ComplyFlow
Legislation Monitor
Sign up Sign in

Terms of Use and Privacy Policy

Applies to monitor.complyflow.com (the "Legislation Monitor", the "Service")
Owned and operated by Comply Flow Pty Ltd (ABN 92 137 044 494) ("Comply Flow", "we", "us", "our")
Effective 17 September 2026. Last updated 15 October 2026.
This document sets out both the Terms of Use that govern your use of Legislation Monitor and the Privacy Policy that explains how we handle information collected through it. By creating an account or otherwise using the Service, you agree to both.
Legislation Monitor is a separate product from the ComplyFlow compliance platform at complyflow.com and app.complyflow.com.au. Those products are governed by their own Privacy Policy and Terms of Service at complyflow.com. This document applies only to Legislation Monitor.

On this page

1. About Legislation Monitor

1.1 Who operates the Service

Legislation Monitor is owned and operated by Comply Flow Pty Ltd (ABN 92 137 044 494), Unit 3/12 Sydney Rd, Manly NSW 2095, Australia.

1.2 What the Service does

Legislation Monitor maintains a register of Australian and New Zealand work health and safety legislation, regulations, codes of practice and guidance material. It lets you browse and filter that register, track the subjects relevant to your organisation, keep a watchlist, and receive email updates when we record a change to something you follow.

1.3 A free service

Legislation Monitor is currently provided free of charge. We may introduce paid plans or paid features in future. If we do, we will tell you before any charge applies to your account, and the free features you rely on will not be switched to paid without notice.
Because the Service is free, it is provided on an "as is" and "as available" basis. Section 4.8 sets out the limits of our liability, and those limits apply in full.

1.4 Fair use

The Service is offered on a fair use basis. Fair use means normal interactive use by a person or an organisation researching legislation relevant to their own operations. It does not include:
  • automated scraping, crawling, bulk downloading or systematic extraction of the register or any substantial part of it;
  • reselling, redistributing or republishing the register, or building a competing product from it;
  • sharing a single account across an organisation to avoid creating individual accounts, or sharing credentials with people outside your organisation;
  • volumes of requests, searches, scans, tracked subjects or AI queries that are disproportionate to ordinary use, or that degrade the Service for other users;
  • using the Service to train, fine-tune or evaluate a machine learning model.
We may apply rate limits, usage caps or other technical controls, and we may contact you, restrict a feature, or suspend an account where use goes beyond fair use. Where it is practical to do so, we will contact you first.

2. Information only: please check the legislation itself

Legislation Monitor is an awareness tool, not a source of legal advice. Please read this section before relying on anything in the Service.

2.1 General information only

Legislation Monitor is an information and awareness tool. Everything in it, including register entries, summaries, categorisations, impact notes, change alerts, status indicators and AI-generated content, is general information only. It is a starting point for your own research, not a substitute for it.

2.2 Not legal advice

Nothing in Legislation Monitor is legal advice, and no lawyer-client relationship is created by your use of it. We are not a law firm and we do not provide legal, regulatory or professional advice. The Service does not take account of your particular circumstances, your industry, your contractual obligations or the facts of any situation you face.
If you need advice on how a law applies to you, obtain it from a qualified legal practitioner or a suitably qualified professional adviser.

2.3 Accuracy and currency

We make genuine and ongoing efforts to source accurate, complete and current information. We draw on official sources, including the Commonwealth, state and territory legislation registers and the New Zealand legislation website, and we review and update the register on an ongoing basis.
Even so, we do not warrant that the information is accurate, complete, current or fit for any purpose. Legislation changes frequently and sometimes at short notice. There may be a delay between a change taking effect and it being reflected in the Service. Source websites change their structure, retire URLs and republish documents. Automated processing can misread, misclassify or omit material. Errors and omissions occur.

