Governance
Go from disconnected safety documentation to seamless WHS-first workflows of psychosocial risk. Map compliance, schedule audits, generate reports, and track effectiveness, with full role-based access, data integrity, and regulator-ready audit trails over time.
Connect every signal of psychosocial risk
Move away from disconnected surveys, inbox reports, and manual registers. ReFresh brings psychosocial risk identification, surveys, incident reporting, severity rating, and more into one integrated detection system, giving organisations a single, defensible view of psychosocial risk.
What this enables
Link incident reports, survey results, and early concerns in one system
Maintain a comprehensive record of detected psychosocial hazards
Identify patterns and emerging risks across teams and locations
Surface concerns through appropriate channels while protecting worker confidentiality
Produce clear, audit-ready evidence for boards and regulators
Detection data is structured, centralised, and aligned to WHS workflows, so nothing is missed and everything is traceable.
Built-in detection
Detect psychosocial risk with structured, compliant processes.
ReFresh brings psychosocial risk detection into one structured system. Deploy flexible risk surveys, manage incident reporting, and capture concerns without complex configuration. Build workflows for issue escalation, supervisor notification, and internal review, all maintaining appropriate confidentiality settings.
No more disconnected surveys or spreadsheets.
No more unclear reporting pathways or missing records.
GOT QUESTIONS?
Frequently asked questions
What is officers' due diligence, and how does ReFresh help with it?
Under WHS legislation, officers (directors and senior executives) have a personal duty of due diligence. This means they must take reasonable steps to ensure the organisation is meeting its WHS obligations. For psychosocial risk, this includes: * Staying informed: understanding the nature and operations of the business, and the psychosocial hazards associated with them. * Understanding obligations: knowing what the law requires in relation to psychosocial safety. * Ensuring resources: making sure the organisation has appropriate resources and processes to manage psychosocial risk. * Ensuring compliance: verifying that the organisation is actually complying with its obligations. ReFresh supports officers' due diligence by providing real-time visibility into the organisation's psychosocial compliance posture, automated board reporting, and a documented evidence trail that demonstrates the organisation is taking systematic action. If an officer is ever asked to demonstrate their due diligence, the platform provides the evidence to support that.
Is the organisation now responsible for the mental health of its employees?
The obligation is specifically about managing psychosocial hazards in the workplace, not about taking on responsibility for an individual's overall mental health. Organisations are required to: * Identify workplace conditions that could cause psychological harm (such as excessive workload, bullying, poor role clarity, or organisational change). * Assess the level of risk those conditions create. * Implement reasonable controls to eliminate or minimise them. This is the same duty of care framework that has always applied to physical hazards, now extended to psychosocial ones. ReFresh helps you meet this obligation by providing a structured system for each step of that process.
What should we present to our board about psychosocial risk?
Boards need a clear, concise view of your organisation's psychosocial risk position. At a minimum, board reporting should cover: * Overall risk posture: a summary score or rating across the organisation. * Top risks: the highest-rated psychosocial hazards and the teams or locations most affected. * Control status: what has been implemented, what is in progress, and what is overdue. * Incident trends: the number and nature of psychosocial incidents over the reporting period. * Regulatory changes: any legislative updates that affect the organisation's obligations. * Recommendations: specific actions the board should be aware of or endorse. ReFresh generates all of this automatically in a board-ready format. The report was designed in consultation with board directors to ensure it covers the information governance teams actually need, without requiring WHS expertise to interpret.
Can ReFresh generate board reports? How long does that take?
Yes. ReFresh automatically generates quarterly psychosocial risk reports from the data already in the platform. Reports include: * Executive summary with overall psychosocial safety scores * Survey results broken down by team and risk category * Incident analysis and trends * Risk rankings across all 17 hazard categories * Summary of controls implemented and their current status The report is generated in minutes, not days. You can use the automated template as-is or customise it using the document builder. The board reporting module was designed in consultation with board directors to ensure it covers exactly what governance teams need to see.
What do regulators actually ask for during an inspection?
While each regulator has its own approach, psychosocial inspections typically focus on whether you can demonstrate the following: * Hazard identification: how did you identify psychosocial hazards in your workplace? What methods did you use? * Risk assessment: how did you assess the level of risk each hazard presents? * Controls: what controls have you implemented, and how do you know they are working? * Consultation: did you consult with workers when identifying hazards and deciding on controls? * Review: how often do you review your approach, and what triggers a review? * Documentation: can you produce evidence of each of the above steps? ReFresh produces all of this documentation continuously, so you are not assembling it for the first time when an inspector arrives.
What happens if we get audited? How does ReFresh help?
ReFresh maintains a continuous, time-stamped evidence trail that traces every hazard through the full lifecycle: * Identification * Risk assessment * Control implementation * Worker consultation * Ongoing review If a regulator conducts an audit, you can invite them directly into the platform or export an evidence pack that shows exactly what you did, when you did it, and why. You can also run internal audits through the platform to stay prepared between external inspections.
What compliance frameworks does ReFresh support?
ReFresh supports frameworks across multiple jurisdictions: * Australia: SafeWork Australia Code of Practice for Managing Psychosocial Hazards at Work, ISO 45003, ComCare guidance, and state-specific WHS regulations. * International: UK, Canada, Singapore, Hong Kong, and New Zealand frameworks for organisations with global operations. * Automatic updates: when legislation changes, the platform updates automatically and notifies you if any of your existing policies, controls, or documentation need to change.
Where is our data stored?
All data is stored in Australia through AWS: * Redundant copies are maintained for business continuity, but all data remains within Australian data centres. * This meets requirements for organisations that hold Australian government contracts or operate under data sovereignty obligations. * For organisations that need documentation for IT or procurement teams, we provide access to our trust centre with full details on data architecture, security practices, and certifications.
