· 10 min read
Software testing and UAT for SA Government and council projects: a practical guide
How SA agencies, councils and small businesses plan software testing and UAT: test layers, safe test data, accessibility, security and a 90-day plan.

Services
Custom web, mobile and cloud-native applications built for Adelaide businesses and government agencies.
Adelaide organisations often rely on spreadsheets, email chains and ageing systems that no longer fit how they work. That costs time, adds risk and makes it hard to scale. Custom application development replaces those workarounds with software that reflects your real processes, connects to the systems you already use, and gives your customers and staff a modern experience on any device.
EITSAA builds custom software in Adelaide with a product mindset. Before we write any code, we work out who will use the application, what outcome it must deliver, and how we will measure success. We then deliver in short sprints, so you see working software early and can change priorities as you learn.
Off-the-shelf software rarely fits how your team actually works. We design and build applications around your processes. We use modern, well-supported stacks, so you are never locked into one supplier.
Apps showcase
Step through illustrative native iOS, native Android and web application screens, with notes on what good looks like: offline use, biometrics, push notifications, accessibility and performance.
We build native iOS apps in Swift and SwiftUI and native Android apps in Kotlin, alongside web applications. We are equally at home with Flutter and other cross-platform frameworks. We recommend native or cross-platform based on your users, budget and the device features you need.
Already have an app?
You do not need to rebuild them. We build mini-apps that overlay your existing apps. A mini-app is embedded in your iOS, Android or web app through a secure web view or mini-app container. Once the container is in place, we can ship changes to the mini-app without a new app-store release each time, and the same mini-app works across iOS, Android and web.
A guarded assistant that answers questions from your approved content, collects details with slot filling and hands over to a person when needed.
A calculator where the numbers come from tested, deterministic code and a language model explains the result in plain language.
Eligibility checkers, forms, booking and status trackers that you can add or change without touching the host app.
A council already has a resident app. We add a mini-app where residents enter a few details and get a rates estimate or a grant-eligibility indication, with the result explained in plain language.
Ecommerce and payments
We build ecommerce websites and mobile apps that connect to payment gateways and wallets such as Apple Pay and Google Pay. Designs aim to keep card data out of your environment, which reduces PCI DSS scope. Your gateway and your assessor determine the final compliance position.
Illustrative. Sample shop and sample data, not a real store.
One shared backend and payment provider behind all three
1. The website A responsive shop on the web. Product pages, cart and checkout work in any browser, with card entry in the provider's hosted fields.
Hosted fields, payment sheets and tokenisation so card numbers do not touch your servers, logs or databases.
Challenge flows that work in browsers and in-app, with clear messages when a bank declines.
Provider risk rules, velocity limits, address and CVC checks, and a review queue for flagged orders.
Signature checks, idempotent handlers and retries so orders and ledgers agree with the provider.
Full and partial refunds, an audit trail and evidence packs for chargebacks.
WCAG 2.2 AA forms, clear errors and keyboard and screen reader support on web and mobile.
Secure self-service portals for bookings, applications, payments and case tracking, with single sign-on and accessibility built in.
Replace paper forms and spreadsheets with digital workflows, audit trails and automated notifications.
Offline-capable iOS and Android apps for inspections, asset management and service delivery anywhere in South Australia.
Connect your CRM, finance, ERP and Microsoft 365 through well-documented REST and event-driven APIs.
Re-platform legacy .NET, PHP or Access applications to supported, cloud-native architectures, with minimal disruption.
We clarify goals, users, constraints and success measures, and review your current systems and data.
We agree the architecture, security controls and user experience before the build begins.
Fortnightly sprints with demos, automated testing and continuous deployment.
Monitoring, support and a backlog of improvements based on real usage.
React, Next.js, TypeScript, Flutter, React Native, .NET, Node.js, Python, PostgreSQL, DynamoDB, AWS, Azure, GitHub Actions.
Working with a local team means face-to-face workshops, an understanding of South Australian regulatory and procurement requirements, and support in your time zone. Engaging EITSAA also keeps investment and jobs in South Australia, which counts under the SA Industry Participation Policy in government tenders.
See our government capability statement or read how we work.
