Every tool your practice runs on. One workspace.
Calendar, accounting, ImmiAccount eLodge, inbound email, AI document extraction - connect the integrations you already pay for. Encrypted OAuth, audit-logged and disconnect-anytime.
Integrations
Plug in the tools you already use.
One-click OAuth or workspace install. Tokens encrypted at rest with a per-organisation HKDF key. Disconnect any time without losing a trace of what was synced.
Google Calendar
Bookings sync straight to your calendar
When a client books a slot via your lead form, an event lands on your Google Calendar in seconds - with attendee emails, agenda and reminders. Encrypted OAuth tokens, no third-party access.
Microsoft 365 (Outlook)
The same flow, for the Microsoft stack
Bookings push to your Outlook calendar via Microsoft Graph. Multi-tenant + personal accounts both supported. Tokens auto-refresh; revocation is one-click from the settings page.
Apple Calendar (iCloud)
iCloud calendars over CalDAV
Sign in with your Apple ID email and an app-specific password from appleid.apple.com. No admin OAuth review, no provider keys. CalDAV discovers your calendars and you pick the one bookings write to. Bookings sync into whichever calendar you already live in - Google, Microsoft 365 or Apple iCloud.
Xero
Invoicing without the double-entry
OAuth 2 connect, 15-minute polling sync. Per-client invoice flow from CRM. Cross-client status from Accounting. Contacts auto-created on first invoice. Australian GST handled.
QuickBooks Online
The same two-way sync, for the firm on QuickBooks
OAuth 2 connect to one company, hourly polling sync. Clients and sponsors become customers, sent invoices carry the item and tax code you mapped, payments post to your deposit account and balances come back. A firm connects Xero or QuickBooks, never both.
ImmiAccount eLodge
Auto-fill the form. One click per page.
Chrome extension that fills DHA ImmiAccount visa applications from your client records in your own browser. Fifteen subclasses, an identity check before every fill, ⌘⏎ shortcut, every fill audited to your workspace. You stay signed in and you press submit - ImmiIQ never holds your ImmiAccount login.
Inbound Email
Forward your firm's inbox in
Forward your firm's email address into your per-org ImmiIQ inbound (`inbox+org{N}@in.immiiq.com`). Every client email auto-attaches to that client's communications thread. SPF/DKIM/DMARC compliant.
Send From Your Own Domain
Outbound as you@yourfirm.com.au, DKIM signed
Connect your domain and outbound client emails ship from your firm's address with proper DKIM + SPF + DMARC. Two-stage verification (DNS + sending mailbox), per-tenant deliverability tracking, auto-pause at 3% bounce / 0.08% complaint to protect your sender score with Gmail and Outlook. Inbound replies optionally mirrored to your verified mailbox so the firm keeps an external backup.
AI Document Extraction
Drop a passport. Get structured fields.
Multi-engine extraction reads passports, skills assessments and visa grants into structured client-record fields. Per-field confidence scores, low-confidence highlighted for review, OMARA-grade human accountability preserved.
Webhooks
Real-time events for your stack
Subscribe to client, case, invoice and document events via signed HTTPS webhooks. Five event types, HMAC signature header, delivery logs with retry. Stream updates straight into your data warehouse or BI.
VEVO Lookup
DHA visa-status checks, prefilled
VEVO checks filled from the client record under whichever of the five travel documents the client holds - passport, ImmiCard, Convention Travel Document, DFTTA or PLO56 Evidence Card. VEVO Agent or, with the client's recorded authorisation, the third-party enquiry any ImmiAccount can make. Per-client check or cross-client batch. Audit-friendly with timestamped responses.
CRICOS / RTO auto-import
Colleges and courses, pulled in for you
The Network module reuses the same CRICOS + RTO pipeline importers that already power occupation search. Add a college by CRICOS code and provider details, campuses and course catalogue arrive prefilled. No manual data entry, no stale rows.
Stripe Connect (partner payouts)
Pay sub-agents directly, zero platform fee
Reuses the Stripe Connect Standard infrastructure that powers client payments. Each sub-agent connects their own Stripe account, you trigger a Transfer from Network > Partners, funds land in their account. Full ledger, receipts and reconciliation.
Xero commission sync
Commission runs to Xero contacts, one click
Push college commission accruals into Xero as draft invoices and paid partner payouts as draft bills, from Accounting > Sync. Uses the same Xero connection as client invoicing, so it comes with the Xero add-on.
Stripe Payments
Get paid the moment a client books
Stripe Connect Standard means the money lands directly in your own Stripe account - we never touch it and take zero platform fee. Works for appointment prepay and client invoices. Stripe-hosted onboarding, no code and no PCI scope for your firm.
Gmail (two-way sync)
Real inbox in the CRM, no BCC hacks
Connect any Google Workspace mailbox. Inbound + outbound sync every 5 minutes; CRM-composed replies land in your Gmail Sent folder via the provider driver. Attachments, threading and delta cursors handled per-user. Per-org AES-GCM sealed tokens.
Microsoft 365 Email
Two-way Outlook + Exchange sync
Delta-sync every 5 minutes against `/me/mailFolders/inbox` and `/sentitems`. Multi-tenant Azure app, `offline_access` refresh tokens, Graph push notifications when configured. Send-through-provider so outbound emails land in your Outlook Sent folder.
