Risk Toolkit is operated by Point1 Pty Ltd trading as Risk Hub (ABN 17 645 442 262). These terms are an agreement between Point1 Pty Ltd and the practice or adviser that subscribes, and they apply to every user the subscriber authorises. By ticking to accept these terms when you register, or by creating an account or using Risk Toolkit, you agree to them. The version of these terms you accepted at registration applies to you until a change takes effect under clause 26.

In these terms, “we”, “us” and “Risk Hub” mean Point1 Pty Ltd. “You” and “your” mean the subscriber and every user you authorise. “Client” means an individual whose information you hold in Risk Toolkit.

Last updated: 18 September 2026. Version 2.1.

1. About Risk Toolkit

Risk Toolkit is software for Australian life and risk advisers. It is one platform with a growing suite of tools. You choose the tools you use through your plan (see clause 4). Every plan includes client records, and the LifeRisk Online integration is available at no extra charge (see clause 13). The current tools and what each one does are listed on our website. We may add, change or retire tools over time, and a new tool may be included in the plans or priced separately.

Risk Toolkit is a workflow support tool. It sits alongside your existing practice management and advice systems and does not replace them. If the platform is unavailable, you can continue to operate using your existing processes.

Risk Toolkit is not a financial product and we do not provide financial product advice.

2. Accounts, practices and users

When you register you create a practice account. The practice owner can invite additional users. Every plan includes the practice owner plus up to five additional users, each with an individual login, and every user in the practice can use the tools switched on for the practice. Credentials must not be shared. If you need more users, contact us. We may adjust this limit over time on notice.

You are responsible for every user you add, for their compliance with these terms, and for removing access for anyone who leaves or no longer needs it. Each user must ensure their use is consistent with their own licensing and compliance obligations.

3. Account security

You must:

• keep login details secure and confidential, and not share them between users;
• keep secure the email account that receives your multi-factor authentication codes, and only mark as trusted those devices you control; and
• notify us without delay at info@riskhub.com.au if you become aware or suspect that a credential has been compromised, that an account has been accessed without authority, or that client information has been accessed, disclosed or lost without authority.

We are not responsible for loss arising from a failure to secure an account, from the sharing or compromise of credentials, from a user’s act or omission, or from a compromise originating in your own systems, devices, networks or email environment. You must cooperate with us promptly in containing and investigating any such incident.

4. Subscription, fees and billing

Risk Toolkit is sold as a subscription to a plan. Your plan sets how many tools your practice can use at one time, and you choose which tools.

Prices include GST. Not every plan is offered at all times: a plan becomes available once there are enough tools built to fill it, and the plans currently offered are shown on our website.

5. How the tools should be used

Risk Toolkit supports your advice process. It does not replace your professional judgement, your assessment of a client’s circumstances, your recommendations, or your compliance obligations.

Needs analysis outputs are indicative only. They depend entirely on the accuracy and completeness of the information entered, and must be reviewed and interpreted by a qualified adviser before being relied on or given to a client.

The fact find collects information. It does not assess that information, and it does not form advice.

You must not use the platform to process information you are not lawfully entitled to hold, or in a way that breaches any law, your licensee’s requirements, or a third party’s rights.

6. Not financial advice

We provide software. Nothing produced by Risk Toolkit is financial product advice, a recommendation, or an offer of any financial product. You and your licensee remain solely responsible for the advice given to your clients, for the suitability of any product recommended, and for compliance with the Corporations Act 2001 (Cth) and your AFSL obligations.

7. Artificial intelligence and its limits

Risk Toolkit uses artificial intelligence in a limited way – to help read and extract information from documents you upload, so that you do not have to re-key it. Where AI processing is performed by the platform, it is performed on Australian infrastructure, and the AI service we use does not use your data to train its models.

AI-produced output can be incomplete, mistaken or misleading, particularly where a source document is unclear, non-standard or poorly scanned. We do not warrant that AI-produced output is accurate or complete. Every extracted value is presented for you to check against the source document before it is used or relied on. The AI does not make decisions, give advice, or act on its own initiative.

8. Beta and preview features

Any feature identified as beta or preview is provided as is and without warranty of any kind. It may be incomplete, may change, and may be withdrawn at any time. You should not rely on a beta feature in producing client-facing material without checking its output in full.

9. Fair use

Some features carry real underlying cost each time they are used, in particular AI processing and any third-party quoting. Normal advice workflow use is never restricted. We may throttle, queue or contact you about use that is clearly excessive or automated beyond the intended workflow, such as bulk or scripted requests. Subscription pricing assumes fair use.

10. Privacy and how we handle data

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What is collected. Through the fact find and related tools the platform may hold client personal information including name, contact details, date of birth, employment and financial details, family information, and existing insurance and superannuation records. It may also hold sensitive information in the form of a health pre-screen, structured in tiers — no conditions, brief notes, or a more detailed profile.

The platform does not collect identity documents, banking credentials, credit card details or tax file numbers, and you should not upload them. If you upload them anyway, you do so at your own risk and remain responsible for that information.

How and why it is collected. By adviser entry, by secure online forms completed by clients through expiring links, and by optional document uploads. It is collected to provide the service, to support your advice process, and to meet legal and compliance obligations.

Storage and security.

• Client and adviser data is held in a managed database within Australian infrastructure (Amazon Web Services, Sydney region).
• The application runs on cloud infrastructure located in Australia (Sydney). Your data is stored and processed onshore.
• Where AI is used, it is processed onshore in the Sydney region. Your data is not sent to AI services outside Australia by the platform.
• Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), with field-level encryption applied to sensitive fields.
• Advisers authenticate with email and password plus multi-factor authentication. Clients access their forms through tokenised, expiring links.

