Every tool your practice runs on. One workspace.
Calendar, accounting, ImmiAccount eLodge, inbound email, AI document extraction - connect the integrations you already pay for. Encrypted OAuth, audit-logged and disconnect-anytime.
Integrations
Plug in the tools you already use.
One-click OAuth or workspace install. Tokens encrypted at rest with a per-organisation HKDF key. Disconnect any time without losing a trace of what was synced.
Google Calendar
Bookings sync straight to your calendar
When a client books a slot via your lead form, an event lands on your Google Calendar in seconds - with attendee emails, agenda and reminders. Encrypted OAuth tokens, no third-party access.
Microsoft 365 (Outlook)
The same flow, for the Microsoft stack
Bookings push to your Outlook calendar via Microsoft Graph. Multi-tenant + personal accounts both supported. Tokens auto-refresh; revocation is one-click from the settings page.
Apple Calendar (iCloud)
iCloud calendars over CalDAV
Sign in with your Apple ID email and an app-specific password from appleid.apple.com. No admin OAuth review, no provider keys. CalDAV discovers your calendars and you pick the one bookings write to. Bookings sync into whichever calendar you already live in - Google, Microsoft 365 or Apple iCloud.
Xero
Invoicing without the double-entry
OAuth 2 connect, 15-minute polling sync. Per-client invoice flow from CRM. Cross-client status from Accounting. Contacts auto-created on first invoice. Australian GST handled.
ImmiAccount eLodge
Auto-fill the form. One click per page.
Chrome extension that fills DHA ImmiAccount visa applications from your client records. Top-7 subclasses on launch, ⌘⏎ shortcut, audit-log integrated. Server-side automation also available for hands-off lodgement with human approval at the declaration page.
Inbound Email
Forward your firm's inbox in
Forward your firm's email address into your per-org ImmiIQ inbound (`inbox+org{N}@in.immiiq.com`). Every client email auto-attaches to that client's communications thread. SPF/DKIM/DMARC compliant.
Send From Your Own Domain
Outbound as you@yourfirm.com.au, DKIM signed
Connect your domain and outbound client emails ship from your firm's address with proper DKIM + SPF + DMARC. Two-stage verification (DNS + sending mailbox), per-tenant deliverability tracking, auto-pause at 3% bounce / 0.08% complaint to protect your sender score with Gmail and Outlook. Inbound replies optionally mirrored to your verified mailbox so the firm keeps an external backup.
AI Document Extraction
Drop a passport. Get structured fields.
Multi-engine extraction reads passports, skills assessments and visa grants into structured client-record fields. Per-field confidence scores, low-confidence highlighted for review, OMARA-grade human accountability preserved.
Webhooks
Real-time events for your stack
Subscribe to client, case, invoice and document events via signed HTTPS webhooks. Five event types, HMAC signature header, delivery logs with retry. Stream updates straight into your data warehouse or BI.
VEVO Lookup
DHA visa-status checks, prefilled
Prefilled VEVO modal - passport + DOB copied straight from the client record. Per-client check or cross-client batch run. Audit-friendly with timestamped responses.
CRICOS / RTO auto-import
Colleges and courses, pulled in for you
The Network module reuses the same CRICOS + RTO pipeline importers that already power occupation search. Add a college by CRICOS code and provider details, campuses and course catalogue arrive prefilled. No manual data entry, no stale rows.
Stripe Connect (partner payouts)
Pay sub-agents directly, zero platform fee
Reuses the Stripe Connect Standard infrastructure that powers client payments. Each sub-agent connects their own Stripe account, you trigger a Transfer from Network > Partners, funds land in their account. Full ledger, receipts and reconciliation.
Xero commission sync
Commission runs to Xero contacts, one click
Push college statement lines and partner payouts straight into Xero as bills and receivables. Contacts auto-created, GST handled. Extends the existing Xero connect flow so the same OAuth session covers CRM invoicing and Network commission.
PIER member portal (QEAC CPD)
QEAC hours tracked next to your OMARA CPD
Sync your QEAC CPD entries from the PIER member portal so QEAC and OMARA continuing professional development sit in one dashboard. Works for practices with QEAC-registered advisers on the education side of the business.
Stripe Payments
Get paid the moment a client books
Stripe Connect Standard means the money lands directly in your own Stripe account - we never touch it and take zero platform fee. Works for appointment prepay and client invoices. Stripe-hosted onboarding, no code and no PCI scope for your firm.
Gmail (two-way sync)
Real inbox in the CRM, no BCC hacks
Connect any Google Workspace mailbox. Inbound + outbound sync every 5 minutes; CRM-composed replies land in your Gmail Sent folder via the provider driver. Attachments, threading and delta cursors handled per-user. Per-org AES-GCM sealed tokens.
Microsoft 365 Email
Two-way Outlook + Exchange sync
Delta-sync every 5 minutes against `/me/mailFolders/inbox` and `/sentitems`. Multi-tenant Azure app, `offline_access` refresh tokens, Graph push notifications when configured. Send-through-provider so outbound emails land in your Outlook Sent folder.
