | PWA cache | No | No | No | Partial | No |
| Native Mobile App (iOS/Android) | No - PWA alternative | No | No | No | Yes | Yes |
| Mobile-Responsive Design | Yes | Yes | Yes | Yes | Yes | Yes |
| Bottom Tab Bar (mobile navigation) | Yes | No | Partial | No | Yes | Yes |
| Push Notifications (mobile web) | VAPID | No | No | No | Yes | No |
| WCAG 2.1 Accessibility | jsx-a11y enforced | Yes | Partial | Partial | Partial | Partial |
| Keyboard Navigation | Radix UI primitives | Yes | Partial | Partial | Partial | Partial |
Mobile Strategy Note
MCF's PWA (Progressive Web App) approach trades a native app listing in app stores for zero app-store dependency and guaranteed sovereign delivery - no Apple/Google approval process, no 30% platform fee on in-app purchases, and no risk of de-listing. The service worker enables offline-first operation for support workers in the field with unreliable connectivity.
19. Support & Onboarding
| Feature | MCF | Competitor A | Competitor B | Competitor C | Competitor F | Competitor I |
|---|---|---|---|---|---|---|
| Free Trial | None - Free-forever tier (10 clients) instead; NO trial mechanism exists in the product (task #153) | 30 days | (Free forever tier) | 14 days | No - Demo only | 14 days |
| Email Support SLA | 72h Free / 24h Practitioner / 12h Practice / 4h Enterprise | 24h | 24h | 24h | 4h Enterprise | 24h |
| Live Chat Support | Paid tiers | Yes | Yes | Yes | Yes | Yes |
| Dedicated Account Manager | Enterprise | No | No | No | Yes | No |
| Onboarding & Training | AUD $299 | Yes | Yes | Yes | Yes | Yes |
| Data Migration Service | AUD $449 | Yes | Yes | Yes | Yes | Yes |
| Comprehensive Docs | 16 docs (including NDIS, compliance, billing guides) | Yes | Yes | Yes | Yes | Yes |
| 99.9% Uptime SLA | Enterprise | No | No | No | Yes | No |
| Quarterly Compliance Reviews | Enterprise | No | No | No | Partial | No |
| Community Forum | No - Roadmap | Yes | Yes | Yes | No | Partial |
20. Tech Stack & Architecture
Maree-CareFlow (Full Detail)
┌─────────────────────────────────────────────────────────────────────┐
│ MAREE-CAREFLOW ARCHITECTURE │
├─────────────────────────────────────────────────────────────────────┤
│ FRONTEND │
│ React 19 + TypeScript 5.5 + Vite 6.4 │
│ TailwindCSS 4.3 + Radix UI (Accessibility-first primitives) │
│ TanStack Query 5.56 (server state) + Zustand 4.5 (client state) │
│ React Hook Form 7.53 + Zod 3.23 (validation) │
│ Recharts 2.12 (visualisation) + Lucide React (icons) │
│ Day.js 1.11 (dates) + Axios 1.17 (HTTP) │
│ PWA: Service Worker + VAPID Web Push │
├─────────────────────────────────────────────────────────────────────┤
│ BACKEND │
│ FastAPI 0.115 + Python 3.12 + Uvicorn 0.32 │
│ SQLAlchemy 2.0 (async) + Alembic 1.14 (migrations) │
│ AsyncPG 0.30 (PostgreSQL driver) + Redis 5.2 (cache/queue) │
│ Celery 5.4 + Celery-RedBeat 2.2 (task scheduling) │
│ Pydantic 2.10 (validation/serialisation) │
├─────────────────────────────────────────────────────────────────────┤
│ AI / ML │
│ Ollama 0.5 (local primary LLM inference) │
│ Claude API >=0.28 (cloud fallback, BYO key) │
│ pgvector (vector search in PostgreSQL) │
│ Sentence-Transformers 3.3 (embeddings) │
│ LangChain 0.3 (agent orchestration) │
│ AssemblyAI / OpenAI Whisper (transcription) │
├─────────────────────────────────────────────────────────────────────┤
│ DATA │
│ PostgreSQL 16 (primary DB + pgvector) │
│ Redis 7 (cache, rate limiting, Celery broker) │
│ MinIO (self-hosted S3-compatible object storage) │
│ Pandas 2.2 + NumPy 2.1 (data processing) │
├─────────────────────────────────────────────────────────────────────┤
│ SECURITY │
│ RS256 JWT (asymmetric) + TOTP 2FA (FIDO-compatible) │
│ bcrypt cost 12 + Fernet AES-256 (field-level encryption) │
