Before we get started…
Here are some definitions that might be useful:
Sending service provider (SSP)
(This is us, MessageXchange.)
“An entity (including sole trader), directly connected to the ATO, that only provides the technical service for one or multiple employers, registered agents or payroll software providers to deliver payroll reports to the ATO in the correct technical format or through a permitted technical channel.”
Digital service provider (DSP)
(This is you, the payroll software provider.)
“Software or solution providers that produce digital systems that perform any function within any digital supply chain handling tax payer or superannuation data.”
This stands for External Vendor Testing Environment. This is the ATO’s SBR2 test environment.
A unique number, provided by the ATO, that identifies your software.
Build and test
Production verification test (PVT)
Whitelist for production
Review the ATO’s Business Implementation Guide (BIG)
The BIG outlines the business rules and scenarios for Single Touch Payroll. It will help you to understand the business context around the requirements. You can find the BIG on the ATO’s website.
Request your MessageXchange test credentials
Contact your MessageXchange Account Manager, who will send you your test credentials.
Request your software be whitelisted for Standard Business Reporting (SBR)
Visit at sbr.gov.au to register as a digital service provider (DSP). You will be assigned an ATO Account Manager, who will provide you a testing environment (EVTE) ProductID, conformance suite payloads and documentation.
2. Build and test
Develop the ATO SBR2 XML file
This is the PAYEVNT.0003 (2018) XML file. Alternatively, you can use MessageXchange’s CSV format, which we will convert to the required XML. Ask your MessageXchange Account Manager for the message implementation guide (MIG).
Let us know your EVTE (test) ProductID
We will include this in your test messages to the ATO.
This will enable you test connectivity (sFTP or API) with MessageXchange, then perform end-to-end testing with the ATO’s EVTE environment using the ATO’s conformance suite payloads (a fixed ATO dataset).
3. Security questionnaire
Review the operational framework
Read over the ATO’s Operational Framework and ensure your business complies.
Complete the ATO’s security questionnaire
Complete the ISO27001 self-assessment
Please contact your MessageXchange Account Manager if you need help completing the questionnaire or the ISO27001 self-assessment.
4. Production verification test (PVT)
Certify your service
All payroll software providers (DSPs) are required to complete a Certify your service form to whitelist your service for the production environment.
The ATO will provide you with a new ProductID to conduct production verification testing (PVT) in the ATO’s production channel.
Begin production verification testing (PVT)
Submit your first STP message to the ATO.
- Notify DPO@ato.gov.au with participating employer details
- The ATO will schedule support for PVT
- Lodge the production PAYEVNT for the participating employer
- The ATO will send back receipt of lodgement
- The ATO will verify assessment of lodgment
- You’ll receive acknowledgement of outcome from the ATO.
Once your testing is completed and approved by the ATO, your product will be certified and listed on the SBR Product Register for Single Touch Payroll.
Successfully complete production verification testing (PVT)
Now participating employers are transitioned to Single Touch Payroll!
5. Whitelist for production
Whitelist your software
Once your software has been approved for whitelisting, you and your clients will be able to start transacting production ATO digital services.
6. Go live!
All the setup has been done. Now you’re ready to start moving real messages.
Still searching for a Single Touch Payroll solution?
We have solutions for business with 20 employees, right through to those who process payroll for hundreds of thousands of employees and contactors.