Google Drive backup
Nightly copy of every client + sponsor doc
Bring your own Drive. Files land in a structured tree (Clients/SURNAME, First/NN_Category/YYYY/date_filename.pdf) via app-scoped `drive.file` permission - we only touch folders our app owns. Trigger a full-scan on-demand from settings.
Microsoft OneDrive backup
Same layout, on your OneDrive
Same structured tree as Drive but written to your OneDrive via Microsoft Graph. Nightly nightly backup + manual run-now trigger, encrypted in transit, files organised by client/sponsor + category + year. You own the destination + credentials.
Dropbox backup
Same layout, on your Dropbox
Same structured tree as Drive but written to your Dropbox. Daily backup of every client + sponsor document at an hour you pick, encrypted in transit, files organised by client/sponsor + category + year. Sealed per-org OAuth tokens and a one-click disconnect that revokes ImmiIQ from your linked apps. You own the destination + credentials.
Twilio (Voice + SMS + WhatsApp Business)
Bring your own Twilio for calls, SMS, WhatsApp
One connection, three channels. Outbound calls with recording pulled into the client timeline; SMS + WhatsApp routed through your Messaging Service so quotas hit your Twilio bill, not ours. WhatsApp Business 24-hour session-window guardrail built in.
JustCall
VOIP calls with recordings in the timeline
Bring your own JustCall account for outbound VOIP. Calls dial from the softphone; recordings arrive via webhook and encrypt into R2 before landing on the client's Calls tab. Click-to-call from any phone number in the CRM.
Pro · A$49/mo billed annually
Calendar, Xero, Email, VEVO, Stripe
Every revenue-grade integration except eLodge + AI extraction. Includes three-provider calendar sync (Google, Microsoft 365, Apple iCloud), Stripe Connect card payments direct to your account and inbound email. (A$79/mo monthly.)
Premium · Custom
ImmiAccount eLodge + AI Document Extraction
Auto-fill Australian visa applications. Extract passport / skills assessment / visa grant fields with the hybrid AI pipeline. Bundled with the capacity uplift your firm needs.
Enterprise
Webhooks, custom integrations, SLA
Build your own connectors via signed HTTPS webhooks. Talk to us about MYOB, QuickBooks, Twilio SMS, custom auth.
Frequently asked
Are the integrations included in the price or do they cost extra?
Calendar (Google, Microsoft 365, Apple iCloud), Xero, Inbound Email, Send From Your Own Domain, VEVO Lookup and Stripe Payments are included in every paid plan including Pro (A$49/mo billed annually, A$79/mo monthly). The ImmiIQ eLodge Chrome extension and AI Document Extraction are Premium features - Premium is a custom package, contact us for a price tailored to your firm's capacity. Webhooks are Enterprise.
How are credentials and OAuth tokens stored?
Every connected integration's access + refresh tokens are AES-256-GCM encrypted with a per-organisation HKDF key derived from AUTH_SECRET. Plaintext tokens never touch the database or logs. The encryption is symmetrical between the app server and the Cloudflare worker that pushes events.
Can I disconnect an integration at any time?
Yes. From Settings → Integrations, click Disconnect on any tile. The encrypted token row is deleted from our database immediately and we don't keep any further reference to the connected account. You can also revoke access from your Google/Microsoft/Xero account directly - we handle that gracefully on the next refresh attempt by marking the connection invalid.
What happens when an OAuth token expires?
Access tokens for Google Calendar and Microsoft 365 expire roughly hourly. We store the refresh token alongside and automatically exchange it for a new access token within 60 seconds of expiry. Microsoft rotates refresh tokens on each refresh; we persist the new one. Google reuses the original. Either way, the agent doesn't have to re-auth unless they revoke access on the provider side.
Will my client data leave Australia?
Application data lives on a managed Postgres instance hosted in Sydney (ap-southeast-2). Edge runtime serves the API globally but the database row that holds the encrypted credentials never leaves Australia. OAuth integrations call Google / Microsoft / Xero APIs over HTTPS - those providers route via their own infrastructure but no client PII is sent to them beyond what's intrinsic to the operation (e.g. the attendee email on a calendar invite). Sub-processors are listed in our privacy policy.
Can I build my own integration via webhooks?
Yes. Webhooks are an Enterprise feature. Subscribe to client.created, case.staged, invoice.paid, document.uploaded and webhook.test events. Each delivery carries an HMAC-SHA256 signature in the X-ImmiIQ-Signature header. We retry up to 5 times with exponential backoff and surface the delivery log in your dashboard.
What integrations are coming next?
Twilio (SMS), MYOB (alongside Xero), QuickBooks Online, Zapier (general automation) and a public REST API are on the roadmap. Send us the list of tools your practice depends on and we prioritise based on real customer signal.
Bring the tools you already pay for.
7-day free trial of Premium. Connect everything in five minutes. Cancel any time.