About riskfacilitator and these terms

​

riskfacilitator Pty Ltd ATF Chivers Executive Trust (ABN 83 295 505 186) provides risk and safety advisory services and the riskfacilitator platform, including Online Training, the Risk Assessment Tool and the Due Diligence Check.

These terms apply when you visit our website, create or use an account, purchase or access a product, receive an invitation, upload information, or use a shared link. If an organisation provides your access, you must also comply with its directions and you confirm that you are authorised to act for it where applicable.

​

Contact: info@riskfacilitator.com | Sydney, Australia NSW 2024.

​

Purpose of the platform

The platform supports risk assessment, training, evidence collection, due diligence review, consultation, record keeping and decision-making. It does not replace competent professional advice, site-specific investigation, worker consultation, legal advice, regulatory guidance or the duties imposed by applicable law.

You remain responsible for the decisions you make, the information you rely on and the actions you take. No platform output, status, score, certificate, review or report is a guarantee that a workplace, activity, person or organisation is safe or legally compliant.

 

Risk Assessment Tool

The Risk Assessment Tool creates live, version-controlled records that may include hazards, risk ratings, controls, field checks, evidence, consultation, stakeholder suggestions, approvals and audit history.

Scores, classifications and AI-assisted suggestions are decision-support information. They depend on the information supplied and must be checked by a competent person against the actual circumstances. A recorded control, check or approval does not by itself prove that the control is suitable, implemented or effective.

 

Due Diligence Check

The Due Diligence Check provides a structured process for operators to submit information and evidence and for riskfacilitator to conduct an independent review.

A reviewed or completed status means that the reviewer considered the information supplied through the process. It is not certification, accreditation, legal advice, an audit of every fact, or a guarantee of identity, competence, insurance, compliance, safety performance or future conduct. Operators are responsible for the accuracy, completeness and currency of their submissions. Clients remain responsible for deciding whether an operator is suitable and whether further enquiries, verification or controls are required.

 

Online Training

Online Training provides general WHS awareness and officer due diligence learning. It does not replace role-specific instruction, supervision, competency assessment, consultation, legal advice or training required by law, a regulator or an employer.

A certificate records completion of the applicable course requirements. It is not a licence, professional qualification or guarantee of competency or compliance. Any recommended refresh or expiry date is an administrative learning reminder unless another requirement applies.

 

Accounts, roles and organisations

Access is role-based and may depend on the products purchased by your organisation. You must provide accurate account information, protect your password and multi-factor authentication method, and promptly tell us about suspected unauthorised access.

Client administrators may invite, manage and remove users within their organisation and may view information made available to their role. Actions performed through an account may be attributed to that account. You must not share accounts, impersonate another person or use access outside the authority granted to you.

 

Your content and responsibilities

You retain ownership of information and material you submit. You grant us a limited licence to host, process, copy, display, transmit and create reports from that material as required to provide, secure and support the services.

You must ensure that you have authority to submit personal, confidential and third-party information; that information is accurate and lawful; and that you do not upload malicious code, unlawful material or more sensitive information than is reasonably necessary. You are responsible for managing exported files and for sharing links only with intended recipients.

 

Storage, sharing and retention

Platform records are stored in cloud systems. Core application and account data is hosted in Singapore. Uploaded Risk Assessment Tool evidence and Due Diligence Check documents are stored in private cloud storage in Australia. Data may also be processed by the service providers described below.

Some features create time-limited or revocable links for invited reviewers, stakeholders or other recipients. A person who receives a valid link may be able to access the information it exposes without creating a full account. Treat links as confidential and revoke them if they are sent to the wrong person.

We retain information for as long as reasonably necessary to provide the services, maintain security and audit records, resolve disputes, meet legal obligations and support legitimate business requirements. Information may remain for a limited period in backups, security logs or records we must retain. When no longer required, we take reasonable steps to delete or de-identify it.

 

Personal information we collect

Depending on how you use the services, we may collect:

• identity, contact, organisation, role and account information;
• sign-in, multi-factor authentication, device, session, security and audit information;
• enrolments, invitations, course progress, answers, completion and certificate records;
• risk assessments, hazards, controls, comments, suggestions, assignments, approvals, evidence and sharing details;
• due diligence operator details, business information, declarations, uploaded evidence, expiry information, reviewer notes and outcomes;
• service schedule, enquiry, support and communication information;
• purchase, subscription and transaction references (payment card details are processed by Stripe and are not stored by riskfacilitator); and
• technical usage information such as IP address, browser, timestamps, diagnostics and activity logs.