2.4 Always check the source

You are encouraged, and expected, to review the legislation cited for yourself and to confirm its accuracy and currency directly from the official source before you act on it. Where we link to an official register, that official version prevails over anything shown in Legislation Monitor. Where the two differ, the official version is correct and ours is not.
Do not rely on Legislation Monitor alone to determine your legal obligations, to demonstrate compliance, to satisfy an auditor or regulator, or to make any decision with legal, financial or safety consequences.

2.5 Use at your own risk

Use of the Service is at your own risk and on your own judgement. You are responsible for verifying anything you rely on, and for any decision you make or do not make on the basis of information obtained from the Service. Section 4.8 sets out the limits of our liability for any loss arising from that use.

3. Artificial intelligence

3.1 How we use AI

We use artificial intelligence in parts of Legislation Monitor to help process and organise public legislative material. Current uses include:
  • scanning and evaluating public sources for changes to legislation we track;
  • suggesting a starting register of subjects during onboarding, based on the industry and jurisdictions you tell us about;
  • classifying and categorising documents;
  • drafting plain-language summaries of what a change may mean.
We use AWS Bedrock, running in Amazon's Sydney (ap-southeast-2) region, as the underlying model service for text generation, together with a third party web search service used only to locate publicly available legislative material.

3.2 AI output is a suggestion, not an answer

AI-generated content in the Service is a suggestion to be checked, not a finding to be relied on. AI systems can be confidently wrong. They can misread a document, miss a change, invent a citation, misstate the effect of a provision, or apply a rule to the wrong jurisdiction.
Every AI-assisted output carries the same status as the rest of the Service: general information only, not legal advice, and subject to your own verification against the cited legislation. Section 2 applies to AI output in full. We apply automated guardrails and human review to AI features where we reasonably can, but we do not review every output before you see it.

3.3 Do not enter personal information into AI features

Please do not enter personal information, sensitive information or confidential material into any free-text field in Legislation Monitor, including fields that feed our AI features.
Examples of free-text fields include the business description captured during onboarding, feedback on AI responses, and any search or query box.
These fields exist to capture information about your organisation's activities and regulatory exposure. They are not designed to hold personal information. Text you enter into them may be transmitted to our AI model provider for processing.
Please describe your organisation, your industry and your operations in general terms. Do not include names, contact details, health information, employee or contractor records, incident details that identify a person, client information, commercially sensitive material, or anything provided to you in confidence.
We do not seek personal information through these fields, and we do not use it for any purpose beyond what is necessary to meet our legal obligations. If personal information is submitted through one of these fields in error, we will delete or de-identify it within a reasonable period, except where we are required by law to retain it. If you become aware that personal information has been entered into the Service in error, contact us at support@complyflow.com.au so we can action this promptly.

3.4 We do not train third-party models on your data

We do not sell or share your data for the purpose of training third-party AI models, and we do not use your content to train models for anyone else. Our model provider processes the text we send it in order to return a response to that request.

3.5 Human oversight

AI in Legislation Monitor supports our work. It does not replace human judgement, and it does not replace yours. Our staff review and correct the register on an ongoing basis. We keep records of AI processing runs so that we can investigate and correct errors, and we review our AI features periodically for accuracy, bias and compliance with Australian regulatory expectations.

4. Terms of Use

4.1 Accepting these terms

By accessing monitor.complyflow.com, creating an account, or using any part of the Service, you agree to these Terms of Use and to comply with all applicable laws and regulations. If you do not agree, you must not use the Service.
If you use the Service on behalf of an organisation, you confirm that you are authorised to accept these terms on that organisation's behalf.

4.2 Your account

You must provide accurate information when you register, and keep it up to date. You are responsible for your account credentials, for the security of your account, and for activity carried out under it. Tell us promptly at support@complyflow.com.au if you believe your account has been accessed without your authority.
Accounts are for named individuals. Do not share credentials, and do not let another person use your account.

