Psychosocial compliance you can stand behind
Australian organisations have a legal duty to identify, manage, and evidence psychosocial risk. ReFresh turns that duty into a defensible operation, replacing spreadsheet compliance with the system boards and regulators actually expect.
Psychosocial compliance you can stand behind
Australian organisations have a legal duty to identify, manage, and evidence psychosocial risk. ReFresh turns that duty into a defensible operation, replacing spreadsheet compliance with the system boards and regulators actually expect.
Built with organisational psychologists and WHS compliance specialists. Trusted by Aussie companies.
Built with organisational psychologists and WHS compliance specialists. Trusted by Aussie companies.
Built with organisational psychologists and WHS compliance specialists. Trusted by Aussie companies.
Three pillars.
One compliance posture.
RIsk intelligence
Know what's there before it escalates
Surveys aligned to all 17 psychosocial hazard categories, combined with continuous monitoring of workplace communication patterns. A living picture of risk across roles, teams, and sites, built on structured data rather than annual snapshots.
Continuous monitoring, not once-a-year measurement.
compliance orchestration
Turn identified risks into a systematic response
Every risk gets controls with named owners, defined timelines, and scheduled reviews. ReFresh tracks implementation evidence and monitors whether controls are working, across every site and jurisdiction, from a single system.
Configurable by location. Rolled up to one national view.
governance & evidence
Prove you acted systematically, on demand
Time-stamped audit trails tracing every hazard from identification through control implementation and review. Board-ready reports and regulator-aligned evidence packs produced in minutes, not assembled retrospectively.
End-to-end traceability. Inspection-ready when it matters.
Three pillars.
One compliance posture.
RIsk intelligence
Know what's there before it escalates
Surveys aligned to all 17 psychosocial hazard categories, combined with continuous monitoring of workplace communication patterns. A living picture of risk across roles, teams, and sites, built on structured data rather than annual snapshots.
Continuous monitoring, not once-a-year measurement.
ACCESS RISK
Turn identified risks into a systematic response
Every risk gets controls with named owners, defined timelines, and scheduled reviews. ReFresh tracks implementation evidence and monitors whether controls are working, across every site and jurisdiction, from a single system.
Configurable by location. Rolled up to one national view.
governance & evidence
Prove you acted systematically, on demand
Time-stamped audit trails tracing every hazard from identification through control implementation and review. Board-ready reports and regulator-aligned evidence packs produced in minutes, not assembled retrospectively.
End-to-end traceability. Inspection-ready when it matters.
Three pillars.
One compliance posture.
RIsk intelligence
Know what's there before it escalates
Surveys aligned to all 17 psychosocial hazard categories, combined with continuous monitoring of workplace communication patterns. A living picture of risk across roles, teams, and sites, built on structured data rather than annual snapshots.
Continuous monitoring, not once-a-year measurement.
compliance orchestration
Turn identified risks into a systematic response
Every risk gets controls with named owners, defined timelines, and scheduled reviews. ReFresh tracks implementation evidence and monitors whether controls are working, across every site and jurisdiction, from a single system.
Configurable by location. Rolled up to one national view.
governance & evidence
Prove you acted systematically, on demand
Time-stamped audit trails tracing every hazard from identification through control implementation and review. Board-ready reports and regulator-aligned evidence packs produced in minutes, not assembled retrospectively.
End-to-end traceability. Inspection-ready when it matters.
Your ReFresh ROI
Your ReFresh ROI
Your ReFresh ROI
how it works
From zero to defensible in weeks,
not months
Most organisations spend months assembling a psychosocial compliance program from disconnected tools and consultants. ReFresh gets you to a structured, evidenced compliance posture in weeks, then keeps it running.
HOW IT WORKS
Get clarity on your psychosocial risk position
Most organisations spend months assembling a psychosocial compliance program from disconnected tools and consultants. ReFresh gets you to a structured, evidenced compliance posture in weeks, then keeps it running.
how it works
From zero to defensible in weeks,
not months
Most organisations spend months assembling a psychosocial compliance program from disconnected tools and consultants. ReFresh gets you to a structured, evidenced compliance posture in weeks, then keeps it running.
