Australian-hosted · Automation for Microsoft 365

Your repetitive IT & admin work, done in seconds — not days.

Kahaso is an automation platform for your IT and business operations. Submit one form — or fire a trigger — and it runs the whole multi-step job for you: safely, inside your own systems, with every action logged. It starts with Microsoft 365, where most teams feel the pain first, and extends across the rest of your stack.

Microsoft 365 · Entra ID Intune · Autopilot Exchange Online every action logged & timestamped runs inside your own tenant
Live today — and growing

Four automations doing the work, out of the box.

Each one runs a whole multi-step job from a single form submission. A repetitive task that isn't here? We build it on the same platform.

Click any automation to see exactly what runs.

New starters, ready on day one

Accounts, email, licences and the right access — set up automatically before they walk in.

Out of the box, one submission runs:
  • Creates the user in Entra ID and a mailbox in Exchange Online
  • Assigns the right licences and adds them to desired groups
  • Grants role-based app and shared-resource access
  • Sets a secure first sign-in with MFA, and logs every step
Customised to your environment. We map it to your role templates, naming conventions, group structure and welcome process — so it provisions the way you would, every time.

Leavers shut out in seconds

The whole offboarding sequence runs at once — nothing forgotten, nothing left open.

Out of the box, one submission runs:
  • Blocks sign-in and revokes every active session and token
  • Removes licences and strips group & app access
  • Secures the mailbox — convert, delegate or forward per policy
  • Retires the device and writes a full timestamped record
Customised to your environment. Your offboarding policy, grace periods, who inherits the mailbox or forwarding, and manager notifications — all configured to match how your business actually offboards.

New laptops & desktops, hands-free

Mac and Windows devices arrive set up and company-ready — no manual imaging, no desk visit.

Out of the box, each device:
  • Auto-enrols straight into your MDM on first sign-in — Intune for Windows, Jamf for Mac
  • Applies your configuration profiles and security baselines
  • Installs the standard app set for the user's role
  • Is handed over ready to use — the user just signs in with their Microsoft 365 account
Optional: zero-touch supply — we never touch it. Buy the device through us and we handle the whole chain — ordered from the distributor, enrolled in their warehouse, and drop-shipped straight to your staff member. They power on, sign in with their Microsoft 365 details, and it's ready. No imaging, no desk visit, no hands on the box.
Customised to your environment. Your app catalogue, naming scheme, per-team builds and security baselines — across both macOS and Windows, set up the way your fleet is meant to look.

Mailboxes & calendars

Shared mailboxes, delegate access and forwarding — handled cleanly when roles change.

Out of the box, from a single form:
  • Create new mailboxes and shared calendars
  • Manage existing ones as your teams change
  • Add or remove access, delegation and forwarding
  • Every change logged for a clean audit trail
Customised to your environment. Shaped to your access rules and how your teams share inboxes and calendars — handled cleanly whenever roles change.
How it works

One submission. The whole job runs.

Example — what runs the moment a leaver's form is submitted.

  1. Sign-in blocked

    The account's sign-in is disabled the moment the workflow fires, before anything else.

  2. Access & licences removed

    Active sessions and tokens revoked across all devices; group memberships cleared; licences removed.

  3. Mailbox secured

    Forwarding reviewed and disabled, mailbox converted or delegated per policy, out-of-office set.

  4. Logged & confirmed

    Every action timestamped to the immutable audit log; confirmation sent to the submitter.

Why the delay matters

The gap between “they left” and “they're locked out” is where risk lives.

50%

of former-staff accounts are still active more than a day after the person leaves.

Source: OneLogin ex-employee deprovisioning survey

1 in 5

organisations have had a data breach linked to access that wasn't removed in time.

Source: OneLogin ex-employee deprovisioning survey

$4.26M

average cost of a data breach for an Australian business.

Source: IBM Cost of a Data Breach (Australia)

Safe by design

Built to be trusted with the keys.