│ App-layer tenant isolation (DB RLS provisioned) │
│ Slowapi (Redis-backed rate limiting) + audit trail (trigger) │
│ detect-secrets + semgrep + trivy (CI/CD pipeline) │
├─────────────────────────────────────────────────────────────────────┤
│ OBSERVABILITY │
│ Structlog 24.4 (structured logging) + Sentry 2.19 (errors) │
│ Prometheus Instrumentator 7.0 (metrics) │
│ X-Request-ID tracing across all requests │
└─────────────────────────────────────────────────────────────────────┘
Competitor Tech Stack (Public / Estimated)
| Platform | Frontend | Backend | Database | Cloud | Notes |
|---|---|---|---|---|---|
| Competitor A | Rails-era SPA (React suspected) | Ruby on Rails | PostgreSQL (est.) | AWS ap-southeast-2 | Founded 2012, legacy stack |
| Competitor B | React | Unknown | Unknown | AWS ap-southeast-2 | Modern SPA |
| Competitor C | React / Angular | .NET or Node.js | SQL Server (est.) | AWS | Australian-owned |
| Competitor D | React | PHP/Laravel (est.) | MySQL | AWS | Acquired Competitor A |
| Competitor E | React Native (mobile) | Node.js / Ruby | PostgreSQL | AWS ap-southeast-2 | NDIS-focused |
| Competitor F | proprietary UI framework | proprietary platform language | third-party CRM platform database | third-party CRM platform cloud | third-party CRM platform; US + AU hosting |
| Competitor I | React | Node.js (est.) | PostgreSQL (est.) | AWS | Modern stack |
| Competitor K | React | .NET | SQL Server (est.) | AWS ap-southeast-2 | ASX-listed; GP-focused |
| Competitor H | Angular | .NET | SQL Server | Azure | Microsoft ecosystem |
Architecture Differentiation Summary
MCF Architecture vs SaaS Competitors:
┌──────────────────────────────────────────────────────┐
│ DIFFERENTIATION: ARCHITECTURE │
│ │
│ MCF │ All Competitors │
│ ───────────────── │ ───────────────── │
│ RS256 JWT (asymmetric) │ HS256 (most) │
│ App-layer + test suite │ App-level isolation │
│ pgvector (embedded AI) │ No AI vector search │
│ Self-hostable │ SaaS only │
│ Local LLM (Ollama) │ No LLM │
│ Immutable audit trigger │ App-level audit logs │
│ Exact-pinned deps │ Range-pinned deps │
│ Pre-built dist in git │ npm in production │
│ SBOM verifiable │ No SBOM │
└──────────────────────────────────────────────────────┘
21. Strengths & Weaknesses Matrix
Maree-CareFlow
| STRENGTHS | WEAKNESSES / GAPS |
|---|---|
| Deepest NDIS feature set of any platform | No native mobile app (iOS/Android) |
| Portal-ready NDIS BPR files + remoteness travel billing + SDA + external CM portal in one product | No community forum |
| Claim Integrity Engine - automated billing fraud/corruption detection (DOUBLEBILLING, IMPOSSIBLESCHEDULE, PHANTOMSERVICE, ANOMALYSPIKE, COI_UNDECLARED) with SHA-256 hash-chained flag ledger (market exclusive) | |
| NDIS Plan Management subsystem - org acts as a registered plan manager: per-purpose budget ledger, inbound provider invoices with hard drawdown guard, disbursement + trust-accounting ledger, NDIA reimbursement claims + CSV, PM fee items 14033/14034 (normally a separate product category) | |
| Guided client onboarding - lifecycle stage machine + durable digital intake (persisted submissions/signature, review -> convert) + per-client checklist + org first-run setup wizard | |
| Guided mandatory reporting (state hotlines + report log, in-note trigger) + AI activation gate (Privacy Act 2024 disclosure) | |
| Equipment & Assistive Technology management (AT assessment, register, billing, acceptance) | |
| STP Phase 2 pay-event engine (PAYG, super, PAYEVNT.0004) + ABA/BECS bank-file generation built in | |
| SMART-on-FHIR App Launch 2.0 (PKCE) + FHIR R4 API + IHI/MHR + HealthLink secure messaging | |
| Medicare Better Access (mental health) + CDM chronic-disease billing | |