Weeks 1-2
Weeks 3-4
Ongoing
Weeks 1-2
Weeks 3-4
Ongoing
Get setup
Confirm jurisdictions, frameworks, and obligations
Capture risks through surveys and incident data
Map existing controls, consultations, and evidence
Get setup
Confirm jurisdictions, frameworks, and obligations
Capture risks through surveys and incident data
Map existing controls, consultations, and evidence
1 hour
See your baseline
View your psychosocial risk and governance posture across the organisation
Identify where controls, evidence, and review cycles need strengthening
Prepare leadership-ready insights and priorities for action
See your baseline
View your psychosocial risk and governance posture across the organisation
Identify where controls, evidence, and review cycles need strengthening
Prepare leadership-ready insights and priorities for action
6 hours
Stay defensible
Continuous risk monitoring as your workforce and obligations evolve
Board-ready reports and regulator-aligned evidence packs on demand
Every action time-stamped and audit-trailed
Stay defensible
Continuous risk monitoring as your workforce and obligations evolve
Board-ready reports and regulator-aligned evidence packs on demand
Every action time-stamped and audit-trailed
24 hours
15+ INTEGRATIONS
Connects to your existing systems
ReFresh can integrate with existing HRIS, WHS, and people systems where it adds value. Integrations are optional and configured based on your organisation's needs, ensuring ReFresh fits into your current environment rather than forcing change.
15+ INTEGRATIONS
Connects to your existing systems
ReFresh can integrate with existing HRIS, WHS, and people systems where it adds value. Integrations are optional and configured based on your organisation's needs, ensuring ReFresh fits into your current environment rather than forcing change.
SECURITY & COMPLIANCE
Your data.
Always protected.
Your data.
Always protected.
ReFresh is GDPR, SOC2, & USDP compliant
SECURITY & COMPLIANCE
Your data.
Always protected.
ReFresh is GDPR, SOC2, & USDP compliant
Your data. Always protected.
ReFresh is SOC 2, GDPR, and Australian Privacy Act compliant, with privacy and security built into every layer of the platform.
Your data. Always protected.
ReFresh is SOC 2, GDPR, and Australian Privacy Act compliant, with privacy and security built into every layer of the platform.
Secure by design
Features end-to-end encryption and independent security audits. ReFresh maintains enterprise-grade protection for all organisational data.
Secure by design
Features end-to-end encryption and independent security audits. ReFresh maintains enterprise-grade protection for all organisational data.
Private and permission-based
Role-based access ensures sensitive information is only visible to the right people.
Private and permission-based
Role-based access ensures sensitive information is only visible to the right people.
Your data. Always protected.
ReFresh is SOC 2, GDPR, and Australian Privacy Act compliant, with privacy and security built into every layer of the platform.
Secure by design
Features end-to-end encryption and independent security audits. ReFresh maintains enterprise-grade protection for all organisational data.
Private and permission-based
Role-based access ensures sensitive information is only visible to the right people.
OUR PARTNERS
OUR PARTNERS
Meet the ReFresh partner system
Meet the ReFresh partner system
Meet the ReFresh partner system
We connect you to trusted solution providers in compliance, wellbeing, and workplace safety. Our marketplace helps you find partners when you need additional support.
We connect you to trusted solution providers in compliance, wellbeing, and workplace safety. Our marketplace helps you find partners when you need additional support.
Learning and development insights
Psychosocial safety and regulatory protection
Empowering organisations through online safety training
Employee assistance and crisis response
All-in-one global people and payments platform
GOT QUESTIONS?
Frequently asked questions
Frequently asked questions
What is psychosocial risk?
Psychosocial risk refers to workplace conditions that could cause psychological harm to workers. Australian WHS regulators have identified 17 specific hazard categories, including: * Job demands and workload * Low role clarity * Poor support from supervisors or colleagues * Workplace bullying, harassment, and conflict * Organisational change * Remote or isolated work * Traumatic events and exposure to violence These hazards are now regulated under WHS legislation across Australia, which means organisations have a legal duty to identify, assess, and control them, just as they do for physical safety hazards.
Which regulatory bodies apply to my organisation?
