FINANCIAL SERVICES

Your board sees financial risk in real time. Psychosocial risk is invisible until a claim lands.

ReFresh is the psychosocial operating system that gives financial services firms structured visibility into psychosocial risk, so your compliance and people teams spend less time assembling evidence and more time on the work that matters.

Request demo

Request demo

FINANCIAL SERVICES

Your board sees financial risk in real time. Psychosocial risk is invisible until a claim lands.

ReFresh is the psychosocial operating system that gives financial services firms structured visibility into psychosocial risk, so your compliance and people teams spend less time assembling evidence and more time on the work that matters.

Request demo

Request demo

trusted by leading ASX & Global enterprises

trusted by leading ASX & Global enterprises

FEATURES

The risk your board cannot see with the same clarity as every other risk

Financial services firms in Australia are required to manage psychosocial hazards under the WHS Act, a separate obligation from AFSL, APRA, and AML frameworks that requires its own evidence trail. Most firms have not yet operationalised psychosocial compliance for financial services as a structured discipline. The board governs financial risk, operational risk, and cyber risk with systems that produce continuous, auditable data. Psychosocial risk is governed with engagement surveys, EAP referrals, and ad hoc HR processes that were never designed for this purpose. The gap is not intent; it is infrastructure.

ReFresh is the psychosocial operating system that produces the same structured, continuous data for psychosocial risk that you already expect for every other material risk category, covering all 17 hazard categories under the Code of Practice. Financial services firms understand systematic hazard management as infrastructure, not overhead. Psychosocial hazard management under the WHS Act is the same discipline applied to a different hazard class. The OS produces that evidence as a continuous output, structured for the regulatory standard, so the board can see psychosocial risk with the same specificity it sees financial and operational risk. For a deeper look at the regulatory framework, see the psychosocial compliance guides.

Board-level psychosocial risk visibility for the first time

Structured data across all 17 hazard categories

Continuous output, not periodic assessment

Integrates into existing risk committee reporting

A senior executive (woman, 40s–50s) standing alone at a glass wall in a high-rise office, looking out at the city below. She is holding a tablet loosely at her side, not looking at it. The reflection in the glass is faintly visible. The mood is contemplative, like someone aware that something important is not yet measured. Natural light, late afternoon warmth. Shallow depth of field. Shot from behind and slightly to the side. No logos, no text. Quiet, editorial tone.

The risk your board cannot see with the same clarity as every other risk

Financial services firms in Australia are required to manage psychosocial hazards under the WHS Act, a separate obligation from AFSL, APRA, and AML frameworks that requires its own evidence trail. Most firms have not yet operationalised psychosocial compliance for financial services as a structured discipline. The board governs financial risk, operational risk, and cyber risk with systems that produce continuous, auditable data. Psychosocial risk is governed with engagement surveys, EAP referrals, and ad hoc HR processes that were never designed for this purpose. The gap is not intent; it is infrastructure.

ReFresh is the psychosocial operating system that produces the same structured, continuous data for psychosocial risk that you already expect for every other material risk category, covering all 17 hazard categories under the Code of Practice. Financial services firms understand systematic hazard management as infrastructure, not overhead. Psychosocial hazard management under the WHS Act is the same discipline applied to a different hazard class. The OS produces that evidence as a continuous output, structured for the regulatory standard, so the board can see psychosocial risk with the same specificity it sees financial and operational risk. For a deeper look at the regulatory framework, see the psychosocial compliance guides.

Board-level psychosocial risk visibility for the first time

Structured data across all 17 hazard categories

Continuous output, not periodic assessment

Integrates into existing risk committee reporting

A senior executive (woman, 40s–50s) standing alone at a glass wall in a high-rise office, looking out at the city below. She is holding a tablet loosely at her side, not looking at it. The reflection in the glass is faintly visible. The mood is contemplative, like someone aware that something important is not yet measured. Natural light, late afternoon warmth. Shallow depth of field. Shot from behind and slightly to the side. No logos, no text. Quiet, editorial tone.

The fastest-growing claims category in financial services, and the hazards driving it

Mental health claims in Australian financial services are growing faster than in any other sector, with the average serious psychological injury claim costing $288,542. These claims take five times longer to resolve than physical injuries, and workers return at approximately half the rate. The drivers are structural hazards endemic to the sector: high job demands with long-hours culture, poor work-life boundaries, job insecurity during restructuring, inadequate reward and recognition, conflict, and intrusive surveillance from performance monitoring systems. Psychosocial compliance for AFSL-regulated firms requires identifying and managing these hazards systematically, not responding to them after a claim is lodged.

