ASX-LISTED & PE-BACKED

Your board governs financial risk with structured systems. Psychosocial risk deserves the same.

ReFresh is the psychosocial operating system that gives the board structured, continuous visibility into psychosocial risk and gives officers the due diligence evidence the WHS Act requires, from a single system that runs.

Request demo

Request demo

ASX-LISTED & PE-BACKED

Your board governs financial risk with structured systems. Psychosocial risk deserves the same.

ReFresh is the psychosocial operating system that gives the board structured, continuous visibility into psychosocial risk and gives officers the due diligence evidence the WHS Act requires, from a single system that runs.

Request demo

Request demo

trusted by leading ASX & Global enterprises

trusted by leading ASX & Global enterprises

FEATURES

ReFresh gives the board the visibility it does not currently have

ReFresh is the psychosocial operating system that provides ASX-listed and PE-backed organisations with structured, board-ready reporting on psychosocial risk, generated from live operational data rather than assembled manually from disconnected sources. Boards govern risk they can see. If psychosocial risk is reported episodically, the board cannot exercise meaningful oversight, cannot ask informed questions, and cannot verify that management is meeting its obligations. The OS generates governance reporting that shows the compliance posture, the status of controls across teams and sites, and trend data over time, from the same operational data the safety and people teams work with.

For organisations with ESG disclosure obligations, the OS provides the underlying data that supports credible social-pillar reporting. The ability to demonstrate systematic psychosocial hazard management with structured data positions the organisation to report on workforce risk with specificity rather than aspiration. The operating system produces this as a continuous output, not a separate data collection exercise, which means the governance visibility the board receives is current, not retrospective.

Board-ready reporting from live operational data

Compliance posture, control status, and trend data at a glance

ESG social-pillar data produced as a continuous output

No manual data collection or separate reporting exercise

A non-executive director in her late 50s sitting alone in a large, formal boardroom before the other directors arrive, reading a psychosocial risk governance summary that has been placed at her seat. She has arrived early deliberately. The document is open to an interior page showing a structured risk heat map — teams or divisions down one axis, hazard categories across the other, coloured cells indicating severity — visible in pattern and colour but not legible. Her reading glasses are on and she is studying the heat map with the focused, slightly troubled attention of someone seeing an exposure she suspected existed but has never been shown in structured form.

ReFresh gives the board the visibility it does not currently have

ReFresh is the psychosocial operating system that provides ASX-listed and PE-backed organisations with structured, board-ready reporting on psychosocial risk, generated from live operational data rather than assembled manually from disconnected sources. Boards govern risk they can see. If psychosocial risk is reported episodically, the board cannot exercise meaningful oversight, cannot ask informed questions, and cannot verify that management is meeting its obligations. The OS generates governance reporting that shows the compliance posture, the status of controls across teams and sites, and trend data over time, from the same operational data the safety and people teams work with.

For organisations with ESG disclosure obligations, the OS provides the underlying data that supports credible social-pillar reporting. The ability to demonstrate systematic psychosocial hazard management with structured data positions the organisation to report on workforce risk with specificity rather than aspiration. The operating system produces this as a continuous output, not a separate data collection exercise, which means the governance visibility the board receives is current, not retrospective.

Board-ready reporting from live operational data

Compliance posture, control status, and trend data at a glance

ESG social-pillar data produced as a continuous output

No manual data collection or separate reporting exercise

A non-executive director in her late 50s sitting alone in a large, formal boardroom before the other directors arrive, reading a psychosocial risk governance summary that has been placed at her seat. She has arrived early deliberately. The document is open to an interior page showing a structured risk heat map — teams or divisions down one axis, hazard categories across the other, coloured cells indicating severity — visible in pattern and colour but not legible. Her reading glasses are on and she is studying the heat map with the focused, slightly troubled attention of someone seeing an exposure she suspected existed but has never been shown in structured form.

The ReFresh OS produces the officer due diligence evidence the WHS Act requires

ReFresh produces continuous, time-stamped evidence that supports the officer due diligence obligations directors and executives carry under the WHS Act. The duty is personal and non-delegable: officers must demonstrate they took reasonable steps to ensure the organisation is complying with its WHS duties, including the duty to manage psychosocial hazards. The OS maintains a time-stamped audit trail from hazard identification through risk assessment, control implementation, effectiveness monitoring, and governance review, producing the evidence base that supports a due diligence defence.