It depends on where you operate. ReFresh covers psychosocial compliance across five countries: Australia SafeWork Australia sets the national Code of Practice. State regulators (SafeWork NSW, WorkSafe Victoria, etc.) handle enforcement. ComCare adds a layer for Commonwealth employers, and Fair Work covers related employment obligations. United Kingdom The Health and Safety Executive (HSE) expects employers to assess and manage psychosocial risks using its Management Standards framework, backed by the Health and Safety at Work Act 1974 and the Management of Health and Safety at Work Regulations 1999. Canada CAN/CSA-Z1003 is the national standard for psychological health and safety. The Canada Occupational Health and Safety Regulations require hazard prevention programmes that include psychosocial risks, with enforcement handled at the provincial level. Singapore The Workplace Safety and Health Act 2006 covers psychosocial hazards, enforced by the Ministry of Manpower (MOM). New Zealand The Health and Safety at Work Act 2015 defines health as including mental health. WorkSafe New Zealand enforces compliance and has published Good Practice Guidelines for managing psychosocial risks. ISO 45003 provides internationally recognised guidelines across all jurisdictions. ReFresh tracks every applicable framework in one platform, so you can see exactly which obligations apply wherever you operate.
Are audits actually happening? Which organisations are being targeted?
Yes, audits are happening now: * SafeWork NSW has committed $127.7 million over four years and is recruiting 51 new inspectors, including 20 dedicated psychosocial inspectors and 5 psychosocial investigators. * Random and reactive: regulators are conducting both random audits and investigations triggered by worker complaints. * No single industry: audits are occurring across sectors including professional services, education, healthcare, and ASX-listed organisations. The regulatory posture has shifted from guidance to enforcement, which is why having a continuously maintained evidence base matters more than ever.
What are the actual fines and consequences for non-compliance?
Penalties vary by jurisdiction, but they are substantial: Fines for WHS breaches can reach $500,000 or more for organisations, and officers can face personal liability including criminal charges in serious cases. Average fine: the average SafeWork penalty for a psychosocial breach sits around $380,000. Claim costs: a single psychological injury claim averages approximately $288,000, roughly four times the cost of a physical injury claim. Enforcement is scaling: SafeWork NSW alone has increased its psychosocial audit budget by $121 million and added 51 new auditors specifically for psychosocial compliance.
Does having the right systems actually protect us, or are executives still liable regardless?
Regulators assess whether you had reasonable systems in place and followed them. This is a process-based assessment, not an outcomes-based one. SafeWork and equivalent bodies want to see that you: * Identified hazards * Assessed risks * Implemented controls * Consulted workers * Reviewed your approach on an ongoing basis If you can demonstrate that you did those things systematically and documented them, that constitutes a defensible position. No system eliminates all risk, but having structured, evidenced processes is exactly what regulators expect when they inspect.
Does this apply to our contractors and offshore teams, or just Australian employees?
Under SafeWork and state WHS regulators, the obligation covers workers, which is broadly defined and includes: * Employees * Contractors and subcontractors * Labour hire workers * Outworkers, apprentices, trainees, and work experience students * Volunteers Offshore teams are generally not covered under Australian psychosocial safety legislation. However, the Fair Work Act may extend to offshore workers where there is a sufficient connection to Australia. A 2025 Fair Work Commission decision found a Philippines-based worker engaged by an Australian employer was covered by unfair dismissal protections, and this is an evolving area of law. Many organisations, particularly those that are ASX-listed, choose to roll out compliance across their entire workforce globally. It comes down to your risk appetite. ReFresh supports both Australian-only and global rollouts.
How is ReFresh different from hiring a consultant?
Consultants provide valuable point-in-time advice, but they cannot provide continuous compliance evidence. The key differences: * Consultants typically deliver a risk assessment report, a set of recommendations, and then leave. The organisation is responsible for implementing, tracking, and evidencing everything afterwards. * ReFresh provides an ongoing system that maintains your compliance posture continuously, with automated legislation tracking, control monitoring, and board reporting. * Evidence gap: regulators do not just want to see that you identified risks once; they want to see that you are managing them on an ongoing basis. A consultant engagement from 18 months ago does not demonstrate current compliance. Many organisations use both: a consultant for specialist advice and ReFresh as the system that operationalises and evidences the ongoing work.
How is ReFresh different from an engagement survey tool?
