For psychologists, counsellors & allied health
Your clients tell you everything. Make sure no one else ever hears it.
CCA Shield is the cyber, cloud & AI protection built for private practice. We lock down your email, files, devices and AI — and give you proof you can show anyone who asks.
The 90-second Practice Check
Do all your logins — email, client software, cloud — need a second step to sign in, like a code on your phone?
Want us to check your email protection — live?
Email is the #1 way practices get hit. Add your practice domain and we'll check whether SPF and DMARC are switched on.
We use your domain to check public DNS records. If you add your email, we'll send your draft and follow up about it — nothing else. Privacy policy
Your proof draft is ready.
Your answers stay in this browser. Rather talk? Book 15 minutes →
What's at stake
In a practice built on trust, a breach isn't an IT problem.
It's a referral problem, a registration problem, and a sleep-at-night problem. Most of it is invisible until the day it isn't.
The clock you didn't know was running
In New Zealand the Privacy Commissioner expects serious breaches to be reported within 72 hours. In Australia you must notify as soon as practicable. "I didn't know" isn't a defence under either Act.
It won't be a hooded hacker
It'll be a session note pasted into ChatGPT, a laptop left in a car, or one password reused across five logins. The everyday slip is how practice data walks out the door.
The asset you can't re-earn
Your practice runs on word-of-mouth and trust. That's what a breach damages first — and no insurer can pay it back.
So think of this less as IT spend, and more as reputation insurance for the only thing your practice can't replace.
Where the check leads
One page that proves you've done the right thing.
Every Shield practice gets a plain-English proof of protection, aligned to the Essential Eight. Show it to clients, funders or your insurer — and know exactly what's covered. More cyber insurers now expect controls like MFA and tested backups before they'll pay out.
- 01Check — 13 questions, about 90 seconds. Your score, free.
- 02Close the gaps — we fix what the check found, most in the first few weeks.
- 03Get your proof — one page, kept current, ready when anyone asks.
What we protect
Four things, handled — so you can stop thinking about them.
Your practice runs on more technology than you realise. We own the four areas that keep it safe and running — the same four lines on your proof.
Security
MFA, secure email, locked-down access. The things that stop someone pretending to be you.
Protection
Real backups you can actually restore. Lose a laptop, keep working tomorrow.
Connection
Internet and wifi that work when you need them, with clients and guests kept apart.
Efficiency
Safe AI and automation that give you time back — without experimenting on client privacy.
AI, done safely
Use AI in your practice — without feeding it your clients.
Your team is probably already using AI. The risk isn't the tool; it's what gets pasted into it. Here's how we stop that.
Control which tools are allowed
We set the approved tools and block the risky ones — consumer chatbots, random extensions, free note-takers.
Stop sensitive data leaving
Data-loss rules catch the moment a client's details are about to be pasted somewhere they shouldn't go.
Give you a safe AI instead
A properly set-up AI that summarises and drafts for you, without the data leaving your secure environment.
Plain-English rules
A one-page "what you can and can't put into AI", so everyone knows where the line is.
Simple, honest pricing
Priced per person. No hourly surprises.
You pay for protection, not an IT department on the phone. Set your team size to see your monthly cost.
We manage the technology behind the practice. Includes your proof of protection, kept current. ex-GST · NZD
- Everything in Essential
- Included support (~2 hrs/person/month, pooled)
- Monitoring, access reviews, one-click offboarding
- Essential Eight Maturity Level 1–2, evidenced
Protect the essentials. Built for confident solos. Minimum $59/month, support at $140/hr.
- MFA, identity protection, secure email
- Managed antivirus/EDR, cloud backup, device protection
- Shield dashboard + proof of protection (ML1)
Protected — plus safe AI and automation that give time back. Custom builds quoted separately.
- Everything in Managed
- Safe in-practice AI for notes and drafting + AI governance
- Priority support (~4 hrs/person/month) + automations
Plus a one-off $597 onboarding. Microsoft 365 is billed separately, at cost (roughly $25–$40 per person). All prices per person, per month, ex-GST, NZD — indicative, confirmed on your call. Australian practices billed in AUD at equivalent rates.
Honest answers
The questions practitioners actually ask.
I'm just me. Do I really need this?
If your practice runs on a laptop, email and client files in the cloud, you already have an IT environment — you just don't have anyone owning it. This is built for exactly that: one person, sensitive data, no time to become a security expert.
Isn't it already secure? It's all in Microsoft / the cloud.
Microsoft secures their platform — not your settings, your access, your backups, or what happens when a laptop walks out the door. That gap is what we close, and then we prove it's closed.
What exactly is the proof of protection?
A one-page, plain-English summary of the controls in place across Security, Protection, Connection and Efficiency, aligned to the Essential Eight. We keep it current. It's aligned, not certified — and we're not lawyers — but it gives you a straight answer when a client, funder or insurer asks.
Can you guarantee I'll never be hacked?
No honest provider can. We make you a far harder target, catch problems faster, and give you a real recovery path — plus proof you're doing the right thing.
What happens on the call?
A straight 15 minutes. We go through your check, show you the gaps we'd fix first, and tell you whether we're even the right fit. No pressure, no lecture.
Find out where you stand — before someone else does.
No jargon, no pressure, and we'll tell you honestly if you don't need us.