Choosing a provider

What is the best Australian address autocomplete API?

It depends on one thing: whether you need to know an address exists, or that Australia Post will deliver to it. For web forms, checkouts, sign-ups and CRM data, the right category is a G-NAF-based API such as WattleAddr — G-NAF is the authoritative national address file and essentially every Australian provider builds on it, so coverage rarely separates them. For bulk mail lodgement you need an Australia Post AMAS/PAF-certified provider instead, which WattleAddr is not — AMAS certifies against Australia Post’s PAF, a separately licensed dataset that G-NAF does not include. Within the G-NAF category, the differences that change the outcome are where the lookup is processed, whether you are billed per keystroke or per completed address, and whether you can get a data-residency attestation, DPA and purchase-order billing.

What is the cheapest Australian address API?

Look at the billing unit before the rate, because that is where the order-of-magnitude difference lives: autocomplete fires a request on roughly every keystroke, so per-request billing charges eight to twelve times per address found compared with per-session billing. WattleAddr bills one lookup per completed address search regardless of how many characters were typed, bills nothing for a search the customer abandons, and starts at $0 for 5,000 lookups a month with no card required. Paid plans are $53.90/month for 50,000 lookups and $163.90/month for 250,000 — $0.66 per 1,000 at the Growth tier — in Australian dollars including GST ($49 and $149 ex-GST).

Is there a free Australian address autocomplete API?

Yes. WattleAddr’s Free tier is ongoing rather than a time-limited trial: 5,000 lookups a month, no card required, on the same G-NAF data and the same Australian infrastructure as the paid plans, with the search-log privacy controls included. The underlying dataset, G-NAF, is itself open data published by Geoscape Australia — what you pay for is having it indexed, matched and served fast from Australia.

Is there an Australian alternative to Google Places Autocomplete?

Yes — WattleAddr. It replaces Places Autocomplete plus Place Details for the address field on a form: Australian-owned, served entirely from Australian infrastructure, billed in Australian dollars per completed address search rather than per keystroke. The trade-off is coverage. WattleAddr returns Australian physical addresses only, and does not return businesses, landmarks or points of interest. Migration is usually under an hour for a single field; the main change is that street name and street type come back as separate fields where Google returns a combined route.

Does my address API have to be hosted in Australia?

Rarely by law, often by contract. Australian Privacy Principle 8 leaves you accountable for what an overseas recipient does with personal information you disclose to them, and government and regulated buyers routinely require onshore processing outright. The trap specific to autocomplete is that it transmits your end-users’ raw keystrokes to the provider before anyone presses submit — so an offshore autocomplete can quietly break a residency promise you have already made. WattleAddr serves every request from Sydney with an Australian backup and no foreign CDN or offshore edge, and publishes a data-residency attestation for procurement.

When is WattleAddr the wrong choice?

Five cases, and we would rather say so up front. If you lodge bulk mail and want Australia Post discounts, you need an AMAS-certified provider — G-NAF alone cannot get you there, because AMAS certifies against Australia Post’s PAF, a separately licensed dataset. If you need PO Boxes validated, no G-NAF provider can help — that data lives in PAF too; we detect those queries and return an explicit postal_address_unsupported notice rather than an empty dropdown, and do not bill for them. If you have customers outside Australia, we return Australian addresses only. If you need reverse geocoding or a bulk-cleansing endpoint today, the API is four endpoints and has neither. And if you need businesses or landmarks to resolve, you want a places index rather than an address file.

When is WattleAddr the right choice?

When you need to know an Australian address exists, is correctly formatted and where it is — and you need that answered onshore. Five cases: you have told a customer, an auditor or a tender that Australian data stays in Australia, and autocomplete transmits raw keystrokes before anyone presses submit; you sell to government, health or finance and need a DPA and a data-residency attestation you can download today, with an SLA and purchase-order billing available on Enterprise and Government; your form is busy enough that per-keystroke billing hurts, since WattleAddr bills one lookup per completed address search and nothing for an abandoned one; you want the address parsed into storable fields with a per-field verdict, so a checkout can re-prompt for the single field that disagreed; or you want to talk to the people who run it, in your timezone.

Product & scope

What is WattleAddr?

WattleAddr is an Australian address API: autocomplete, verification, standardisation and geocoding, built on the open Geocoded National Address File (G-NAF) and hosted entirely in Australia. You add it to any form so people can type a few characters and pick a real, correctly formatted Australian address.