The stakes are quantifiable. Corporate penalties for WHS breaches can exceed $3.45 million for a single Category 1 offence, and individual officers face a maximum five-year imprisonment for industrial manslaughter. SafeWork NSW has committed $127.7 million in enforcement funding. The average psychological injury claim costs $288,542, mental health claims have increased by 161% over the past decade, and they account for 38% of total workers' compensation costs despite representing 12% of claims. The OS means the evidence of systematic management exists continuously, not only when someone asks for it.

Continuous time-stamped audit trail across the full lifecycle

Due diligence evidence mapped to WHS Act requirements

Personal liability protection through documented reasonable steps

Evidence exists continuously, not only when requested

A CEO in his mid-50s and a general counsel in her late 40s sitting side by side in a private office — his office, judging by the framed photos and the quality of the furniture — reviewing a bound due diligence evidence pack together. The pack is open between them on the desk, and the general counsel is turning pages methodically, pausing at a page showing a structured officer due diligence checklist with dated completion entries and signature fields — visible in layout but not legible. The CEO is watching her review with the attentive stillness of someone who understands that his personal liability depends on what she finds. A second, thinner document — a legal briefing note on WHS officer duties — sits closed on the desk beside the evidence pack, suggesting she brought the legal framework and he produced the evidence.

The OS integrates psychosocial risk into existing governance frameworks

ReFresh integrates psychosocial risk management into existing risk committee, audit committee, and board reporting cycles without requiring a separate governance framework. The OS produces governance reporting designed for these contexts: aggregated across the organisation, trended over time, and categorised against the 17 psychosocial hazard categories under the Code of Practice. The board sees the compliance posture, the status of controls, and trend data without accessing sensitive individual information.

For ASX-listed and PE-backed organisations operating across multiple sectors, the OS applies the governance visibility framework at the board level while the underlying hazard profiles and assessment methodologies are scoped to each business unit. An ASX-listed education provider receives board-level governance reporting with education-specific hazard management at the operational level. An ASX-listed healthcare provider receives the same governance framework with healthcare-specific hazard assessment. The board sees a unified view. Each division manages the hazards specific to its sector. The operating system runs across all of them.

Risk committee and audit committee reporting alignment

Hazard categorisation mapped to the 17 Code of Practice categories

Sector-specific hazard management scoped per business unit

Unified board view across multi-sector operations

A wide, formal shot of a board risk committee meeting in progress in a large, high-quality boardroom — the setting of a publicly listed company. Eight committee members are seated around an oval table. At each place setting, three documents are arranged in a row: a financial risk summary, an operational risk summary, and a psychosocial risk governance summary — each identifiable by a distinctly different header colour and layout, but all sharing the same structural format: RAG indicators, trend lines, key metrics. The three documents at each seat are the same size, the same quality, the same level of detail. The committee chair, a man in his early 60s, is mid-sentence, one hand gesturing across all three documents in front of him — a sweeping motion that treats them as a single governance picture rather than three separate reports. A company secretary is taking notes at the end of the table.

The OS integrates psychosocial risk into existing governance frameworks

ReFresh integrates psychosocial risk management into existing risk committee, audit committee, and board reporting cycles without requiring a separate governance framework. The OS produces governance reporting designed for these contexts: aggregated across the organisation, trended over time, and categorised against the 17 psychosocial hazard categories under the Code of Practice. The board sees the compliance posture, the status of controls, and trend data without accessing sensitive individual information.

For ASX-listed and PE-backed organisations operating across multiple sectors, the OS applies the governance visibility framework at the board level while the underlying hazard profiles and assessment methodologies are scoped to each business unit. An ASX-listed education provider receives board-level governance reporting with education-specific hazard management at the operational level. An ASX-listed healthcare provider receives the same governance framework with healthcare-specific hazard assessment. The board sees a unified view. Each division manages the hazards specific to its sector. The operating system runs across all of them.

