Before commencing development, we recommend that you:
- Review the ATO services that you'll use in your software.
- Consider how the ATO service will be used within your software and who the end user will be.
Find information about using our digital services including:
To use our digital services, you will need to undertake a number of steps before you’re whitelisted to use ATO production services.
- Register as a digital service provider (DSP) through SBR and Online services for DSPs
- Develop your software in the ATO test environment
- Complete the questionnaire and provide evidence that your solution complies with requirements
- Complete testing in our test environment (Production Verification and, in some cases, Extended Conformance Testing)
- Successfully apply for whitelisting and release your solution into production.
Note: The below description is a high-level summary.
1. Register with Online Services for Digital Service Providers
Complete the ‘SBR developer registration’ form on Online services for DSPs to obtain access to the non-live test environment and specifications. After registering you can access support from the Digital Partnership Office to help guide you through the build process.
2. Build against non-live test environment - External Vendor Testing Environment (EVTE)
The ATO External Vendor Testing Environment (EVTE) has been designed to ensure that defined SBR technical standards are met.
EVTE is a testing platform that allows digital service providers, both commercial and inhouse, to demonstrate their capability in meeting a defined set of test scenarios with well-formed requests/messages.
You can utilise test scenarios to demonstrate your product/service operates as expected. Using EVTE is a key part of our software registration process.
3. Complete the security questionnaire
Complete the Digital Service Provider Operational Framework Security Questionnaire (DOCX, 895KB) and provide relevant evidence to demonstrate compliance with the Requirements for DSPs.
4. Production verification testing (PVT)
Valid transactions are closely monitored in a live environment to demonstrate your product/service operates as expected in a live environment.
5. Whitelist for production services
Once approved for whitelisting, your product/service can be used to transact with production ATO digital services.
Review the ATO services you will use in your software by looking at the Overview of our services.