| Module licensing / Plan & Add-ons: 4 tiers, 11 primary practice types, 17 opt-in paid modules, per-org entitlement (HTTP 402 gating) - self-service plan composition (category-unique) | |
| Participant self-service portal (schedule, funding, documents, self-booking requests) | |
| Local-first AI (Ollama) - no data egress | SCHADS payroll not fully automated (penalty-rate interpretation) |
| Immutable PostgreSQL audit trail | |
| Self-hosted option - true data sovereignty | |
| TAC / MAIB / iCare / WorkCover billing support (13 schemes - 12 in MOTORACCIDENTSCHEMES + TAC VIC) | |
| MYOB + Xero + QuickBooks accounting sync (MYOB added v1.2.36) | |
| Outbound webhooks (Zapier/Make/n8n compatible) + FHIR R4 API (v1.2.36) | |
| IHI validation + My Health Record upload (NASH cert required for production) | |
| RS256 + app-layer tenant isolation + PHI field encryption | |
| 9 user roles including external case manager | |
| Free tier available | No built-in community/forum for peer support |
| Bring-your-own-integrations (no markup) | Advanced analytics $59/month add-on |
| Self-service integration management: in-app config + live status + Stripe/Twilio balances + per-integration monthly usage budgets (category-unique cost control) | |
| PWA with offline mode + VAPID push | Telehealth via Jitsi (no custom branding) |
| bcrypt cost 12 + TOTP AES-256 encrypted | |
| CI/CD: SAST, container scan, secret detection | |
| Exact-pinned deps + committed dist (sovereign build) | |
| Australian-built and owned |
Competitor A
| STRENGTHS | WEAKNESSES |
|---|---|
| Established brand (2012), large user base | No NDIS PACE integration |
| Simple, clean UI | No AI features |
| Wide discipline coverage | No travel billing |
| MYOB integration | No SDA module |
| Strong community and documentation | Limited NDIS-specific fields |
| Zapier integration | No audit trail (meaningful) |
| 30-day free trial | Acquired by Competitor D - strategy uncertainty |
| No self-hosting |
Competitor B
| STRENGTHS | WEAKNESSES |
|---|---|
| Free forever tier | Revenue from payment transaction fees (hidden cost) |
| Broad allied health discipline support | NDIS features basic |
| Telehealth included | No NDIS PACE |
| Good UI/UX | No AI features |
| Australian-built | No self-hosting |
| No travel billing | |
| No external CM portal |
Competitor C
| STRENGTHS | WEAKNESSES |
|---|---|
| Excellent scheduling UX | No NDIS PACE |
| Strong telehealth (Coviu) | No AI features |
| Good client portal | No travel billing |
| Zapier integration | No TAC/MAIB/WorkCover |
| Reasonable pricing | No self-hosting |
| Limited NDIS-specific fields |
Competitor E
| STRENGTHS | WEAKNESSES |
|---|---|
| Strong NDIS rostering | No clinical documentation |
| Native mobile app | No Medicare/HICAPS |
| SCHADS Award compliance | No AI features |
| NDIS cancellation analytics | No self-hosting |
| GPS tracking for support workers | No external CM portal |
| Limited reporting |
Competitor F
| STRENGTHS | WEAKNESSES |
|---|---|
| Deep NDIS + disability services features | Very expensive (third-party CRM platform pricing) |
| Enterprise-grade | third-party CRM platform dependency |
| External CM portal | Complex to implement and configure |
| NDIS PACE integration | US-based infrastructure (third-party CRM platform) |
| Strong reporting | No local AI |
| SSO / SAML | No self-hosting |
| No allied health clinical features | |
| Not suitable for small/medium practices |
Competitor I
| STRENGTHS | WEAKNESSES |
|---|---|
| Modern stack | Newer platform (smaller track record) |
| NDIS + allied health combination | No Ahpra register-check workflow |
| NDIS PACE support | No remoteness-based travel billing |
| Client portal | No local AI |
| Reasonable pricing | No self-hosting |