What can the API do?

Three things: autocomplete (type-ahead suggestions as a user types), verify & standardise (match free-text input to a canonical address with clean components, plus a verdict telling you whether to accept it and a per-field status telling you which field disagreed), and geocode (return latitude and longitude for a matched address).

What can it not do?

WattleAddr confirms that an address exists and where it is. It is not a postal deliverability or mail-house service. It does not provide Australia Post AMAS/PAF certification, DPIDs or barcodes, and must not be relied on to decide whether mail can be delivered. We are deliberately upfront about this so you buy the right tool.

Which addresses are covered?

Every current, geocoded physical address in Australia that appears in G-NAF, the authoritative national address file. It is refreshed quarterly, and each API response tells you which G-NAF release it came from.

Do you support PO Boxes?

No. G-NAF is a register of physical addresses and contains no PO Boxes, GPO Boxes, Locked Bags or Private Bags, so we cannot match them. Rather than showing an empty dropdown, the API detects these and returns a clear postal_address_unsupported notice, does not bill for them, and the widget shows a short message explaining it — so your form can prompt for a street address or accept the PO Box in a separate field. We could confirm the suburb exists, but we have no source telling us a particular box number does, and we would rather return nothing than something we cannot stand behind.

How accurate and current is the data?

The data is sourced from Geoscape Australia’s G-NAF and updated each quarter. We re-ingest each release and swap it in with zero downtime. Because it reflects the national dataset, coverage and formatting are consistent across the country.

How accurate is the matching?

On our own benchmark of randomly sampled G-NAF addresses, a complete Australian address returns the correct record as the top suggestion about 94% of the time, and within the top six about 98% of the time. Partial or misspelt input scores lower. The method and results are published in our repository so the numbers can be checked.

Do you support international addresses?

No. WattleAddr is Australia-only by design. That focus is part of what lets us keep everything onshore and fast.

What’s the difference between autocomplete, verify and geocode?

Autocomplete is for interactive forms (suggestions as someone types). Verify takes a full free-text address and finds the best canonical match, useful for cleaning data you already hold. Geocode returns coordinates for a matched address, for maps, routing or catchment logic.

How do I know whether to trust a verify result?

Every verify response carries a verdict — verified, corrected, ambiguous or unverified — and that is the field to branch on. verified means everything you supplied agrees and no other candidate fits; corrected means it agrees as far as it goes but you abbreviated or left something out; ambiguous means an element was contradicted, part of your input was discarded to get a match, or a runner-up fits equally well, so review it rather than auto-accepting; unverified means nothing usable matched. Alongside it, an elements object gives each field — street number, street name, street type, suburb, state, postcode, unit — its own status, so a checkout can re-prompt for the one field that disagreed instead of the whole address. There is also a 0–100 match_score for your own ranking; we deliberately publish no accept/reject threshold, because the right line depends on what a wrong address costs you. Note this tells you an address exists in G-NAF and where it is, not that mail can be delivered to it.

Data residency & privacy

Where is my data hosted?

Entirely in Australia. Primary infrastructure is in Sydney, with backups held in Australia, on Australian cloud infrastructure (Binary Lane). Nothing is processed or stored offshore today, and the data-residency attestation records that arrangement as at its effective date — ask us for a current copy if you are relying on it for procurement.

Does any data leave Australia?

No, for address data. Address queries are served from Australian infrastructure and are not routed or cached overseas, and there is no foreign CDN or offshore edge in the request path. That is a statement about how the service runs today rather than a promise about every future version of it: if we ever process data outside Australia we will update the data-residency attestation and give notice under the DPA before it happens.

Do you send my customers’ keystrokes to any third party?

No. Unlike some popular autocompletes, your end-users’ input never touches a third-party ad platform. Their addresses stay with us, in Australia.

Do you store the addresses my users type?

By default, queries and matched results are recorded in a per-workspace search log for debugging, usage and support, with configurable retention (for example 7, 30, 90 or 365 days) after which entries are purged. You can also choose, per workspace, to store queries as a salted keyed hash instead of plain text, or to store no query or matched-address text at all.

Can I reduce what’s stored?

Yes, three ways in Settings. You can shorten your search-log retention (query text is purged once that window passes). You can switch the search-log to a keyed-hash mode, where each query is stored as a salted HMAC and the matched address text is not kept — this is pseudonymisation (we hold the key), not anonymisation. Or you can turn off storing query and matched-address text entirely, keeping only counts, timing and billing. Any of these can also be applied to logs already stored.

