RiskProof
How it works

Your documents already hold the answer. RiskProof scores it.

No surveys to run, no consultants to brief, no six-week project. RiskProof reads the documents you already have and measures them against the criteria a regulator actually applies — jurisdiction by jurisdiction.

The process

Three steps from documents to defensible score

STEP 1

Upload what you already have

Your existing WHS policies, risk registers, training records, consultation minutes, incident procedures, role descriptions. No new documents are required to start — the point is to measure what exists today.

STEP 2

RiskProof reads them against your jurisdictions

Every document is classified against the psychosocial hazard requirements of the states and territories you operate in, with the Commonwealth layer always applied — including state-specific rules like Queensland's written sexual harassment prevention plan.

STEP 3

Get your score — and your priorities

An Inspection Readiness Score out of 100, broken down across the four tests a regulator applies, with your gaps identified and ranked so you know exactly what to fix first — and what to fix next.

What the score measures

The four tests, in depth

An inspection asks one question of every psychosocial hazard relevant to your workplace: can you demonstrate four things? These four tests are drawn from the regulations themselves — the duties to identify, control, maintain and review, the consultation duty, and regulators' own inspection statements. They are the four dimensions RiskProof scores.

TEST 1Evidence

Have you identified and assessed this hazard?

You must identify the reasonably foreseeable psychosocial hazards in your workplace and assess the risk — including how long, how often and how severely workers are exposed.

What an inspector asks to see

  • A documented WHS or psychosocial policy that includes hazard identification
  • A risk assessment or risk register naming the hazard and the exposure
  • Evidence the assessment reflects your actual work, not a generic template
Common failureA generic policy that lists hazards in the abstract but shows no assessment of the organisation's own conditions.
TEST 2Control

Have you controlled it — and controlled it correctly?

You must eliminate the risk where reasonably practicable, and otherwise minimise it. In most jurisdictions you must work down the hierarchy of controls — redesigning the work before falling back on training or a policy.

What an inspector asks to see

  • Controls documented and mapped to each hazard
  • Evidence that higher-order controls were considered before administrative ones
  • Control choices that reflect exposure, work design and how work is managed
Common failureTraining and a policy standing in as the entire answer, with no evidence the work itself was examined.
TEST 3Verification

Do you know your controls are working?

Consultation with workers is a duty, not a courtesy — and controls must be maintained and reviewed. An inspector wants evidence that what is written down is happening in practice.

What an inspector asks to see

  • Records of genuine consultation with workers on hazards and controls
  • Review records showing controls were checked and revised where needed
  • Signals that controls actually operate — training completion, response records
Common failureControls implemented once and never reviewed — or consultation that amounts to a survey sent to a distribution list.
TEST 4Audit trail

Can you produce the record?

The difference between having done the work and being able to prove it. Records must be dated, retrievable and coherent — the pack an inspector, auditor or board can pick up and read.

What an inspector asks to see

  • Dated documentation of identification, controls, consultation and review
  • Records that can be produced on request, not reconstructed after the fact
Common failureGood work that exists only in inboxes, memories and meeting rooms — undocumented, undated, unprovable.
The score

One number, four stages, every jurisdiction you operate in

The Inspection Readiness Score is a 0–100 measure of how well your documented evidence would stand up against the four tests. It breaks down by test and by hazard, so a board sees the headline number while your WHS and HR teams see exactly which document, for which hazard, needs work. Because requirements differ by state — Victoria's broader hazard definition, Queensland's prevention plan requirement, the Commonwealth's expanded hazard list — the score is calculated against the specific jurisdictions you select, with the Commonwealth layer always active.

What "inspection ready" means — and what it doesn't.

It means that for the hazards relevant to your workplace, you can demonstrate the four tests: the evidence, the controls, the consultation and review, and the audit trail an inspector would expect to see. It does not mean a legal determination of compliance — only a court can decide that, after the fact — and it does not certify that controls are effective in lived reality. It measures what you have documented and put in place, which is what an audit examines. We think that precision matters: promising "compliance" would be inaccurate. Measuring the demonstrable strength of your evidence is honest, defensible and genuinely useful.

After the score

The path to audit-ready — and the record of walking it

Your gaps come ranked by exposure, so remediation starts where it matters most. Every rating in the assessment traces back to the document and section that earned it, with the rationale recorded — no score without the why. When you've closed gaps, re-score: each assessment is dated and kept, so your progression is itself demonstrable evidence of diligence. That trajectory — assessed, acted, improved, recorded — is precisely what a board wants to govern and an inspector wants to see.

See your documents become a score.

A 30-minute demo with our team — bring your questions and a sceptical colleague.

Book a demo