| No audit trail |
Competitor M
| STRENGTHS | WEAKNESSES |
|---|---|
| NDIS + Aged Care specialist (rostering, care, billing, compliance in one) | Native support-worker app "Coming Soon" (not yet released) |
| Strong rostering for continuous care (auto-matching, sleepovers, overnight ratios, shift bidding/swap) | Light on allied-health clinical documentation |
| NDIS plan management across self/plan/NDIA-managed funding + automatic claim generation | No local/BYO AI |
| ISO 27001 certified; AWS-hosted | Cloud-only - no self-hosting / data-sovereignty option |
| Xero + MYOB accounting integration | No PACE direct-claim / remoteness travel automation / immutable audit trail evidenced |
| Pricing not public |
22. Ideal Customer Profile (ICP) by Platform
| Platform | Best Fit For | Not Suitable For |
|---|---|---|
| Maree-CareFlow | Any of the 11 primary practice types - NDIS providers, NDIS plan managers, support coordinators, SDA/SIL providers, allied health (physio/OT/speech), aged & home care providers, and multidisciplinary orgs - needing a full billing stack (NDIS + Medicare + DVA + TAC/MAIB), data sovereignty, AI drafting, external CM portal, or multi-funder clients. Enterprise orgs needing self-hosted compliance. | Practices needing a native mobile app as primary interface |
| Competitor A | General allied health (physio, OT, psychology) needing basic scheduling + notes without complex NDIS billing | NDIS providers needing PACE, plan managers, SDA operators |
| Competitor B | Solo practitioners or small practices cost-sensitive and wanting a free tier with telehealth included | High-volume NDIS providers, practices needing advanced audit |
| Competitor C | Psychologists, counsellors, coaches needing strong scheduling + telehealth | NDIS providers needing PACE, travel billing, or complex funder support |
| Competitor E | NDIS support coordination and rostering-heavy organisations; community care agencies with field staff | Allied health clinicians needing clinical documentation or Medicare billing |
| Competitor F | Large NDIS providers (20+ staff), registered NDIS providers needing enterprise audit and reporting | Small-medium practices (pricing prohibitive); allied health needing clinical tools |
| Competitor G | NDIS plan managers and support coordinators | Allied health; GP; practices needing clinical documentation |
| Competitor I | Growing NDIS + allied health hybrid practices; modern UI preference | Practices needing mature track record, Ahpra credential workflow, or self-hosting |
| Competitor H | Occupational therapy, workers' compensation, rehabilitation - case management focus | General NDIS, GP, psychology |
| Competitor K | GP clinics and primary care; My Health Record integration priority | NDIS providers; allied health without Medicare bulk-billing focus |
| Competitor M | NDIS + aged-care providers running continuous/SIL/rostered care who want rostering, plan management, billing and compliance in one cloud system | Allied-health clinicians needing deep clinical notes/Medicare; orgs requiring self-hosting/data sovereignty or AI drafting |
23. Strategic Gaps & Opportunities
Based on this forensic analysis, the following strategic gaps and opportunities are identified for Maree-CareFlow:
23.1 Gaps to Close (High Priority)
| Gap | Competitor Leading | MCF Priority |
|---|---|---|
| Native iOS/Android App | Competitor E, Competitor I | HIGH - Field support workers need offline-capable native app for GPS logging, shift confirmation, client check-ins |
| MYOB Integration | Competitor A, Competitor C, Competitor B, Competitor D | CLOSED in v1.2.36 - MYOB OAuth2 sync built (production use requires MYOB app keys) |