ReFresh identifies psychosocial hazards by prevalence and severity across teams, offices, and business units through structured assessment, not ad hoc surveys. Confidential reporting pathways with role-based access controls ensure sensitive concerns are documented defensibly without compromising the trust that financial services organisations depend on. The system is designed for organisations where the compliance or people function leads this work alongside existing regulatory obligations, not as a separate safety exercise.

Hazards identified before they become claims

Prevalence and severity scoring across teams and offices

Confidential reporting with role-based access controls

Designed for compliance-led teams managing multiple frameworks

A close-up of two financial services professionals (man and woman, 30s) in business attire, sitting across from each other at a small meeting table in a modern office. One is explaining something with a hand gesture, the other is listening intently. Papers or a laptop between them. The scene suggests a difficult workforce conversation being had properly. Natural office lighting, slightly warm. Medium depth of field. No logos, no text. Candid, not posed.

Governance reporting that meets the standard your officers are personally liable for

Directors and officers of Australian financial services firms carry a personal, non-delegable duty under the WHS Act to ensure psychosocial hazards are managed. Director liability for psychosocial hazards is not an organisational risk; it is a personal one. The Category 1 maximum includes five years’ imprisonment for individuals. ReFresh produces continuous, time-stamped evidence that supports the officer due diligence standard: a documented audit trail from hazard identification through risk assessment, control implementation, effectiveness monitoring, and governance review.

ReFresh produces psychosocial risk board reporting designed for risk committees, audit committees, and compliance oversight functions. Compliance posture across the organisation, the status of controls, and trend data over time are aggregated into board-appropriate views without exposing individual worker information. For firms with ASX listing obligations, ReFresh supports credible social-pillar ESG disclosure with systematic, continuous data rather than point-in-time assessments. The evidence base exists continuously, supporting the due diligence defence without requiring a separate data collection exercise when a question is asked.

Personal officer liability evidence produced continuously

Risk committee and audit committee reporting alignment

ESG social-pillar data as a continuous output

Aggregated views without individual worker data exposure

Two professionals (mixed gender, business attire) walking side by side through the lobby of a modern Australian office building, mid-conversation. Glass and concrete architecture. One is carrying a folder, the other has a phone. The mood is purposeful, forward-moving, collegial. Natural light streaming through the lobby windows. Shot at a slight distance, full body framing. No logos, no text. The feel is "people who are already doing this, moving on to the next thing." Clean editorial style.

Governance reporting that meets the standard your officers are personally liable for

Directors and officers of Australian financial services firms carry a personal, non-delegable duty under the WHS Act to ensure psychosocial hazards are managed. Director liability for psychosocial hazards is not an organisational risk; it is a personal one. The Category 1 maximum includes five years’ imprisonment for individuals. ReFresh produces continuous, time-stamped evidence that supports the officer due diligence standard: a documented audit trail from hazard identification through risk assessment, control implementation, effectiveness monitoring, and governance review.

ReFresh produces psychosocial risk board reporting designed for risk committees, audit committees, and compliance oversight functions. Compliance posture across the organisation, the status of controls, and trend data over time are aggregated into board-appropriate views without exposing individual worker information. For firms with ASX listing obligations, ReFresh supports credible social-pillar ESG disclosure with systematic, continuous data rather than point-in-time assessments. The evidence base exists continuously, supporting the due diligence defence without requiring a separate data collection exercise when a question is asked.

Personal officer liability evidence produced continuously

Risk committee and audit committee reporting alignment

ESG social-pillar data as a continuous output

Aggregated views without individual worker data exposure

Two professionals (mixed gender, business attire) walking side by side through the lobby of a modern Australian office building, mid-conversation. Glass and concrete architecture. One is carrying a folder, the other has a phone. The mood is purposeful, forward-moving, collegial. Natural light streaming through the lobby windows. Shot at a slight distance, full body framing. No logos, no text. The feel is "people who are already doing this, moving on to the next thing." Clean editorial style.

Your peers in asset management have already operationalised this. The gap is now visible.