Data stays in your M365. Kahaso works inside your own Microsoft 365 — your information never leaves it.
Every action recorded. A timestamped log of exactly what ran, ready for audit or compliance.
Each client isolated. Strictly isolated — one company's setup can never touch another's.
Built by experienced hands. Real people with many years of experience across large enterprise environments and smaller local businesses.
Who builds this

Real people who've done this work for years.

Kahaso is built by real people with many years of experience across large enterprise environments and smaller local businesses. We understand the scale of the problem — both for teams where every hour of IT admin is borrowed from someone's other job, and for larger organisations juggling thousands of access changes every month.

This platform runs inside your Microsoft 365 — your data never moves, and every action is logged. We're here to support you directly, as a partner, not through a faceless ticket queue.

Enterprise-grade experience

Built on lessons from large-scale deployments — applied to businesses of every size.

At home with smaller teams

A 20-person business and a 200-person business have different needs, budgets, and tolerance for downtime.

Direct human support

You talk to the people who run the platform, not a support tier.

Roadmap — what's coming next
Optional read · tap to expand the platform roadmap
In build

User Onboarding

Full user onboarding from a single form — available for early-access clients.

Next

Device Deployment · Mailbox & Calendar

Hands-free device provisioning and full mailbox lifecycle management — in active development.

Exploring

More on the way

The platform is growing — additional automation categories are being scoped with early clients.

Always

Custom automations, built for you

The roadmap is partly yours — recurring jobs you raise get scoped and added.

Pricing

One flat monthly fee. No per-seat charges.

Every plan includes all automations, full audit logging and break-fix support. You pay for the volume of work you run — not headcount. All prices exclude GST.

Starter
From
$449
per month
  • All automations included
  • Full audit logging
  • 80 automation credits / month
  • Email support · 8-hr P1 response
  • Monthly health report
  • 80% usage alert
Talk to us
Scale
From
$2,199
per month
  • Everything in Growth
  • 800 automation credits / month
  • Dedicated contact · 2-hr P1
  • After-hours P1 cover
  • Monthly report + custom analysis + quarterly review
  • 3 workflow tweaks / quarter
Talk to us
Enterprise
Custom
Let's talk
 
  • Unlimited automation volume
  • Tailored SLA & cover
  • Unlimited workflow tweaks
  • Named contact
  • Custom reporting
Talk to us
Monthly prices exclude a one-time onboarding & setup fee to build and configure your automations. Onboarding is credited back in full when you sign a 2-year agreement — terms & conditions apply.

All prices exclude GST.

Not sure which plan fits? Talk to us — we'll size it honestly.

Questions

Answers, before you ask.

How does Kahaso access my data?
Kahaso executes inside your existing Microsoft 365 using your own credentials, scoped to exactly the permissions it needs for the tasks you turn on. Nothing is extracted or stored outside your environment — every action is timestamped and logged so you have a complete record.
Can I build custom automations beyond the four modules?
Yes. We scope it and build it on the same platform. Custom automations are available on all tiers — new automations are added as your needs grow.
How does Kahaso coexist with our current IT setup?
Kahaso runs alongside your existing systems and handles the repetitive jobs — it doesn't replace your IT staff or MSP, it frees them from the manual work. There's no proprietary data format, and your Microsoft 365 data never moves into Kahaso.
How is billing calculated?
A flat monthly fee by tier. Each tier includes a monthly automation credit allowance — you pay for the volume of work you run, not per seat. No surprises.
Where is my data hosted?
Kahaso's infrastructure runs on local data centres here in Australia. The automations themselves execute inside your Microsoft 365 — your data never leaves Australia, and every action is logged.
Get started

Let's talk about your automation.

Tell us a little about your environment and we'll come back to you. We'll be honest about whether automation will pay off for you — and what that looks like in practice.

Australia-wide · data hosted onshore

Spam-protected · we reply within one business day