Milestone deepens Tungsten Automation’s global government security posture, following FedRAMP High and GovRAMP authorizations in the United States
Tungsten Automation, a global leader in AI-powered intelligent document and workflow automation, announced it has achieved IRAP Assessed – PROTECTED level status, following an independent assessment conducted under the Australian Cyber Security Centre’s (ACSC) Infosec Registered Assessors Program (IRAP).
Also Read: CIO Influence Interview with Hugo Dozois-Caouette, CTO and Co-founder at MaintainX
“Australian agencies can now move forward with Tungsten knowing our platforms have been independently verified against the government’s most rigorous data-handling standards.”
The certification confirms that Tungsten Automation’s TotalAgility® and InvoiceAgility® Cloud Platforms meet the security controls required to handle PROTECTED level data, clearing the way for Australian federal, state, and territory government agencies to adopt the company’s automation technology for both internal operations and citizen-facing services.
“Achieving IRAP Assessed – PROTECTED level status is a milestone years in the making, and it reflects the same discipline we’ve applied to every security certification we pursue globally,” said Greg Crowl, Vice President, Solutions Engineering, Asia Pacific & Japan, at Tungsten Automation. “Australian agencies can now move forward with Tungsten Automation, knowing our platforms have been independently verified against the government’s most rigorous data-handling standards.”
What This Unlocks for Australian Agencies
With IRAP Assessed – PROTECTED status in place, Australian government agencies can now:
- Deploy TotalAgility® and InvoiceAgility® Cloud Platforms to automate document-heavy processes involving PROTECTED level information
- Modernize legacy workflows without compromising on data sovereignty or security compliance
- Scale automation initiatives across both back-office and citizen-facing services with independently verified assurance
For agencies managing e-invoicing obligations, InvoiceAgility®’s existing PEPPOL Access Point connectivity means they can pair this newly obtained, independently verified security assurance with compliant, standards-based invoice exchange — addressing two government requirements through a single platform.
“Government agencies are under constant pressure to modernize while protecting sensitive data — those two priorities used to pull in opposite directions,” said Hoa Lam, Regional Vice President, Australia & New Zealand, at Tungsten Automation. “IRAP Assessed – PROTECTED status means Australian agencies no longer have to choose. They get a proven path to automation with the security assurance that this kind of work demands supporting essential services.”
A Consistent Global Standard for Government Security
The IRAP milestone extends a security track record Tungsten Automation has already established in the United States. Earlier this year, Tungsten Automation’s TotalAgility® Cloud achieved FedRAMP® High Authority to Operate (ATO) — the highest security bar for cloud SaaS serving the U.S. federal government — and in June 2026, the platform also earned GovRAMP Authorized status, extending that same assurance to U.S. state, local, tribal, and education (SLED) organizations.
Together, these certifications reflect a consistent approach: rather than treating each region’s compliance regime as a one-off exercise, Tungsten Automation is building a single, repeatable security foundation that travels across FedRAMP, GovRAMP, and now IRAP.
“Whether it’s Washington or Canberra, government buyers are asking the same question: can you prove it, independently, to our standard?” said Lam. “Our answer is the same everywhere – yes, and here’s the assessment that backs it up.”
Built on 40 Years of Public Sector Experience
Tungsten Automation has spent more than four decades serving public sector clients globally and today supports hundreds of government agencies worldwide, including more than 350 U.S. government agencies across 14 of 15 federal departments. The company’s solutions are designed to integrate into agencies’ existing systems, helping modernize document-intensive processes without disruptive rip-and-replace projects.
Catch more CIO Insights: What Does “Job-Ready” Really Mean in IT and Cybersecurity?
[To share your insights with us, please write to psen@itechseries.com ]