| Zapier / Make Webhooks | Competitor A, Competitor C | CLOSED in v1.2.36 - Outbound webhooks built (Zapier/Make/n8n compatible) |
| FHIR R4 Support | Competitor K | CLOSED in v1.2.36 - FHIR R4 API built |
| Community Forum | Competitor A, Competitor B, Competitor C | MEDIUM - Peer support reduces support ticket volume; builds brand community |
| SCHADS Award Payroll (automated calculation) | Competitor E, Competitor F | MEDIUM - Full rostering value requires automated award interpretation |
| My Health Record Upload | Competitor K | CLOSED in v1.2.36 - IHI validation + MHR upload built (NASH certificate required for production) |
23.2 Unique Advantages to Amplify (Marketing Priority)
| Advantage | Why It Matters | Competitor Status |
|---|---|---|
| NDIS BPR bulk claim files (direct PACE API not yet live) | Portal-ready bulk claims without a plan-manager intermediary | Competitor F (expensive) and Competitor I (limited) offer direct PACE API claiming; MCF does not yet |
| Remoteness Travel Billing Automation | Saves 30-60 min/week in manual remoteness classification | No competitor offers this |
| Immutable PostgreSQL Audit Trail | NDIS audit-proof; critical for registered NDIS providers | Only Competitor F and Competitor K approximate this |
| Local AI (Ollama) | PHI never leaves the practice's server; no AI subscription cost | No competitor offers this |
| Ahpra register-check workflow + expiry alerts | Proactive visibility of lapsing practitioner registrations before they affect billing, with an attestation record an auditor accepts | Only Competitor H offers an unaided manual register lookup |
| TAC/MAIB/iCare/WorkCover Billing | Unlocks motor accident and workers' comp client base | No competitor offers this |
| External Case Manager Portal | Enables external referrer relationships without full account | Only Competitor F at enterprise pricing |
| Self-Hosting Option | Data sovereignty; no vendor lock-in; offline capable | No competitor offers this |
| Bring-Your-Own-AI | Practices control AI costs; no MCF markup | No competitor offers this |
| Bank Feed via Basiq AU | Open banking assisted reconciliation (suggested matches for confirmation) for plan management | No competitor offers this |
| Claim Integrity Engine | Automated provider-side fraud/corruption detection with SHA-256 hash-chained flag ledger; continuous claim assurance for the NDIS Commission's integrity focus | No competitor offers this |
| NDIS Plan Management subsystem | Run a registered plan-management business inside the same platform: per-purpose budget ledger, inbound provider invoices with a hard drawdown guard, disbursement, trust-accounting ledger, NDIA reimbursement claiming and PM fee items - normally a separate product | Only Competitor J (a plan-management specialist) and Competitor F (partial) approximate this |
| Guided client onboarding | Lifecycle stage machine + durable digital intake + per-client checklist + org first-run setup wizard - a structured prospect-to-active pipeline | Most competitors offer only a flat client record + a static intake form |
| STP Phase 2 Payroll + ABA Bank Files | Run payroll and produce the bank payment file in the same system that raises the claim | No competitor offers this |
| SMART-on-FHIR App Launch 2.0 | Host third-party clinical apps securely; hospital-grade interoperability in a practice platform | No competitor offers this |
| Module Licensing / Plan & Add-ons | Operator composes a bespoke package per customer (4 tiers, 11 primary types, 17 add-on modules, HTTP 402 entitlement gating) | No competitor offers this |
| Equipment & Assistive Technology | AT assessment, register, billing and acceptance in-platform for AT-heavy NDIS work | Only Competitor F/Competitor E partially approximate this |
