Saasu Pty Ltd

Australia · www.saasu.com · 12 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-08-16 · revision 1

12 direct vendors, 191 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Saasu Pty Ltd exhibits a medium level of migration readiness. Key strengths include its existing cloud infrastructure on Amazon Web Services (AWS) and Rackspace, providing a foundation for further cloud adoption or migration. The presence of a well-documented REST API architecture with OAuth 2.0 and HATEOAS indicates a modular system that should be more amenable to migration or re-platforming compared to a monolithic legacy application. The company's extensive integrations with various e-commerce platforms and payment providers demonstrate experience in managing external dependencies and APIs, which is valuable during a migration project. However, several factors present potential challenges. The core application is built on a .NET server-side framework; while not inherently legacy, migrating a substantial .NET application might require specific expertise or re-architecting if moving to a different technology stack or a more serverless/containerized environment (details on containerization/microservices are not provided). A major unknown is 'Data Residency Requirements,' which, if strict, could significantly limit migration options and add complexity. Furthermore, there is no data on the company's financial stability or growth history, making it difficult to assess its capacity to fund a potentially large-scale migration. While the explicit 'Total Vendors: 0' is anomalous, the inferred use of numerous services (AWS, Rackspace, payment gateways, e-commerce platforms, Zapier/Pabbly) suggests a diverse vendor landscape. This diversity reduces lock-in to a single vendor's ecosystem but also means managing a multitude of integration points and vendor relationships during a migration. The existence of a 'Saasu REST API' with a '.NET client proxy library' implies external consumers who would need to be managed during any API changes or migrations.

Compliance

10 in-scope frameworks identified; showing 3.

Notifiable Data Breaches — Assessment Required

As a cloud accounting SaaS provider storing sensitive financial data (bank feeds, payroll, invoices, tax information) for thousands of Australian small businesses, Saasu is a high-value target for data breaches. The NDB scheme mandates notification to the OAIC and affected individuals when an eligible data breach occurs (i.e., unauthorised access/disclosure of personal information likely to result in serious harm). Risk is High because: (1) Saasu's Terms of Service explicitly acknowledge 'data breaches' as a 'Risk Event' that 'can occur from time to time'; (2) the platform integrates with banks (via Yodlee), payment processors (Stripe, PayPal, eWay), and e-commerce platforms, expanding the attack surface; (3) no public evidence of a formal incident response plan or NDB compliance procedures was found; (4) penalties for failure to notify can reach AUD $50 million under 2022 reforms.

Evidence: https://www.saasu.com/terms/, https://www.oaic.gov.au/privacy/notifiable-data-breaches, https://www.legislation.gov.au/Details/C2017A00012

GDPR (source) — Assessment Required

Saasu's Terms of Service (clause 9) state that 'Saasu also provides Services to Subscribers in other countries but not after 30th June 2019,' indicating that international (including EU) subscriber services were formally discontinued. However, GDPR risk remains Medium rather than Low because: (1) Saasu may still process personal data of EU/EEA residents indirectly (e.g., EU-based customers or employees of Australian businesses using Saasu); (2) the Terms explicitly reference GDPR as a law subscribers must comply with ('European Union General Data Protection Regulations'), acknowledging awareness of EU data subjects; (3) post-OWNA acquisition data flows are unknown; (4) Saasu's API is publicly accessible and could be used by EU-based developers or integrators; (5) enforcement of GDPR's extraterritorial scope (Article 3) applies to any entity offering goods/services to EU residents or monitoring their behaviour, regardless of where the entity is established.

Evidence: https://www.saasu.com/terms/, https://gdpr-info.eu/art-3-gdpr/, https://www.saasu.com/

Australian Consumer Law — Assessment Required

As a SaaS provider selling subscription services to Australian consumers and small businesses, Saasu is subject to the Australian Consumer Law (ACL), which provides statutory guarantees for services including that services will be rendered with due care and skill, be fit for purpose, and be supplied within a reasonable time. Risk is Medium because: (1) Saasu's Terms of Service explicitly reference the Competition and Consumer Act 2010 (Cth) and acknowledge statutory rights; (2) the Terms contain broad liability disclaimers that may conflict with non-excludable ACL guarantees; (3) the ACCC has increased scrutiny of SaaS providers' terms; (4) post-acquisition transition risks could affect service continuity obligations.

Evidence: https://www.saasu.com/terms/, https://www.legislation.gov.au/Details/C2011A00003, https://www.accc.gov.au/consumers/consumer-rights-guarantees/consumer-guarantees

Financials

Three-year financials

Financial Resilience Score: 5/10

Saasu Pty Limited presents a mixed financial resilience profile. On the positive side, the company has approximately 25 years of operating history as one of the earliest cloud accounting SaaS ventures globally, predating Xero. Its recurring subscription-based SaaS revenue model (with published pricing tiers of A$20-A$90/month) typically produces predictable cash flows, and it maintains ATO STP2 compliance which provides a moat in the Australian market. The acquisition by OWNA provides balance-sheet support and cross-sell opportunities via the erly bundle. However, the company faces significant challenges. It operates in an intensely competitive market dominated by much larger, better-capitalised rivals including Xero (ASX:XRO), Intuit QuickBooks, MYOB, and Reckon. As a small Australian proprietary company, no audited financials are publicly available, making independent assessment of liquidity or profitability impossible. The ongoing brand transition to 'erly' introduces customer confusion and churn risk, and dependence on OWNA (whose primary focus is childcare management) may deprioritise Saasu R&D investment. The small scale limits R&D spend relative to competitors, potentially widening the feature gap in AI/automation areas.

Key strengths: 25-year operating history as pioneer in cloud accounting SaaS, Recurring SaaS subscription revenue model with predictable cash flows, Strategic acquisition by OWNA provides balance-sheet support, ATO STP2 compliance provides Australian market moat, Extensive product ecosystem integrations (Stripe, PayPal, Shopify, WooCommerce, etc.), Recognized in Finder Retail Awards 2022 as top-rated business accounting brand, Cumulative $200 billion in transactions processed on platform

Risk factors: Intense competition from Xero, MYOB, Intuit QuickBooks, and Reckon, No public financial disclosure creates opacity for counterparties, Brand transition to 'erly' creates customer confusion and churn risk, Owner concentration risk - OWNA's primary focus is childcare, not accounting, Small scale limits R&D spend versus larger competitors, Widening feature gap risk in AI/automation areas, Geographic concentration - effectively 100% Australia exposure

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report