Every Application Development engagement starts with outcomes we agree on, not just a list of features. Before we begin, we set measures such as hours saved, faster turnaround, higher customer satisfaction, lower operating cost or reduced risk. We report against them throughout delivery. You get a fortnightly demonstration of working software, a transparent backlog, and a named Adelaide-based lead who is accountable for progress.
When the work is done, you keep the capability. Documentation, source code, infrastructure definitions and runbooks are handed over in full, and knowledge-transfer sessions give your team the confidence to run and extend what we have built.
Security and privacy are designed in from the first workshop. Our Application Development solutions follow the principle of least privilege, encrypt data in transit and at rest, and can be hosted in Australian cloud regions to meet data sovereignty requirements. We align with the ACSC Essential Eight, the Australian Privacy Principles and, for public sector clients, the SA Government Information Security Management Framework.
For regulated or sensitive work, we can complete privacy impact assessments, provide security documentation for your risk team, and support independent penetration testing before go-live.
It depends on scope. Most projects start with a fixed-price discovery phase of one to two weeks. Discovery produces a prioritised backlog and a reliable estimate, so you can budget with confidence before committing to a full build.
You do. Our standard agreement assigns intellectual property in deliverables to you, and we hand over the repositories, documentation and deployment pipelines.
Yes. Most of our work involves integrating with existing platforms such as Microsoft 365, Salesforce, Xero, SAP or government identity services.
Yes. We design and test against WCAG 2.2 AA, which is required for most government work and is good practice for every organisation.
Yes. We write the test strategy, build automated regression, accessibility and API tests into the delivery pipeline, and help your business team plan UAT with scenarios drawn from real work and synthetic test data, so personal information stays out of test environments. Go-live is decided against agreed exit criteria, not a date.
We build both. Native iOS (Swift, SwiftUI) and native Android (Kotlin) suit apps that need the best platform feel, biometrics, background work or deep device features. Flutter and other cross-platform frameworks suit teams that want one codebase across platforms. We recommend the approach that fits your users and budget.
Often, yes. We build mini-apps, such as a chatbot or an LLM-based calculator, that run inside your existing iOS, Android or web app through a secure web view or mini-app container. Once the container is in your app, we can update the mini-app without a new app-store release for each change.
PCI DSS applies to your organisation and your payment arrangements, not to software alone. We design checkouts that use hosted fields, payment sheets and tokenisation so card numbers stay out of your servers, which reduces your scope. We also build in 3-D Secure, webhook verification and reconciliation. Your payment provider and assessor confirm the final position.
Plain-English guides from our Insights library related to Application Development.
· 10 min read
How SA agencies, councils and small businesses plan software testing and UAT: test layers, safe test data, accessibility, security and a 90-day plan.
· 8 min read
How SA councils and small businesses replace PDF forms with accessible online forms and payments: PCI DSS scope, privacy, records and a 90-day plan.
· 8 min read
How SA councils make FOI and records work faster and easier to defend: State Records and GDS 40 duties, the 30-day FOI clock, search, redaction, 90-day plan.
Learn
AWS
A scale-to-zero API for web and mobile apps. Cognito authenticates, API Gateway enforces, Lambda runs the business logic, DynamoDB stores state and SQS or EventBridge decouple the slow work.
WebRTC · LiveKit
A WebRTC platform for mobile apps built on the LiveKit SFU: token-based access, UDP and TURN/TLS connectivity, server-side recording to S3, webhooks, ingress for streams and scaling across nodes and regions.
WebRTC · Amazon Chime SDK
A managed real-time platform on AWS: a Meetings API backend, mobile and web clients, media regions close to users, SIP media applications for phone calls and media pipelines for recording, all driven by Lambda and EventBridge.
Governance, guardrails and assurance for every kind of AI: machine learning, generative AI, LLMs, agents and automated decisioning, aligned to Australian guidance and international standards.
Explore AI governance →Workshops, teaching sessions and expert consultations that lift your team's skills in AI, software engineering, cloud, data and security, tailored to your own tools and use cases.
Explore training →Practical AI strategy, readiness assessments and responsible AI governance aligned to Australian guidance.
Explore AI services →Tell us what you need. We reply within one business day and the initial conversation is free of charge.