| Participant Self-Service Portal | Participants and families self-manage schedule, funding view, documents and self-booking requests | Most competitors offer only a basic client portal |
23.3 Emerging Market Opportunities
| Opportunity | Market Context | MCF Position |
|---|---|---|
| PACE API Expansion | NDIA rolling out PACE to all registered providers by 2026-27 | BPR path built today; a live, certified PACE API client is a roadmap item |
| NDIS Practice Standard Audits | All registered NDIS providers require annual compliance audit from 2026 | Compliance module + immutable audit trail are directly audit-submission-ready |
| Telehealth Permanency | Post-COVID telehealth funding made permanent for many MBS items | Jitsi module + Medicare billing combined |
| AI in Healthcare Regulation | AHPRA and TGA developing AI guidance for clinical tools | MCF's draft-only, clinician-approval model is the gold standard |
| Aged Care Reform (Support at Home) | New aged care funding model from July 2025 | Built in v1.2.36 - ACAT, Home Care Package (HCP), and Support at Home (SAH) support |
| SCHADS Award Compliance | Fair Work focus on home care worker underpayment | Partial - rostering exports payroll but doesn't calculate penalty rates |
| Cyber Security Framework | Australian Government Essential Eight; healthcare sector targeted | MCF security posture (MFA, bcrypt 12, audit trail, app-layer tenant isolation) strongly aligned |
| Integrated fleet management | Mobile allied-health/NDIS workforces run shared pool vehicles (often wheelchair-modified) on whiteboards and spreadsheets; no practice-management competitor (Competitor E, Competitor F, Competitor I, Competitor B) ships fleet; dedicated fleet tools (Fleetio, AUSFLEET) cannot link a vehicle to the visit, the participant, billed travel or the driver's credential | SHIPPED v1.4.1 as the F6-FLEET add-on (docs/CONFIDENTIAL/FLEETMANAGEMENTSPEC.md, ROADMAP 3.7; Phase-A accepted on the real stack) - bookings/scheduling between staff, mileage, service intervals, maintenance/defects, running costs, depreciation, replacement planning; AUD $89/mo add-on, catalogued + opt-in |
23.4 Data Migration & Import (competitor-switching wedge)
State (Phases 1 and 2 shipped): MCF has always had a strong data export story (org-wide CSV export, full JSON backup, client subject-access-request export, Xero/MYOB payroll CSVs). It now also ships a self-service, staging-first data importer with a guided wizard (default-on for every organisation) - a genuine market first: every one of the 13 competitors offers only a manual migration service, no self-service importer. It brings ten entity types across from any competitor or a spreadsheet via CSV / Excel / JSON / ZIP: participants, staff, sites, contacts, NDIS plans, funding pools, goals, appointments, clinical / progress notes and billing / invoice history - with per-cell validation, de-duplication against live data, a reconciliation report, create / skip / merge resolution, authority-to-transfer sign-off, commit, and one-click rollback. The customer can tick exactly which aspects to import (leave out any risky or unneeded aspect, e.g. historical invoicing). The prior manual "Data Migration Service" (AUD $449, Section 19; SOPCUSTOMERONBOARDING.md Phase C) is now backed by product, not just labour. Document / file attachments and native per-competitor API adapters are the next phases.
The opportunity. With ~35% of small practices still on paper/spreadsheets (MARKET_ANALYSIS.md) and every rival's customers locked in by switching friction, a self-service, validated, reversible, multi-source importer would be a genuine market exclusive - and would convert a low-margin manual service into a scalable, licensable module.