We may collect this information directly from you, from your organisation or administrator, from an operator, stakeholder or other authorised person, from our payment and service providers, and through your use of the website and platform.

 

How we use and disclose information

We use information to provide and administer products; authenticate users; apply organisation and product access; deliver training; create records and reports; conduct reviews; send invitations, reminders and service communications; process payments; provide support; prevent misuse; investigate incidents; improve reliability and usability; meet legal obligations; and protect our rights and users.

Information may be disclosed to authorised people in your organisation or workflow, invited recipients, riskfacilitator personnel and contractors who need it, regulators or authorities where required, and providers that host or support the services. We do not sell personal information.

​

Service providers and overseas processing

We use specialist providers including Render for application hosting, Amazon Web Services for private document and evidence storage, OpenAI for user-initiated AI-assisted features, Stripe for payments, Wix for public website services, and email, analytics and support providers.

Some providers may process or support information outside Australia, including in Singapore and the United States, and from other locations described in their service terms. We take reasonable steps to use reputable providers, restrict access and protect information. Overseas recipients may be subject to different privacy laws.

​

Artificial intelligence

Selected Risk Assessment Tool content or Due Diligence Check documents may be sent to our AI provider when an authorised person uses an AI-assisted feature. AI is not used to independently certify, approve or reject a person, operator or risk assessment. See our Responsible Use of Artificial Intelligence Policy for how these features work, their limits and the required human oversight.

Access, correction and privacy complaints

You may ask to access or correct personal information we hold about you, subject to applicable exceptions. We may need to verify your identity and may direct organisation-managed requests to the relevant administrator.

To make a privacy request or complaint, contact info@riskfacilitator.com and describe the issue and the outcome you seek. We will acknowledge and investigate the matter and aim to respond within a reasonable period. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

​

Security and data incidents

We use reasonable safeguards including role-based access, multi-factor authentication, encrypted connections, private document storage, logging and security monitoring. No internet or storage system is completely secure. You must use the available security controls and notify us promptly of suspected loss, misuse or unauthorised access. We manage eligible data breaches in accordance with applicable law.

​

Intellectual property

The website, platform, course content, methods, templates, branding and software are owned by or licensed to riskfacilitator. Except for normal use of a purchased service and permitted exports, you must not copy, reproduce, reverse engineer, resell or create derivative commercial products without written permission.

Fees, subscriptions and refunds

Prices, inclusions, billing periods and taxes are those shown at purchase or agreed in writing. Recurring services continue for the agreed period until cancelled in accordance with the applicable offer. Cancelling stops future renewal but does not automatically refund an already supplied period.

Nothing in these terms excludes, restricts or modifies rights or remedies that cannot lawfully be excluded, including applicable rights under the Australian Consumer Law. Refund requests are assessed against the purchase terms and those rights.

​

Availability, changes and suspension

We aim to provide reliable services but do not promise uninterrupted or error-free availability. Maintenance, provider outages, security events and circumstances outside our reasonable control may affect access. We may change features to improve security, reliability or functionality and will provide reasonable notice where a change materially affects a paid service.

We may restrict or suspend access where reasonably necessary to protect users or systems, respond to suspected misuse, comply with law, investigate a security concern or address overdue payment.

​

Liability and disclaimer

To the extent permitted by law, riskfacilitator is not liable for indirect or consequential loss, loss caused by inaccurate or incomplete user-supplied information, reliance on an unverified output, unauthorised sharing, or decisions made outside the intended purpose of the services.

Where a guarantee or liability cannot be excluded, our liability is limited only to the extent permitted by law. Nothing in these terms excludes liability or consumer rights that cannot lawfully be excluded.

​

Links and third-party services

External links and integrated services are provided for convenience. Their content, availability and privacy practices are controlled by their operators. You should review their terms before use.

​

Changes, governing law and contact

We may update these terms and privacy information when our products, providers or legal obligations change. The current version and effective date will appear on this page. Material changes will be communicated where reasonably practicable.

These terms are governed by the laws of New South Wales, Australia. Courts with jurisdiction in New South Wales may hear disputes.

​

Questions may be sent to info@riskfacilitator.com.

Last updated: 7 August 2026