Government & Tenders

Capability statement

An Adelaide-owned SME delivering secure ICT, AI and digital services to government, councils and prime contractors.

Company snapshot

Business nameEITSAA
ABN35 921 253 844
Established2018
Location718/147 Pirie Street, Adelaide SA 5000
Principal contactAmit Patel, Principal
Phone0402 401 584
Business typeSouth Australian small business (SME)
Industry codesANZSIC 7000 Computer System Design and Related Services

Download capability statement (PDF)

Core capabilities

CapabilityServices
AI Governance & AssuranceAI inventory, risk tiering and accountability; guardrails for LLM applications and agents; failure-mode analysis, evaluation and red-teaming; model risk management for scoring and automated decisioning; alignment to the Guidance for AI Adoption, ISO/IEC 42001, NIST AI RMF and OWASP Top 10 for LLM Applications
Training & Team ConsultationsWorkshops, executive briefings, hands-on labs and expert consultations in AI, software engineering, cloud, data and security, on-site in Adelaide or online
Application DevelopmentWeb and mobile apps (React, Next.js, Flutter, .NET, Node.js, Python and others); Internal tools, portals and workflow automation; API design and system integration
AI Consulting & StrategyAI opportunity discovery workshops; AI readiness and data maturity assessments; Responsible AI policy aligned to Australia's AI Ethics Principles and Voluntary AI Safety Standard
AI Agents & ChatbotsCustomer service chatbots for websites, Teams and Slack; Internal knowledge assistants grounded in your documents; Agentic workflows that automate multi-step tasks with human approval
LLM Applications & RAGRetrieval-augmented generation (RAG) over private data; Document processing: summarisation, extraction, classification; Model selection across AWS Bedrock, Azure OpenAI and open-weight models
Intelligent AutomationProcess discovery and automation opportunity assessment; Workflow automation with Power Automate, Logic Apps and AWS Step Functions; Robotic process automation (RPA) for legacy systems without APIs
DevOps & Cloud EngineeringCloud architecture on AWS and Microsoft Azure; Infrastructure as code (Terraform, CDK, Bicep); CI/CD pipelines with GitHub Actions and Azure DevOps
Website Design & DevelopmentUX/UI design and brand-consistent design systems; Static and headless CMS websites with very fast load times; WCAG 2.2 AA accessibility and technical SEO
Data & AnalyticsData warehouses and lakehouses (Fabric, Databricks, Redshift); Power BI and QuickSight dashboards; Data pipelines and integration
Managed IT & Cyber SecurityApplication and cloud support with clear service levels; Monitoring, patching and backup management; ACSC Essential Eight assessments and uplift

Differentiators

SA economic benefit

Local ownership and local delivery staff, aligned to the SA Industry Participation Policy.

Security & compliance

Essential Eight-aligned delivery, the Australian Privacy Principles, and the SA Information Security Management Framework (ISMF) considered in design.

Responsible AI

AI governance aligned to national guidance, with human oversight and audit logging.

Agile & transparent

Fortnightly demos, clear reporting and fixed-price discovery phases that reduce procurement risk.

Corporate documents available on request

  • Certificates of currency: public liability, professional indemnity and cyber insurance
  • Information security, privacy, WHS, quality and modern slavery policies
  • Conflict of interest and confidentiality procedures
  • Key personnel CVs

Standards we help you meet

We help you design and evidence the technical controls behind these standards. We are not an assessor or auditor, and we do not claim certification against them. Assurance comes from accredited bodies and qualified assessors. This is general guidance, not legal advice, and obligations vary.

  • APRA CPS 230 Operational Risk Management: critical operations, tolerance levels, continuity testing and material service provider management for regulated entities and the suppliers that serve them.
  • APRA CPS 234 Information Security: third-party assurance, incident notification and control testing.
  • Security of Critical Infrastructure Act 2018: risk management program inputs and cyber incident reporting readiness.
  • ACSC Essential Eight, ISO/IEC 27001:2022 and the SA Information Security Management Framework.
  • Privacy Act 1988 and the Notifiable Data Breaches scheme, PCI DSS v4.0.1 and SOC 2 evidence for suppliers.

Read the standards map or see the CPS 230 reference architecture.

Guides for procurement teams and primes

How we think about SA Government ICT buying, supplier panels and cyber security expectations, written in plain English.

Looking for a specific capability? Browse our services or see how we work.

Questions from procurement teams and primes

Is EITSAA on an SA Government ICT panel?

We support suppliers and primes through SA Government procurement channels. Prime contractors can engage us as a subcontractor, and agencies can contact us about opportunities where their procurement rules allow. Our guide to SA Government ICT panels explains how panels work.

Can you subcontract or team with a prime contractor?

Yes. We can deliver a defined package of work, such as AI proof of value, application development, cloud automation or accessibility remediation, inside a larger program. We agree scope, reporting lines and how our participation is described in the bid before submission.

How do you address the SA Industry Participation Policy?

EITSAA is South Australian owned, based in Adelaide. For each opportunity we prepare an Economic Contribution Test or Industry Participation Plan response based on the actual resourcing plan, so commitments are realistic and reportable. Read our guide to the SA Industry Participation Policy for ICT SMEs.

Which corporate documents can you provide?

On request we provide certificates of currency for our insurances, our information security, privacy, WHS, quality and modern slavery policies, conflict of interest and confidentiality procedures, and key personnel CVs. Tell us the opportunity number and the documents the buyer needs.

Can you help with APRA CPS 230 and CPS 234?

We help regulated entities and their suppliers design and evidence the technology side: critical operation dependency maps, recovery designs, resilience tests, provider registers and exit plans, and incident notification workflows. We are not an assessor, auditor or law firm, and we do not claim certification against these standards. Start with CPS 230 explained for ICT leaders. This is general guidance, not legal advice.

Can our data stay in Australia?

Where required, we design solutions to keep data in Australian cloud regions on AWS or Azure and document any data flows that leave Australia, including AI model calls. See what to ask about Australian data residency.

How quickly can you respond to an RFQ or clarification?

We aim to reply within one business day. For a live RFQ, choose “Tender / teaming opportunity” in the contact form and include the opportunity number and closing date, or call 0402 401 584.

Have a tender, RFQ or teaming opportunity?

Send us the scope or opportunity number. We reply within one business day and can provide corporate documents on request.