The Generic Competitor Data Importer (specified in architecture/DATAMIGRATIONIMPORT.md), Phases 1 and 2 shipped - ten entity types (participants, staff, sites, contacts, plans, funding, goals, appointments, notes and billing), a guided wizard, and per-aspect on/off selection, default-on for every organisation. Highlights:
- Universal ingest (Phase 1, all 13 competitors + spreadsheets on day one): CSV / Excel /
JSON / ZIP-bundle import, because every competitor can export at least CSV. Native per-competitor adapters (Competitor A API, Competitor B, Competitor C, Competitor I first) are a later fidelity layer, not a prerequisite.
- Write-once, map-many: one competitor-agnostic canonical model + declarative,
versioned mapping profiles, so adding a source is data, not code.
- Staging-first and reversible: import lands in a tenant-isolated staging store, is
validated exhaustively (NDIS number/price checks, dedup/reconciliation against live data), produces a reconciliation report, dry-runs into a staging tenant, and only commits to the live tenant after customer sign-off - with one-click rollback available until go-live. Every imported record carries full provenance for idempotent re-runs.
- Compliance by construction: Privacy Act APP 3/5/6/11 (authority-to-transfer capture,
data-minimised logs, encryption, retention purge) and immutable-audit integrity - prior audit history is never fabricated; original timestamps are preserved as data.
| Aspect | Field (all 13 competitors) | MCF (Phases 1-2 shipped) |
|---|---|---|
| Data migration | Manual service only | Self-service, validated, reversible importer (market exclusive) |
| Multi-source coverage | Per-vendor, manual | CSV/Excel/JSON/ZIP for all 13 + spreadsheets; native per-competitor API adapters (Competitor A API etc.) are a later, not-yet-shipped fidelity layer |
| Entities | n/a | All ten shipped: participants, staff, sites, contacts, NDIS plans, funding pools, goals, appointments, clinical / progress notes and billing / invoice history |
| Safety | Ad hoc | Tenant-isolated staging + validation + de-dup + create / skip / merge + per-aspect on/off selection + sign-off gate + one-click rollback |
Positioning note: Phases 1 and 2 are shipped and may be claimed - the ten entity types above, via CSV/Excel/JSON/ZIP, with validation, de-dup, create / skip / merge, per-aspect on/off selection, authority-to-transfer sign-off, commit and one-click rollback, driven by a self-service wizard in the app. Do not yet claim the two remaining items as shipped until they land and are verified live: native per-competitor API adapters (Phase 3) and binary document / file-attachment import. Both are tracked in the engineering backlog.
Summary Conclusion
Maree-CareFlow v1.3.69 is the most comprehensive Australian NDIS + allied health platform available in the 2026 market, scoring 110/120 against 13 competitor platforms (verified column sum of the scorecard categories).
Three features are absolute market exclusives with zero competitor equivalents:
- Postcode-remoteness auto-classification for NDIS travel billing - eliminates hours of manual classification per week
- Guided Ahpra register checks + 90/30/7-day expiry alerts - proactive credential-compliance monitoring with a dated attestation trail (competitors offer at most an unaided manual register lookup). Deliberately NOT sold as a live automatic lookup: Ahpra publish no interface for it and their Terms of Use prohibit automated queries
- Self-hosted local AI (Ollama) for clinical report drafting - zero PHI egress to cloud, no AI subscription cost
The primary strategic risk is the absence of a native mobile app, which limits adoption among support worker-heavy organisations (where Competitor E dominates). A React Native wrapper over the existing API would address this gap without duplicating business logic.
The primary revenue opportunity is the NDIS PACE rollout - as NDIA moves all registered providers onto PACE, MCF already produces portal-ready BPR claim files at a small-to-medium price point; shipping a live, certified PACE API client (not yet built - today's client is a preview/mock) would position it for accelerated market share growth in 2026-2027.
Document prepared by Maree-CareFlow engineering and strategy team. Classification: CONFIDENTIAL - Not for external distribution. Next review: Quarterly (September 2026)