Risk committee and audit committee reporting alignment

Hazard categorisation mapped to the 17 Code of Practice categories

Sector-specific hazard management scoped per business unit

Unified board view across multi-sector operations

A wide, formal shot of a board risk committee meeting in progress in a large, high-quality boardroom — the setting of a publicly listed company. Eight committee members are seated around an oval table. At each place setting, three documents are arranged in a row: a financial risk summary, an operational risk summary, and a psychosocial risk governance summary — each identifiable by a distinctly different header colour and layout, but all sharing the same structural format: RAG indicators, trend lines, key metrics. The three documents at each seat are the same size, the same quality, the same level of detail. The committee chair, a man in his early 60s, is mid-sentence, one hand gesturing across all three documents in front of him — a sweeping motion that treats them as a single governance picture rather than three separate reports. A company secretary is taking notes at the end of the table.

Financial materiality that warrants infrastructure, not improvisation

ReFresh enables boards and audit committees to move from estimating psychosocial risk exposure to managing it with the same structured discipline applied to other material risks. The cost of non-compliance extends beyond direct penalties to include increased insurance premiums, investor scrutiny, and reputational exposure in a market where ESG governance is increasingly material. The distinction that matters for governance is not whether the organisation has a psychosocial risk policy but whether it can produce evidence that the policy is being operationalised continuously across every site, team, and hazard category.

The OS makes that distinction operational. The operating system runs the full psychosocial safety lifecycle, risk intelligence, safety orchestration, and governance evidence, as continuous infrastructure rather than an episodic exercise. The board does not need to know how surveys are configured. It needs to know that the organisation has an operating system producing defensible evidence of ongoing psychosocial risk management, and that the system can generate a report for the board on demand. That is what the OS provides.

Centralised psychosocial risk register

Automatic updates from detection sources

Clear risk ownership and review schedules

Traceable links to controls and actions

A CFO in his early 50s sitting alone at his desk in a corner office, late in the afternoon, the city skyline visible through the window behind him in the warm light of approaching sunset. He has a single printed page in front of him — a psychosocial risk financial exposure analysis showing a structured table: divisions down one side, average claim cost, claims frequency, total annual exposure, and a cumulative figure at the bottom — visible in layout and numerical structure but the specific numbers not legible. He is leaning forward, both forearms on the desk, looking at the cumulative figure at the bottom of the page with the expression of a CFO who has just seen a number large enough to change how he thinks about the investment.

SECURITY & COMPLIANCE

Your data.
Always protected.

Your data.
Always protected.

Your data.
Always protected.

Refresh is GDPR, SOC2, & USDP compliant

Refresh is GDPR, SOC2, & USDP compliant

Security standards

We are GDPR, SOC2, and USDP compliant. AWS hosts our app, and we undergo annual third-party audits to ensure platform and infrastructure security.

Security standards

We are GDPR, SOC2, and USDP compliant. AWS hosts our app, and we undergo annual third-party audits to ensure platform and infrastructure security.

Anonymous by design

Sensitive psychosocial information is handled by design. Data is structured and access-controlled so information is only visible where necessary.

Anonymous by design

Sensitive psychosocial information is handled by design. Data is structured and access-controlled so information is only visible where necessary.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

GOT QUESTIONS?

Frequently asked questions

Frequently asked questions

How does the ReFresh OS relate to ESG reporting?

The OS provides the underlying data for credible social-pillar disclosure. Systematic hazard identification, control implementation, and governance oversight, documented continuously, positions the organisation to report on workforce risk with specificity.

We have a GRC platform. Why do we need the ReFresh?

GRC platforms manage governance frameworks. They do not assess psychosocial hazards, track controls, or produce psychosocial-specific evidence. The OS feeds into your GRC structure by producing the underlying data it cannot generate. See the comparison.

How does the board see risk without accessing sensitive data?

The OS provides governance reporting that aggregates operational data into board-appropriate views. Compliance posture, control status, and trends are visible. Individual worker data is not.

What does officer due diligence require?

Officers must demonstrate reasonable steps to acquire WHS knowledge, understand operations and hazards, ensure appropriate resources, and verify compliance. The duty is personal and non-delegable. See the full guide. The OS produces the evidence trail for each element.

How does the governance overlay work across sectors?

The OS applies governance visibility at the board level while hazard profiles are scoped per division. An ASX-listed education provider gets education-specific hazard management with unified board reporting. The board sees one view.

ReFresh gives the board what it needs. Continuously.

ReFresh gives the board what it needs. Continuously.

Request demo

Request demo