Achilles Buys Australian Contractor Compliance Software Firm Cm3

Achilles, the Bridgepoint-owned supply chain risk provider active in more than 140 countries, has completed its contractor compliance software acquisition of Australian company Cm3, with financial terms undisclosed.

The purchase gives Achilles a contractor management and compliance product with a base in Australia, and it follows Australian regulatory approval of the sale. Wesfarmers, the seller, had said in July that the deal needed Foreign Investment Review Board approval before it could close.

For compliance and risk teams at large Australian employers, the deal puts a widely used contractor platform under a global owner whose core business is supply chain risk data. Contractor oversight has traditionally sat with health and safety teams, while supplier due diligence sat with procurement and compliance. The deal ties the two together in one vendor.

Contractor compliance software acquisition: what closed

Wesfarmers announced on July 24, 2026 that it had agreed to sell Cm3, its contractor management software business, to Achilles. Cm3 sat within the Blackwoods Group, part of the Bunnings division of Wesfarmers.

Achilles has now announced completion. Neither company has disclosed the purchase price. Wesfarmers said it expects to record a gain on sale when the transaction completes, but it did not give a figure.

Cm3 will keep its established teams, according to Achilles. Both companies said in July that they planned a smooth transition with no disruption to current services.

Blackwoods Group chief executive Andrew Bray said at the time that the sale “positions the business for its next phase of growth.” He said Cm3 “has become a significant player in the Australian contractor management market.”

What Cm3 does for contractor compliance

Cm3 sells software that helps organizations onboard contractors and check their compliance and safety credentials before they work on a site. Contractor management software of this kind typically holds licenses, insurance records, training and safety documentation, and lets a host organization verify them before access is granted.

Cm3’s customers come from utilities, manufacturing, finance, property and facilities management, healthcare and education, according to Achilles. These are sectors where outside workers move through sites, plants and buildings that the hiring organization is responsible for.

Neither company has published Cm3’s customer count, revenue or headcount. Cm3 operates in Australia, and the Achilles announcement describes access to Cm3’s established supplier and contractor network across Australia and New Zealand.

Contractor checks sit close to a supplier risk assessment. Both ask whether an outside party can be trusted to operate within an organization’s controls. The difference is that contractor checks focus on people and safety on site, while supplier assessments focus on the company and its supply chain.

Why Achilles wants Asia-Pacific contractor software

Achilles runs supplier assurance and supply chain risk programs for buyers, with a supplier community built around shared due diligence. The company says the Cm3 deal strengthens its contractor assurance capabilities and significantly expands its presence in Australia and the wider Asia-Pacific region.

Bridgepoint, the private equity group, partnered with Achilles in 2021 through Bridgepoint Development Capital and holds a majority stake. Matt Legg, a partner at Bridgepoint, said the firm was “delighted to support Achilles as it continues to execute its international growth strategy.”

The Cm3 purchase is not Achilles’ first contractor deal. In April 2025 the company acquired InfoControl, an AI and contractor management business serving Latin America, whose Contractor Access Evaluation tools complement Achilles’ Controlar product. That deal followed earlier purchases of GoSupply and Global Risk Management Solutions.

Taken together, the three most recent moves show a pattern. Achilles is buying regional contractor software with local customers and building it into a global supplier assurance platform.

How Cm3 will fit with the Achilles platform

Achilles has said the contractor compliance software acquisition will combine Cm3’s workforce safety expertise with its own supply chain intelligence. It plans to keep investing in technology, data and expert-led services.

“Cm3 is a highly respected business with a strong track record of helping organisations manage contractors effectively.” Sebastien Roussotte, Chief Executive Officer, Achilles

Roussotte added that Achilles sees “significant opportunities to combine our expertise, technology and global reach” to deliver more value to customers.

Achilles has not published a product roadmap for Cm3. It has not said whether Cm3 will keep its brand, move onto the Achilles platform or be linked to it by integration. Customers will look for those details, along with any changes to contracts, data hosting and support.

What the deal means for compliance teams

Buyers of contractor software typically want to know three things after a change of owner: where their data sits, whether pricing or terms change, and whether the product continues on its current path. The companies have committed to no disruption to current services. They have not yet addressed the other two points.

The contractor compliance software acquisition also matters for vendor oversight. A customer that holds Cm3 as a critical or high-risk supplier may need to refresh its own due diligence on the new owner. Templates such as the RegTech Post third-party risk management pack cover how organizations structure that review.

The deal also reflects a wider debate about how buyers assemble these tools. Some organizations choose a single suite, while others link specialist platforms by API. RegTech Post has compared those approaches in its analysis of GRC suites and API-linked TPRM platforms, and its review of third-party risk management software platforms sets out the vendor field.

Contractor compliance software has been a smaller niche than supplier risk platforms, and owners of regional products have often been conglomerates rather than specialist vendors. Cm3’s move from a retail and industrial supply group to a risk-focused owner reflects a shift in who builds this category.

What to watch after the Cm3 closing

Wesfarmers will book its gain on sale in its next reported results. Achilles has said it will combine Cm3’s contractor compliance and safety expertise with its supply chain intelligence, and the first sign of that will be any announced product changes for Cm3 customers in Australia and New Zealand.