Skip to main content
Create Free Account

ComplyFlow vs Cm3

ComplyFlow vs Cm3: What Each One Does Best.

Cm3 prequalifies contractors through its own qualified Assessors and now sells site access, inductions, and permits. ComplyFlow, Sydney-based since 2009, puts contractors, Workers, and sites on one record, judged by your people. Here is where each is stronger.

Checked against both vendors’ own pages, 29 September 2026

The Short Answer.

Cm3 runs a managed prequalification service, with its Assessors reviewing each contractor’s evidence against your requirements, and sells site access, inductions, and a permit to work. ComplyFlow runs prequalification, site access, permits, incidents, plant, and inspections on one record, with AI you set up to read a submission against your criteria before your own people approve.

  • Both prequalify contractors and run site access, inductions, and permits. Cm3 added a Permit To Work built into Cm3 OnSite, announced on 30 June 2026.
  • The real difference is who does the judging. Cm3’s Assessors review each contractor’s evidence for you. With ComplyFlow your own people approve, section by section, after AI you have set up has read the answers against your criteria.
  • Cm3 names no incident, plant, or inspection product. Its solutions page lists 11 products, read 29 September 2026. ComplyFlow carries all three on the same record as the prequalification.
A facilities coordinator checks a technician’s permit on a tablet in a building plant room, a fire extinguisher and switchboard behind them

Side by Side

What Each One Sells.

Capabilities, not opinions: each row is what a vendor’s own site describes or does not, read on 29 September 2026.

Cm3Read from cm3.com.au, 29 September 2026 ComplyFlowOne record, your standard
Contractor prequalification Built in Your form, your criteria, your approvers, per category
Assessment by the vendor’s own qualified assessors Built in No; your people approve, with the AI assessment beside the submission
A marketplace of contractors to search Built in No directory; contractors on ComplyFlow bring their records
Online inductions Built in Site and company inductions, with training and courses
Site access and visitor sign-in Built in Live Access, kiosk, QR, and visitor sign-in on one record
Digital permits to work Built in A reviewer per section, crews sign in to the active permit
SWMS reviewed Built in Read by AI against your criteria; your people approve
Insurance verification Built in Expiry turns the status the day it lapses
Modern slavery and chain of responsibility Built in A form section routed to legal, like any other
Incident management Not there Notifiable incident records restricted, actions owned and dated
Plant and equipment register Not there Plant with its own documents, categories, and inspections
Inspections and audits Not there Scheduled and mobile, offline, every failure an owned action
AI review of submitted answers and files Not there Per question, against your criteria, before a person approves
An MCP server for your AI assistant Not there ChatGPT, Claude, or Copilot; read-only if you want it to be
An API with published documentation Partly REST API documented in the Help Centre, plus MCP
Prices published Not there AU$35* per Worker and AU$100 per company listed; Enterprise quoted

Checked against cm3.com.au on 29 September 2026, every solution, industry, and contractor page in its sitemap, its terms, and its 2026 posts included, and against complyflow.com. A cross means none of the 60 Cm3 pages read names such a product, which is not the same as saying it cannot be done. On prices, one rule for both columns: Partly means some prices are listed and the rest quoted, and a cross means no price is published; ComplyFlow lists its Worker licence and prequalification and quotes Enterprise. Cm3’s template library gives contractors inspection checklists to use, and its prequalification page’s product data lists automated verification of licences, insurances, and competencies; neither is an inspection product or an AI claim. The API row reads partly because Cm3 describes 'a robust API' and publishes no developer documentation on its site. Confirm with Cm3 before you decide.

Where Each One Wins

The Honest Version, Both Ways.

Choose Cm3 When You Want Someone Else to Do the Assessing.

Cm3 employs qualified Assessors who review each contractor’s licences, qualifications, insurances, and samples of completed work against its assessment scheme, and runs a marketplace of contractors it has already assessed. If your contractors are already on Cm3, and prequalification, inductions, site access, and permits are the whole of the job, Cm3 is built for that.

  • Qualified Assessors review the evidence for you
  • A marketplace of contractors already assessed
  • OnSite, Induct, and a Permit To Work since June 2026
A safety assessor at his desk reading through a contractor’s safety management system file in a ring binder, a laptop open beside him

Choose ComplyFlow When Your People Make the Call.

A contractor category in ComplyFlow carries its own form, its own document list, its own inductions, and its own approvers. Insurances go to procurement, the safety system goes to WHS, modern slavery goes to legal, and each section clears separately. AI reads the answers and files, a SWMS included, against the criteria you write, and shows its reasons first. It reviews a SWMS; it never writes one.

  • Your form and your criteria, per contractor category
  • A different reviewer for each section of the form
  • AI reads first; your people approve

And When the Incident, the Plant, and the Inspection Are the Same Record.

When a subcontractor’s Worker is involved in a near miss, ComplyFlow already holds who employs them, whether their induction was current, which licences they held, and what time they signed in. The plant they were using has its own record, documents, and inspection history. Cm3’s solutions page names no incident, plant, or inspection product, so that part of the record sits in another system.