4.3 Limitations of use

By using the Service you warrant, on behalf of yourself, your users and any party you represent, that you will not:
  • modify, copy, prepare derivative works of, decompile or reverse engineer any part of the Service;
  • remove any copyright or other proprietary notice from the Service;
  • transfer, mirror, resell, sublicense or redistribute the Service or the register, in whole or in substantial part;
  • use the Service in a way that abuses, disrupts or places unreasonable load on our networks or any service we provide;
  • use the Service to transmit or publish harassing, indecent, obscene, fraudulent or unlawful material;
  • use the Service in breach of any applicable law or regulation;
  • use the Service to send unauthorised advertising or spam;
  • harvest, collect or gather user data without consent;
  • use the Service in a way that infringes the privacy, intellectual property or other rights of any third party;
  • circumvent or attempt to circumvent any access control, rate limit, usage cap or security measure;
  • use the Service outside the fair use basis described in section 1.4.

4.4 Intellectual property

The Service, including its software, interface, structure, curation, categorisation, tagging, summaries and compilation of the register, is owned by or licensed to Comply Flow and is protected by copyright and trademark law. We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service for your own internal business purposes, and to download or print individual pages for that purpose.
This is a licence, not a transfer of title. It terminates automatically if you breach these terms, and we may terminate it at any time.
The underlying legislative material is published by Commonwealth, state, territory and New Zealand government bodies and remains subject to their own copyright terms and licences. Our licence to you does not extend to that underlying material beyond what those publishers permit.

4.5 Your content

You keep ownership of content you submit to the Service, including your register, watchlists, notes, comments and organisation profile. We do not claim ownership of it.
You grant us a non-exclusive, royalty-free, worldwide licence to host, store, reproduce, process and transmit your content for the purpose of operating and improving the Service and providing it to you and to other authorised users in your organisation. This licence exists so that we can run the Service. It ends when you delete the content or your account, other than in encrypted backups, which are retained as described in section 5.9.
You are responsible for the content you submit, and you warrant that you have the right to submit it.

4.6 Availability and changes

We aim to keep the Service available, but we do not guarantee uninterrupted or error-free access. The Service may be unavailable for maintenance, upgrades, or reasons outside our control.
We may add, change, suspend or withdraw features, content, jurisdictions or the whole Service at any time. Where a change materially reduces functionality you rely on, we will give reasonable notice where it is practical to do so.

4.7 Suspension and termination

We may suspend or terminate your access to the Service, and terminate these Terms of Use, immediately on written notice for any breach of these terms, for use outside the fair use basis in section 1.4, for non-payment of any fee that later applies, or where we reasonably consider your use poses a security or legal risk.
You may stop using the Service and close your account at any time by emailing support@complyflow.com.au with your request.

4.8 Liability

The Service and everything in it are provided on an "as is" and "as available" basis. To the extent permitted by law, Comply Flow makes no warranties, express or implied, and disclaims all implied warranties and conditions including merchantability, fitness for a particular purpose, accuracy, completeness, currency, and non-infringement.
To the extent permitted by law, Comply Flow is not liable for any loss, damage, cost or expense arising from or connected with:
  • any error, omission, inaccuracy, misclassification, outdated entry or missing update in the register or in any AI-generated content;
  • any delay between a change in the law taking effect and that change appearing in the Service;
  • any reliance placed on the Service, including any act done or not done on the basis of information obtained from it;
  • any failure to identify, notify or correctly describe a legal obligation applicable to you;
  • any unavailability, interruption, suspension or withdrawal of the Service;
  • any content on a third party website linked from the Service.
In no event will Comply Flow or its suppliers be liable for any consequential loss suffered by you or any third party arising from the use of, or inability to use, the Service, even if we have been advised of the possibility of that loss.
In this document, "consequential loss" includes consequential loss, indirect loss, real or anticipated loss of profit, loss of benefit, loss of revenue, loss of business, loss of goodwill, loss of opportunity, loss of savings, loss of reputation, loss of use, and loss or corruption of data, whether arising under statute, contract, equity, tort (including negligence), indemnity or otherwise.
Nothing in these terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law or any other law that cannot lawfully be excluded. Where our liability cannot be excluded but can be limited, our liability is limited, at our option, to resupplying the Service or paying the cost of having it resupplied. Because the Service is supplied free of charge, no refund of fees is available.
Some jurisdictions do not allow limits on implied warranties or on liability for consequential or incidental damages, so some of these limits may not apply to you.