Are you IRAP certified?

Our infrastructure is architected to support IRAP-aligned workloads, but we do not claim any specific certification. We are precise about this rather than over-claiming.

Are you compliant with the Privacy Act and the APPs?

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. See our Privacy Policy for detail.

Can I get a Data Processing Agreement?

Yes. Our DPA covers our processing of end-user address data on your behalf, all within Australia. It is available to customers and is standard for Enterprise and Government accounts.

Is it suitable for government and regulated industries?

That is exactly who we built it for. All-Australian hosting, configurable retention, a DPA, data-residency attestation and manual/PO billing make WattleAddr a fit where offshore address autocomplete is not allowed.

Getting started & integration

How do I get started?

Create a free account in the console, create a workspace, and grab a publishable key (for the browser) and a secret key (for your backend). Then call the API or drop in the widget. You can be live in minutes.

What’s the difference between secret and publishable keys?

Secret keys authenticate server-side calls and must be kept private (use an Authorization: Bearer header). Publishable keys run in the browser and are locked to the domains you allow, so they can’t be misused elsewhere.

Is there a drop-in widget?

Yes, and three ways to add it. A lightweight JavaScript autocomplete widget attaches type-ahead to any input with a publishable key and handles session tokens for you. Add it with a single <script> tag, install it from npm as @wattleaddr/js, or use the @wattleaddr/react component. You can also call the REST API directly.

Do you have an npm package or a React component?

Yes — two official, typed, MIT-licensed packages. @wattleaddr/js is a zero-dependency SDK with a headless client (works in the browser and in Node 18+) and a drop-in autocomplete widget. @wattleaddr/react adds a useAddressAutocomplete hook and an accessible <AddressAutocomplete> component built on it. Install with "npm install @wattleaddr/react" (or @wattleaddr/js for vanilla JS or your backend); both are documented in the docs.

What platforms and frameworks are supported?

Anything that can make an HTTPS request. The REST API works with any language or framework; the browser widget works with any front-end. We publish official npm packages for JavaScript/TypeScript (@wattleaddr/js) and React (@wattleaddr/react), and an OpenAPI 3.1 spec you can use to generate a client in your own language. E-commerce platform plugins (Shopify, WooCommerce) are on the roadmap.

What are the rate limits?

Each key has a burst limit appropriate to your plan. If you exceed it you’ll get a 429 with a Retry-After header. Monthly usage is governed by your plan’s quota.

Is there a test mode?

Yes. Test-mode keys hit the real engine and the real address data, and they are never billed. They are free for the first 15 days of an account so you can build and evaluate, then you switch to a live key.

Can my team sign in with SSO?

Yes, on Enterprise plans. The console can be pointed at your own identity provider over OpenID Connect — Okta, Microsoft Entra ID, Google Workspace, Auth0 or similar. Accounts are created on first sign-in with a role you choose, your identity provider can never change an existing member’s role or create owners, and you can require SSO so a password cannot be used instead. You verify each email domain by DNS first. This covers console access; your application still authenticates to the API with keys. See the setup guide at /docs/sso.

What happens if a key is leaked?

Rotate or revoke it instantly in the console. Revocation takes effect immediately. We only ever store a prefix and a hash of each key, never the raw value.

Billing & plans

What plans are available?

Four: Free (5,000 lookups/month to try and build), Starter ($53.90/month incl. GST, 50,000 lookups), Growth ($163.90/month incl. GST, 250,000 lookups), both paid plans scale with usage-based overage, and Enterprise/Government (custom volume, residency attestation, DPA, SLA and PO billing).

What counts as a billable lookup?

One address-search session. All the autocomplete keystrokes a person types while finding one address, plus the final selection, collapse into a single billable lookup.

Are autocomplete keystrokes billed?

No. Autocomplete keystrokes are treated as fair-use. You’re only billed for completed lookups, so a busy checkout stays affordable.

What happens if I exceed my quota?

On the Free tier, billable requests stop once you reach the cap (until the next period or an upgrade). On the paid plans (Starter and Growth), you keep going and simply pay overage, with no hard stop. The console shows usage and projections before you get there.

How does overage work?