  • Incidents against the Worker you prequalified and admitted
  • Plant and equipment with documents and inspection history
  • Inspections offline on a phone, every failure an owned action

And When the Question Is Price.

Cm3 publishes no dollar figure; its contractor FAQ says the fee is tiered by Business Risk Profile and covers unlimited clients for one year. ComplyFlow lists its Worker licence and prequalification prices on its pricing page and quotes its Enterprise plans.

  • AU$35 a year* per Worker, valid with every Client
  • AU$100 a year per company for an AI-reviewed prequalification, where a Client asks for one
  • Enterprise plans quoted against your own numbers

What You Would Add

Three Modules Not in the Cm3 Catalogue.

Cm3’s solutions page names none of these three. Every item links to the Help Centre article that documents it.

Incidents

Plant & Equipment

Inspections & Audits

All three sit on the same record as the prequalification, the induction, and the gate sign-in.

Questions

Questions People Ask About Cm3 and ComplyFlow.

Is Cm3 only a prequalification service?

No. Its solutions page lists 11 products, including Cm3 OnSite for site access and visitor management, Cm3 Induct for online inductions, insurance verification, modern slavery and chain of responsibility tools, and a Permit To Work built into OnSite, announced on 30 June 2026. Read 29 September 2026.

How does Cm3’s assessment work?

Cm3 runs it for you. A contractor sets up a Business Risk Profile and submits licences, qualifications, insurances, and samples of completed documentation, and Cm3’s qualified Assessors review them against its assessment scheme. Its prequalification page offers pass or fail submissions based on your requirements, and Cm3 Lite, a standardised document check for low-risk contractors. ComplyFlow’s prequalification is your own form, approved by your own people after AI reads it against your criteria.

How much does Cm3 cost a contractor?

Cm3 publishes no dollar figure. Its contractor FAQ describes a tiered structure calculated from the contractor’s Business Risk Profile, and says it is 'one fee, for one year, for unlimited clients'.

Does Cm3 use AI?

Its product pages name none, read 29 September 2026; Cm3 describes its prequalification as experienced Assessors qualified to make careful judgements. Its prequalification page’s product data does list automated verification of licences, insurances, and competencies. ComplyFlow puts an AI agent on the form questions you choose, a SWMS included, which reads answers and files against your criteria and shows its reasons; your people approve. It reviews a SWMS and never writes one.

Who owns Cm3?

Wesfarmers, as part of the Blackwoods Group in its Bunnings division. Wesfarmers has agreed to sell it to Achilles, subject to Foreign Investment Review Board approval, according to Wesfarmers’ lawyers (3 August 2026). Achilles announced the agreement on 24 July 2026, expects it to close in the coming months, and says both companies are committed to a smooth transition for customers with no disruption to current services. Cm3’s own site still describes it as part of the Wesfarmers group, read 29 September 2026. If you are signing a multi-year agreement, ask Cm3 about roadmap and pricing through the change.

What happens to our data if we leave Cm3?

Cm3’s standard terms and conditions say your data remains your property, and that Cm3 must provide an extract in SQL, XML, or CSV if you ask during the agreement or within 90 days after it ends; after those 90 days it may delete the data. They also let a subscriber adversely affected by a change to the terms end the agreement by written notice within 60 days of the notice or the change, whichever is later. Check your own contract document.

How does ComplyFlow connect a supplier, a Worker, and a work order?

Your maintenance or work-order system reads the supplier’s compliance through the API before it releases a job: cleared, and the Worker signs in to the order; not cleared, and your system holds it with the reason on the supplier’s record. The status is the same wherever it is read, and a Worker who is not cleared for the location will not be able to sign in until it is resolved, unless the site is set to allow Sign in Anyway, which notifies the client. The Inspection app records the work, and the open API reads and writes work orders and inspections. Read 1 October 2026.

Can we run both?

You can. One shape is Cm3 continuing to prequalify a panel already on it, with ComplyFlow carrying site access, permits, incidents, plant, and inspections. It is still two records for one contractor, which is the cost you are accepting. ComplyFlow’s REST API and MCP access exist partly so that cost is smaller. Whatever you run, ask what happens between the systems: whether a work order can see the supplier’s status, and whether the gate checks it again when the Worker arrives.

Bring a Contractor You Already Prequalify. We Will Do It Live.

A 30-minute session on your own panel: one of your contractor categories built in front of you, a supplier invited, and their prequalification followed from the form to approval. No slides.

  • ISO 27001
  • Hosted on AWS
  • Microsoft & Okta SSO
  • API & MCP
  • Data in Australia

Compliance you can prove, instantly.

Every capability on this page was read off Cm3’s own live website and ComplyFlow’s on 29 September 2026. Neither vendor’s own performance statistics are repeated here, and no Cm3 price appears unless Cm3 publishes it. Software moves; confirm current detail with Cm3 before you decide.