4.9 Links to other sites

The Service links extensively to official legislation registers and other external websites. We have not reviewed all of them and we are not responsible for their content, availability or practices. A link is not an endorsement. Use of a linked site is at your own risk and subject to that site's own terms and privacy policy.

4.10 Indemnity

You indemnify Comply Flow against any claim, loss, liability, cost or expense arising from your breach of these terms, your misuse of the Service, or your infringement of the rights of any third party through your use of the Service.

4.11 Severance

If any part of these terms is wholly or partly void or unenforceable, it is severed to that extent. The rest of the terms continue to apply.

4.12 Governing law

These terms are governed by the laws of New South Wales, Australia. You irrevocably submit to the exclusive jurisdiction of the courts of that State.

4.13 Changes to these terms

We may review and amend these terms at our discretion. When we do, we will update this page and change the "last updated" date above. Changes take effect from the date of publication. If the changes are significant, or if the law requires it, we will contact registered users. Continuing to use the Service after a change means you accept the amended terms.

5. Privacy Policy

Your privacy is important to us. It is our policy to respect your privacy and to comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and any other applicable privacy law.
Personal information is any information about you that can be used to identify you. This includes information about you as a person, about your devices, and about how you use an online service.
We do not sell, rent, license or trade your personal information. We do not disclose it to any third party except as described in section 5.6 or where we are legally required to do so.

5.1 Information we collect

Information you give us:
  • account details: your name, email address and password, or, if you sign in with Google, your name, email address and Google account identifier;
  • organisation details: your organisation's name, and the industry, jurisdictions and business description you supply during onboarding;
  • your use of the Service: the subjects you track, your register and watchlist, status markings, notes and comments, and your digest and notification preferences;
  • anything you send us: support requests, feedback on AI responses, and correspondence;
  • files you upload, such as an existing legislation register you import.
Information collected automatically (log data): when you use the Service our servers log standard information sent by your browser, which may include your IP address, browser type and version, device and operating system information, the pages you visit, the date and time of your visit, time spent on each page, and referring pages. If you encounter an error, we may automatically collect technical details about that error and the circumstances around it.
Information collected by analytics and advertising tools: the Service carries third party analytics and advertising tags that collect information about your visit, including your IP address, device and browser, the pages you view, the links you follow, and how you reached us. Section 5.4 sets out which tools these are, what they do, and where they run.
We do not seek sensitive information. Legislation Monitor is not designed to hold health information, biometric information, or information about racial or ethnic origin, political opinions, religious beliefs, sexual orientation or criminal record, and you should not enter it. If it is submitted in error, see section 3.3, where we explain that we delete or de-identify it.

5.2 Why we collect it

We only collect personal information where we have a legitimate reason to, and only what is reasonably necessary to provide the Service. We collect, hold, use and disclose information in order to:
  • create and administer your account and authenticate you;
  • provide the register, tracked subjects, watchlists and suggestions;
  • send you the email digests and service notifications you have chosen;
  • respond to your support requests and correspondence;
  • keep the Service secure, detect and prevent misuse, and enforce fair use;
  • understand how the Service is used so that we can improve it;
  • measure how people find and evaluate Legislation Monitor, so that we can reach the people it is useful to;
  • tell you about other Comply Flow products and services that may be relevant to you, if you have asked to receive them;
  • keep internal records and meet our legal obligations.
We will not use your personal information for a purpose that is incompatible with those set out above.