Engagement surveys and psychosocial compliance surveys serve different purposes: * Engagement surveys (Culture Amp, Officevibe, Peakon) measure how people feel about their work, their manager, and the organisation. They are useful for culture and retention but are not designed to meet WHS regulatory requirements. * ReFresh surveys are structured around the 17 psychosocial hazard categories and generate the specific data regulators expect to see as part of a hazard identification process. * Beyond surveys: ReFresh also covers risk assessment, control tracking, incident management, consultation, legislation updates, and board reporting. An engagement survey tool covers one step of a multi-step regulatory obligation. ReFresh can sit alongside your engagement survey tool. They serve different jobs.
Do we need ReFresh if we already have an EAP?
Yes. An EAP and ReFresh serve fundamentally different functions: * EAPs provide reactive, individual-level support when an employee is experiencing personal or workplace difficulties. * ReFresh addresses the organisational compliance obligation: identifying hazards, assessing risks, implementing controls, and producing governance-ready evidence. Having an EAP does not demonstrate that you have identified and managed psychosocial hazards in the workplace. Regulators assess whether you have a systematic approach to hazard identification and control, which is what ReFresh provides. Think of it this way: your EAP supports individuals after harm occurs; ReFresh helps you prevent the conditions that cause harm in the first place.
How fast can we get set up?
Most organisations move through setup quickly: * Week 1: configure your organisational structure, activate compliance frameworks, and import existing documentation. * Weeks 2–4: full compliance mapping including risk scenarios, first survey, and control setup. * Ongoing: continuous monitoring, automated legislation updates, and board reporting from day one. We also offer a hands-on onboarding service where the ReFresh team comes in (online or in person) and sets everything up with you, including HRIS integrations.
GOT QUESTIONS?
Frequently asked questions
What is psychosocial risk?
Psychosocial risk refers to workplace conditions that could cause psychological harm to workers. Australian WHS regulators have identified 17 specific hazard categories, including: * Job demands and workload * Low role clarity * Poor support from supervisors or colleagues * Workplace bullying, harassment, and conflict * Organisational change * Remote or isolated work * Traumatic events and exposure to violence These hazards are now regulated under WHS legislation across Australia, which means organisations have a legal duty to identify, assess, and control them, just as they do for physical safety hazards.
Which regulatory bodies apply to my organisation?
It depends on where you operate. ReFresh covers psychosocial compliance across five countries: Australia SafeWork Australia sets the national Code of Practice. State regulators (SafeWork NSW, WorkSafe Victoria, etc.) handle enforcement. ComCare adds a layer for Commonwealth employers, and Fair Work covers related employment obligations. United Kingdom The Health and Safety Executive (HSE) expects employers to assess and manage psychosocial risks using its Management Standards framework, backed by the Health and Safety at Work Act 1974 and the Management of Health and Safety at Work Regulations 1999. Canada CAN/CSA-Z1003 is the national standard for psychological health and safety. The Canada Occupational Health and Safety Regulations require hazard prevention programmes that include psychosocial risks, with enforcement handled at the provincial level. Singapore The Workplace Safety and Health Act 2006 covers psychosocial hazards, enforced by the Ministry of Manpower (MOM). New Zealand The Health and Safety at Work Act 2015 defines health as including mental health. WorkSafe New Zealand enforces compliance and has published Good Practice Guidelines for managing psychosocial risks. ISO 45003 provides internationally recognised guidelines across all jurisdictions. ReFresh tracks every applicable framework in one platform, so you can see exactly which obligations apply wherever you operate.
Are audits actually happening? Which organisations are being targeted?
Yes, audits are happening now: * SafeWork NSW has committed $127.7 million over four years and is recruiting 51 new inspectors, including 20 dedicated psychosocial inspectors and 5 psychosocial investigators. * Random and reactive: regulators are conducting both random audits and investigations triggered by worker complaints. * No single industry: audits are occurring across sectors including professional services, education, healthcare, and ASX-listed organisations. The regulatory posture has shifted from guidance to enforcement, which is why having a continuously maintained evidence base matters more than ever.
What are the actual fines and consequences for non-compliance?