Google Drive backup
Nightly copy of every client + sponsor doc
Bring your own Drive. Files land in a structured tree (Clients/SURNAME, First/NN_Category/YYYY/date_filename.pdf) via app-scoped `drive.file` permission - we only touch folders our app owns. Trigger a full-scan on-demand from settings.
Microsoft OneDrive backup
Same layout, on your OneDrive
Same structured tree as Drive but written to your OneDrive via Microsoft Graph. Nightly nightly backup + manual run-now trigger, encrypted in transit, files organised by client/sponsor + category + year. You own the destination + credentials.
Dropbox backup
Same layout, on your Dropbox
Same structured tree as Drive but written to your Dropbox. Daily backup of every client + sponsor document at an hour you pick, encrypted in transit, files organised by client/sponsor + category + year. Sealed per-org OAuth tokens and a one-click disconnect that revokes ImmiIQ from your linked apps. You own the destination + credentials.
Twilio (Voice + SMS + WhatsApp Business)
Bring your own Twilio for calls, SMS, WhatsApp
One connection, three channels. Outbound calls with recording pulled into the client timeline; SMS + WhatsApp routed through your Messaging Service so quotas hit your Twilio bill, not ours. WhatsApp Business 24-hour session-window guardrail built in.
JustCall
VOIP calls with recordings in the timeline
Bring your own JustCall account for outbound VOIP. Calls dial from the softphone; recordings arrive via webhook and encrypt into R2 before landing on the client's Calls tab. Click-to-call from any phone number in the CRM.
Facebook Pages and Instagram Business
Approved posts publish to your own Page and account
One connection covers your firm's Facebook Page and the Instagram Business account linked to it. Social Studio publishes single pictures and carousels after an admin approves each one, links every published post to the live one and shows how it did. ImmiIQ never posts to a personal profile and disconnecting erases the credential on the spot.
LinkedIn Pages
Built and with LinkedIn for review
Publishing to your firm's LinkedIn page is built and LinkedIn is reviewing the app. The tile is visible in Settings and labelled In review and it cannot be connected until that clears. Nothing about your Facebook and Instagram publishing waits on it.
Pro · A$49/mo billed annually
Email, VEVO, Stripe and AI extraction
Stripe Connect card payments direct to your own account, inbound email, sending from your own domain, VEVO lookups and AI document extraction from your AI query allowance. (A$79/mo monthly.)
Add-ons · any plan
Xero, QuickBooks and ImmiAccount eLodge
Xero sync A$19/mo or QuickBooks sync A$19/mo - or either one inside Accounting at A$29/mo. Fill Australian visa applications in your own browser with the eLodge Chrome extension (A$19/mo).
Add-on · any plan
Webhooks
Build your own connectors via signed HTTPS webhooks for A$19/mo. Tell us which tools your practice depends on and we prioritise what firms ask for.
Frequently asked
Are the integrations included in the price or do they cost extra?
Inbound Email, Send From Your Own Domain, VEVO Lookup, Stripe card payments and AI document extraction are included in Pro (A$79/mo or A$49/mo billed annually). Xero sync (A$19/mo) and QuickBooks sync (A$19/mo) are add-ons. Accounting (A$29/mo) includes either one. The ImmiIQ eLodge Chrome extension is a A$19/mo add-on and Webhooks are A$19/mo. Any plan can add them in Billing.
How are credentials and OAuth tokens stored?
Every connected integration's access and refresh tokens are sealed with AES-256-GCM under a key derived per organisation, so one firm's credential cannot be read with another firm's. A plaintext token never touches the database or a log line and every service that has to use one unseals it the same way - there is one encryption, not one per surface.
Can I disconnect an integration at any time?
Yes. From Settings → Integrations, click Disconnect on any tile. The encrypted token row is deleted from our database immediately and we don't keep any further reference to the connected account. You can also revoke access from your Google/Microsoft/Xero/QuickBooks account directly - we handle that gracefully on the next refresh attempt by marking the connection invalid.
What happens when an OAuth token expires?
Access tokens for Google Calendar and Microsoft 365 expire roughly hourly. We store the refresh token alongside and automatically exchange it for a new access token within 60 seconds of expiry. Microsoft rotates refresh tokens on each refresh; we persist the new one. Google reuses the original. Either way, the agent doesn't have to re-auth unless they revoke access on the provider side.
Will my client data leave Australia?
Application data lives on a managed Postgres instance hosted in Sydney (ap-southeast-2). Edge runtime serves the API globally but the database row that holds the encrypted credentials never leaves Australia. OAuth integrations call Google / Microsoft / Xero / QuickBooks APIs over HTTPS - those providers route via their own infrastructure but no client PII is sent to them beyond what's intrinsic to the operation (e.g. the attendee email on a calendar invite). Sub-processors are listed in our privacy policy.
Can I build my own integration via webhooks?
Yes, with the Webhooks add-on (A$19/mo, any plan, added in Billing). Subscribe to client.created, case.staged, invoice.paid, document.uploaded and webhook.test events. Each delivery carries an HMAC-SHA256 signature in the X-ImmiIQ-Signature header. We retry up to 5 times with exponential backoff and surface the delivery log in your dashboard.
What integrations are coming next?
Send us the list of tools your practice depends on and we prioritise new integrations on what firms actually ask for. Until then, Webhooks carry client, case, invoice and document events to any system that accepts HTTPS.
Bring the tools you already pay for.
7-day free trial of Pro. Connect everything in five minutes. Cancel any time.