5.3 Email communications

If you have an account, we send you service messages that are necessary to operate the Service, such as email verification, password resets, invitations and important notices. You cannot opt out of these while you hold an account.
Digest emails about legislation changes are optional. You can turn them off in your preferences at any time, or use the unsubscribe link in any digest. Unsubscribing from digests does not close your account.
We may also use your email address to tell you about Comply Flow products and services that may be of interest to you, but only if you asked to receive them when you signed up. You can opt out at any time using the unsubscribe link in any marketing email, or by contacting us. Opting out of marketing does not affect the service messages described above.
We send these messages through Amazon Simple Email Service, running in Amazon's Sydney (ap-southeast-2) region.

5.4 Cookies, analytics and advertising

We use a small number of cookies that are necessary for the Service to work. complyflow-legislation-monitor-session keeps you signed in, XSRF-TOKEN protects against cross-site request forgery, and lm_tz remembers your time zone so that dates display correctly. Without these the Service cannot function.
Our bot protection provider, Cloudflare, sets a cookie to distinguish people from automated traffic.
We also use analytics and advertising tools across the Service, managed through Google Tag Manager. These set their own cookies and collect information about your visit, including on pages you view while signed in. They are:
  • Google Analytics 4, which tells us how the Service is used;
  • Google Ads and DoubleClick, which measure our advertising and support remarketing;
  • Meta (Facebook) Pixel, LinkedIn Insight Tag and AdRoll, which measure our advertising and build advertising audiences, which means you may see advertising for ComplyFlow on those platforms after visiting us;
  • HubSpot, our customer relationship system, which records your activity on the Service and associates it with your contact record where we hold one.
Some of these tools share identifiers with their own advertising partners, such as advertising exchanges and audience-matching services, so that advertising can be measured and targeted. Those partners may set cookies of their own.
These tools receive the address of the pages you visit. On pages inside the application, that address can indicate the legislation or subject you were looking at. They do not receive your register content, your notes, your watchlist, or anything you type into the Service.
You can instruct your browser to refuse cookies, though essential cookies cannot be refused without parts of the Service failing. You can opt out of interest-based advertising from participating networks at youradchoices.com.au and at optout.aboutads.info, and you can turn off Google Analytics collection using Google's browser opt-out add-on.

5.5 Security

We protect the personal information we hold using commercially reasonable technical and organisational measures, including encryption in transit, access controls, role-based permissions, and restricting staff access to the people who need it to do their job. We comply with the laws that apply to us in the event of a data breach.
No method of transmission or storage is completely secure. You are responsible for choosing a strong password and for keeping your credentials confidential.

5.6 Disclosure to third parties

We may disclose personal information to:
  • our service providers, for the purpose of them providing services to us. These currently are: Amazon Web Services, for hosting, database, email delivery and AI model services, in the Sydney region; Google, for the web fonts loaded on every page of the Service, for the robot check (reCAPTCHA) on our contact form and, only where you choose to sign in with Google, for sign-in; Bunny Fonts (BunnyWay d.o.o.), for the fonts used inside the signed-in application; Cloudflare, for bot protection; HubSpot, which receives what you submit through our contact form and, when you sign up, your name, email address, IP address, marketing choice and the campaign link you arrived on; and the analytics and advertising providers named in section 5.4 (Google, Meta, LinkedIn, AdRoll and HubSpot), which receive information about the pages you visit across the Service, including while you are signed in;
  • other authorised users within your own organisation: your tracked subjects, watchlists, status markings, notes and comments are visible to other users your organisation has added to its account;
  • our related entities, employees and contractors, where they need the information to operate or support the Service;
  • courts, tribunals, regulators and law enforcement, as required by law or in connection with actual or prospective legal proceedings, or to establish, exercise or defend our legal rights;
  • a purchaser or successor, in connection with a sale, merger or transfer of our business, subject to that party continuing to handle the information consistently with this policy.
We require our service providers to protect personal information and to use it only for the purpose we engaged them for.