Australian asset managers and superannuation funds are among the first financial services sub-sectors to implement structured psychosocial safety infrastructure. Psychosocial compliance for asset management and superannuation firms is now an operational reality, not a future consideration. The governance gap between firms that can produce evidence of systematic hazard management and firms that are still responding reactively is becoming visible to regulators, auditors, and the market. Competitive dynamics in financial services are transparent; when your peers move from reactive compliance to a structured operating system, the gap in your own governance is exposed. SafeWork NSW has committed $127.7 million in enforcement funding with 51 additional inspectors.

ReFresh runs the full psychosocial safety lifecycle as continuous infrastructure: risk intelligence (making hazards visible), safety orchestration (turning identified hazards into tracked, owned responses), and governance evidence (proving the cycle is running). Standard onboarding takes approximately four weeks. From the first assessment cycle forward, ReFresh produces a time-stamped audit trail that meets the evidentiary standard a regulator or auditor would expect, without adding compliance administration to a team that already manages multiple regulatory frameworks.

Four-week onboarding from configuration to first assessment

Time-stamped audit trail generated automatically

No additional compliance administration for existing teams

Governance evidence without manual data assembly

A close-up of hands at a boardroom table during a meeting. One person's hands are resting on a printed report, another person's hands are taking notes. A laptop screen is partially visible but blurred in the background. The focus is on the physical act of governance: reviewing, noting, deciding. Neutral colour palette, warm timber table surface. Shallow depth of field on the hands and document. No faces visible. No logos, no readable text on the report. Documentary style.

SECURITY & COMPLIANCE

Your data.
Always protected.

Your data.
Always protected.

Your data.
Always protected.

Refresh is GDPR, SOC2, & USDP compliant

Refresh is GDPR, SOC2, & USDP compliant

Security standards

We are GDPR, SOC2, and USDP compliant. AWS hosts our app, and we undergo annual third-party audits to ensure platform and infrastructure security.

Security standards

We are GDPR, SOC2, and USDP compliant. AWS hosts our app, and we undergo annual third-party audits to ensure platform and infrastructure security.

Anonymous by design

Sensitive psychosocial information is handled by design. Data is structured and access-controlled so information is only visible where necessary.

Anonymous by design

Sensitive psychosocial information is handled by design. Data is structured and access-controlled so information is only visible where necessary.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

Custom permissions

Set clear boundaries with flexible permissions. Admins and teams manage access, keeping data visible only where it belongs.

GOT QUESTIONS?

Frequently asked questions

Frequently asked questions

We already manage compliance across multiple frameworks. Why add another?

Psychosocial compliance under the WHS Act is a separate legal obligation with its own evidence standard. Your AFSL, AML, and APRA frameworks do not cover it. The OS runs alongside your existing compliance infrastructure, producing the psychosocial-specific evidence a regulator or auditor would expect, without duplicating what you already have.

We have a GRC platform. Why do we need ReFresh?

GRC platforms manage governance frameworks. They do not assess psychosocial hazards, track psychosocial controls, or produce the psychosocial-specific evidence that a regulator expects. ReFresh feeds into your existing governance structure by producing the underlying data your GRC platform was not built to generate.

How does the board see psychosocial risk without accessing sensitive data?

The OS provides governance reporting that aggregates operational data into board-appropriate views. Compliance posture, control status, and trends are visible at the organisational level. Individual worker data is not exposed. The reporting is designed for risk committees and audit committees.

How does this relate to our ESG disclosure obligations?

The OS provides the underlying data for credible social-pillar disclosure. Your annual report requires ESG and emerging risk reporting. Systematic psychosocial hazard identification, control implementation, and governance oversight, documented continuously, positions the organisation to report on workforce risk with specificity rather than aspiration. The data is produced as a byproduct of the compliance cycle, not as a separate reporting exercise.

What does implementation look like alongside our existing compliance infrastructure?

Four weeks from configuration to the first assessment cycle. The OS is designed to run alongside your existing regulatory workflows, not replace them or create a parallel process. Your compliance or people team manages it within the same operating rhythm they use for AFSL, AML, and APRA obligations. The system produces evidence from the first cycle.

The same compliance discipline you apply everywhere else. Now applied to psychosocial risk.

The same compliance discipline you apply everywhere else. Now applied to psychosocial risk.

Request demo

Request demo