Penalties vary by jurisdiction, but they are substantial: Fines for WHS breaches can reach $500,000 or more for organisations, and officers can face personal liability including criminal charges in serious cases. Average fine: the average SafeWork penalty for a psychosocial breach sits around $380,000. Claim costs: a single psychological injury claim averages approximately $288,000, roughly four times the cost of a physical injury claim. Enforcement is scaling: SafeWork NSW alone has increased its psychosocial audit budget by $121 million and added 51 new auditors specifically for psychosocial compliance.
Does having the right systems actually protect us, or are executives still liable regardless?
Regulators assess whether you had reasonable systems in place and followed them. This is a process-based assessment, not an outcomes-based one. SafeWork and equivalent bodies want to see that you: * Identified hazards * Assessed risks * Implemented controls * Consulted workers * Reviewed your approach on an ongoing basis If you can demonstrate that you did those things systematically and documented them, that constitutes a defensible position. No system eliminates all risk, but having structured, evidenced processes is exactly what regulators expect when they inspect.
Does this apply to our contractors and offshore teams, or just Australian employees?
Under SafeWork and state WHS regulators, the obligation covers workers, which is broadly defined and includes: * Employees * Contractors and subcontractors * Labour hire workers * Outworkers, apprentices, trainees, and work experience students * Volunteers Offshore teams are generally not covered under Australian psychosocial safety legislation. However, the Fair Work Act may extend to offshore workers where there is a sufficient connection to Australia. A 2025 Fair Work Commission decision found a Philippines-based worker engaged by an Australian employer was covered by unfair dismissal protections, and this is an evolving area of law. Many organisations, particularly those that are ASX-listed, choose to roll out compliance across their entire workforce globally. It comes down to your risk appetite. ReFresh supports both Australian-only and global rollouts.
How is ReFresh different from hiring a consultant?
Consultants provide valuable point-in-time advice, but they cannot provide continuous compliance evidence. The key differences: * Consultants typically deliver a risk assessment report, a set of recommendations, and then leave. The organisation is responsible for implementing, tracking, and evidencing everything afterwards. * ReFresh provides an ongoing system that maintains your compliance posture continuously, with automated legislation tracking, control monitoring, and board reporting. * Evidence gap: regulators do not just want to see that you identified risks once; they want to see that you are managing them on an ongoing basis. A consultant engagement from 18 months ago does not demonstrate current compliance. Many organisations use both: a consultant for specialist advice and ReFresh as the system that operationalises and evidences the ongoing work.
How is ReFresh different from an engagement survey tool?
Engagement surveys and psychosocial compliance surveys serve different purposes: * Engagement surveys (Culture Amp, Officevibe, Peakon) measure how people feel about their work, their manager, and the organisation. They are useful for culture and retention but are not designed to meet WHS regulatory requirements. * ReFresh surveys are structured around the 17 psychosocial hazard categories and generate the specific data regulators expect to see as part of a hazard identification process. * Beyond surveys: ReFresh also covers risk assessment, control tracking, incident management, consultation, legislation updates, and board reporting. An engagement survey tool covers one step of a multi-step regulatory obligation. ReFresh can sit alongside your engagement survey tool. They serve different jobs.
Do we need ReFresh if we already have an EAP?
Yes. An EAP and ReFresh serve fundamentally different functions: * EAPs provide reactive, individual-level support when an employee is experiencing personal or workplace difficulties. * ReFresh addresses the organisational compliance obligation: identifying hazards, assessing risks, implementing controls, and producing governance-ready evidence. Having an EAP does not demonstrate that you have identified and managed psychosocial hazards in the workplace. Regulators assess whether you have a systematic approach to hazard identification and control, which is what ReFresh provides. Think of it this way: your EAP supports individuals after harm occurs; ReFresh helps you prevent the conditions that cause harm in the first place.
How fast can we get set up?
Most organisations move through setup quickly: * Week 1: configure your organisational structure, activate compliance frameworks, and import existing documentation. * Weeks 2–4: full compliance mapping including risk scenarios, first survey, and control setup. * Ongoing: continuous monitoring, automated legislation updates, and board reporting from day one. We also offer a hands-on onboarding service where the ReFresh team comes in (online or in person) and sets everything up with you, including HRIS integrations.
Want to learn more?