5.7 Where information is stored

Legislation Monitor is hosted in Australia. Our application servers, database, file storage and email delivery run in the Amazon Web Services Sydney region (ap-southeast-2), and AI text processing is performed by AWS Bedrock in that same Australian region. Your account, your register, your watchlist and everything you enter into the Service stay in Australia.
Three supporting services process limited technical data outside Australia: Cloudflare, for bot protection, which operates a global network including the United States; Google, for the web fonts loaded on every page and the robot check on our contact form, which is processed in the United States; and Bunny Fonts, for the fonts used inside the signed-in application, which is based in Slovenia and serves fonts from a global network. None of them receives your register content.
The analytics and advertising providers named in section 5.4 are based outside Australia, mainly in the United States. Information their tags collect, which includes your IP address and the addresses of pages you visit across the Service, is processed overseas.
Where information is handled outside Australia, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. You consent to that overseas handling by using the Service.

5.8 Data breaches

In the event of an eligible data breach, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

5.9 Retention and deletion

We keep your personal information for as long as you hold an account and for as long as we need it for the purposes described in this policy or to meet a legal obligation.
If you close your account, we delete or de-identify your personal information within a reasonable period, except where we are required to retain it by law. Residual copies may persist in encrypted backups for up to 7 days before those backups expire in the ordinary course.

5.10 Your rights

You can:
  • access the personal information we hold about you, by contacting us;
  • correct it, through your profile settings or by contacting us, if it is inaccurate, out of date, incomplete, irrelevant or misleading;
  • withhold personal information from us, accepting that parts of the Service may not work as a result;
  • opt out of optional communications at any time;
  • opt out of interest-based advertising, using the controls described in section 5.4;
  • close your account and ask us to delete your information;
  • complain, if you believe we have breached a privacy law.
To exercise any of these, contact us using the details in section 6. We may need to verify your identity first. We will respond within a reasonable period, and ordinarily within 30 days.
If you make a complaint, we will investigate it and write to you setting out the outcome and what we will do about it. If you are not satisfied with our response, you may take your complaint to the Office of the Australian Information Commissioner at oaic.gov.au for independent review.
If you provide us with personal information about another person, you warrant that you have their consent to do so.

5.11 Anonymity and pseudonymity

It is generally not practicable for us to provide Legislation Monitor anonymously or under a pseudonym, because the Service is an account-based product that requires us to authenticate you and associate your activity with your organisation. Where it is practicable for a particular interaction (for example, a general enquiry to support@complyflow.com.au), you may deal with us anonymously or under a pseudonym.

5.12 Children

Legislation Monitor is a business tool. It is not directed at children, we do not aim any part of it at children under 13, and we do not knowingly collect personal information about children under 13.

5.13 Legislative framework

We aim to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Where they apply to us (for example, where we handle personal information for a government client, or on behalf of an organisation subject to these laws), we also have regard to the Information Privacy Act 2014 (ACT), Privacy and Personal Information Protection Act 1998 (NSW), Information Act 2002 (NT), Information Privacy Act 2009 (Qld), Personal Information Protection Act 2004 (Tas), and Privacy and Data Protection Act 2014 (Vic).
If you are located in New Zealand, the Privacy Act 2020 (NZ) may also apply to our handling of your information.
Legislation Monitor is offered to organisations in Australia and New Zealand and is not directed at individuals in the European Union or the United Kingdom.

5.14 Changes to this policy

We may change this Privacy Policy to reflect changes to our processes, to current practice, or to the law. We will post any change on this page and update the "last updated" date. If a change is significant, or if the law requires it, we will contact registered users.

5.15 Limits of this policy

This policy covers Legislation Monitor only. The Service links to many external sites, including official legislation registers. We have no control over those sites and cannot accept responsibility for their privacy practices. Once you follow a link away from the Service, this policy no longer applies.

6. Contact us

For any question about these terms, this policy, or the personal information we hold about you:
Comply Flow Pty Ltd
ABN 92 137 044 494
Unit 3/12 Sydney Rd
Manly NSW 2095
Australia
Email: support@complyflow.com.au
Legislation Monitor is owned and operated by Comply Flow Pty Ltd. Effective 17 September 2026.
© 2026 Comply Flow Pty Ltd · Privacy Policy · Terms of Use · Contact