Starter and Growth each include a monthly allowance of lookups, then bill any extra per 1,000 at the rate shown on the pricing page ($2.75 on Starter, $1.65 on Growth, both including GST). No forced upgrade.

What payment methods do you accept?

Every paid plan is invoiced — we don’t store your card and nothing is ever automatically debited. When you pick a paid plan we email you a tax invoice, and you pay it either by bank transfer or PayID using the invoice number as the reference, or by a one-off card payment in the console. Card details are handled by our Australian payment processor and are not saved, so paying one invoice does not authorise any further payment. Enterprise and Government accounts can also pay against a purchase order.

Can I pay by invoice or purchase order?

Yes — invoicing is the only way we bill. Every paid account gets a valid Australian tax invoice showing our ABN and the GST, payable by EFT or PayID. Enterprise and Government accounts can additionally pay against a purchase order; email billing@wattleaddr.com.au to set that up.

Do prices include GST?

Yes. The headline price on every plan is the total you pay in Australian dollars, GST included: Starter is $53.90/month and Growth $163.90/month. RR Sols Pty Ltd is GST-registered, so the 10% is itemised separately on every invoice rather than added on top of the advertised figure, and each plan also shows its ex-GST price ($49 and $149) for anyone claiming the credit back. Every invoice is a valid Australian tax invoice with the GST itemised and our ABN on it.

Is there a free tier or trial?

Yes. The Free tier is ongoing (not a time-limited trial), with a monthly lookup allowance and no card required.

How do I cancel, and are fees refundable?

You can cancel any time in the console. If you cancel within 7 days of your first payment, that payment is eligible for a full refund — we confirm it against the payment received, then send it by bank transfer — and we cancel any invoice still unpaid. After that window, cancellation takes effect at the end of the period you have already paid for — you are not invoiced again, but that period is not refunded, except where the Australian Consumer Law requires it. See the Refund & Cancellation Policy for the detail.

What is the difference between cancelling and deleting a workspace?

Cancelling stops the billing and drops the workspace to Free — your API keys keep working on the Free allowance, so nothing on your site breaks. Deleting removes the workspace and revokes its API keys immediately, so anything still calling us with those keys stops working straight away. If you only want to stop paying, cancel. Deleting within 7 days of your first payment makes it eligible for a full refund, exactly as cancelling does.

Data, licensing & ownership

Where does the address data come from?

From G-NAF (the Geocoded National Address File), © Geoscape Australia, provided as open data. WattleAddr ingests, indexes and serves it through our API.

Do I need to attribute G-NAF?

Yes. The open G-NAF licence requires a short attribution to Geoscape Australia wherever you surface address data. We provide the exact wording in our docs, and it also appears in our own site footer.

Can I store or cache the addresses I retrieve?

Yes, you can cache a result for your own operational use (for example, saving the address a customer selected). Because G-NAF is refreshed quarterly and identifiers can change between releases, store the returned formatted address and components too, not just the identifier.

Who owns the data?

G-NAF remains the property of Geoscape Australia and its licensors, used under the open licence. You own your application and your data; we don’t claim ownership of the addresses you process.

Reliability, security & support

What’s your uptime and do you offer an SLA?

We publish live status, the G-NAF release we are serving and a daily availability history at wattleaddr.com.au/status, checked from outside our own infrastructure at roughly hourly intervals. That figure excludes nothing, not even announced maintenance, so it is deliberately harsher than the contractual calculation, and any period we did not observe is shown as reduced coverage rather than guessed at. Formal SLAs, with a 99.5% monthly uptime commitment and service credits, are available for Enterprise customers. Our maintenance window is Sundays 01:00–05:00 Australian Eastern time.

Is there a status page?

The API exposes an unauthenticated /v1/status endpoint.

How do I get support?

Free tier has community/email support; Starter and Growth include email support (priority on Growth); Enterprise adds dedicated support. Reach us at support@wattleaddr.com.au.

How do I delete my data or account?

You can delete workspaces and rotate/revoke keys in the console, and adjust search-log retention. To delete your account or request erasure, contact us and we’ll action it subject to any legal retention requirements.

How do you secure API keys and data?

Keys are shown once and stored only as a prefix plus a hash; data is encrypted in transit and hosted on access-controlled Australian infrastructure with least-privilege access, logging and backups. See our Privacy Policy and DPA (Annex B) for detail.

Still have a question?

Start free and see it working, or talk to us about Enterprise and Government needs.