Data sovereignty. Your client and adviser data is stored and processed in Australia, including AI processing performed by the platform. We do not transfer that data overseas. Two limited exceptions apply: payments are processed by Stripe, and email delivery is handled by our email provider, each of which may process limited information – such as billing details or an email address and the content of a notification – outside Australia.

Where you generate a document or file using your own third-party tool before uploading it, any processing performed by that tool happens outside the platform and is not covered by this clause.

11. Material you upload

You are responsible for ensuring you are entitled to upload any document or information to the platform and to have us process it on your behalf, and for obtaining any consent required before doing so.

12. Disclosure and third parties

We do not sell personal information. We disclose it only as needed to provide the service or as required by law. Our key service providers are our Australian application hosting provider, our Australian managed database provider, our onshore AI service, our email provider, and Stripe for payment processing.

13. Third-party integrations and data

We may offer integrations for quoting, research, policy and premium data. Data returned by those services is produced by the third party. We pass it through in good faith and we do not verify it. We are not responsible for its accuracy, completeness, currency or availability. You must verify third-party data before relying on it in advice.

You hold the third-party subscription. Where an integration depends on a third-party service, you are responsible for obtaining and maintaining any subscription or licence that provider requires, and for the fees payable to them. Those fees are not part of your Risk Toolkit subscription, and we do not collect them.

LifeRisk Online. The LifeRisk Online integration is available at no extra charge on any plan, and does not count towards the number of tools your plan allows. It is switched on for your practice at your request, because it runs on your practice’s own LifeRisk Online subscription, which you hold and pay for directly. Some features, such as research scores, are only available if your LifeRisk Online subscription includes them. Where Risk Toolkit shows a research score for a product that LifeRisk Online does not score in a quote (for example PPS Mutual), that score is calculated by Risk Toolkit from LifeRisk Online’s published ratings, is labelled as calculated, and is not supplied or verified by LifeRisk Online.

We use reasonable endeavours to keep integrations working but do not guarantee availability or performance. A third-party service may change, interrupt or withdraw at any time, and may have its own terms that apply to you in addition to these terms.

14. Data retention, export and deletion

We retain information only as long as it is needed to provide the service, to support your advice process, and to meet legal and compliance obligations. You can manage and delete client records through the platform.

Switching a tool off, or moving to a smaller plan, does not delete the information in that tool. It remains available to you again if the tool is switched back on.

If your subscription is cancelled or lapses, your client records remain available to view and export for 90 days. After that the account becomes dormant, and the rest of this clause applies to deletion.

You may request a copy of your data at any time, and on cancellation we will provide a complete copy in a structured, commonly used format within 30 days of your request. We will not withhold your data as leverage in a commercial dispute. After a copy has been provided and any retention obligation has passed, we will delete your data on request; data may persist in backups for a period afterwards while backups cycle.

15. If we stop providing Risk Toolkit

If we decide to discontinue Risk Toolkit, we will give subscribers at least 60 days’ notice, will not charge for a renewal period that will not be delivered, and will make your data available in accordance with clause 14.

16. Access and correction

A client who wants access to, or correction of, their personal information should contact the adviser or practice holding it. We will assist you to respond to such a request.

17. Data breaches and notification

If we become aware of unauthorised access to, unauthorised disclosure of, or loss of client or adviser data held in the platform, we will notify you without undue delay and in any event within 72 hours of becoming aware of it, tell you what we know about what happened and what data was involved, and take reasonable steps to contain the incident and prevent recurrence.

Because you hold the relationship with the client and collected the information, you are responsible for assessing whether the incident is an eligible data breach under the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth), and for notifying affected individuals and the Office of the Australian Information Commissioner, unless we agree otherwise in writing for a particular incident. We will cooperate with you and provide the information reasonably available to us.

Where the incident was caused by our breach of these terms or our negligence, we will bear the reasonable and documented cost of the notification we required you to make. Where the incident arose from your systems, your users or your credentials, you bear that cost. Neither of us will make a public statement attributing responsibility to the other without first consulting the other, except where required by law.

18. Adviser responsibilities

You must:

• obtain any client consents required to collect, hold and process client information in the platform, including the health pre-screen, and keep a record of them;
• maintain your own privacy policy and disclosures, and comply with your own privacy obligations;
• review, check and verify every output before relying on it or giving it to a client;
• ensure that all advice given to your clients is your own and complies with your licensing and compliance obligations;
• keep your account and your own systems secure, and comply with clause 3; and
• use the platform lawfully and in accordance with these terms.

19. Your indemnity to us

You indemnify us, and our directors, officers, employees and contractors, against any claim, loss, damage, liability, and reasonable costs and expenses (including reasonable legal costs) arising out of or in connection with:

• the financial product advice or other services you provide to your clients;
• your failure to review, check or verify an output before relying on it or giving it to a client;
• your failure to obtain a consent or authority required under clause 18;
• any information or document you upload, including the manner in which it was obtained;
• unauthorised access to or use of the platform through your credentials, your users or your own systems; or
• your breach of these terms or of any law.

This indemnity is reduced to the extent that the claim or loss was caused by our own breach of these terms or our negligence. We will notify you promptly of any claim to which this indemnity may apply, and will not settle such a claim without your consent, which must not be unreasonably withheld.

20. Intellectual property

We own the platform, the underlying software and all content we supply. You retain ownership of your client data and your own materials, and grant us only the rights necessary to operate and support the service for you. Your right to use the platform is non-exclusive and non-transferable and continues while your subscription is active.

We may use aggregated and de-identified information about how the platform is used to improve and operate the service. That information does not identify any client, adviser or practice, and we will not seek to re-identify it.

21. Availability and support

We do not guarantee availability. Access may be interrupted for maintenance, updates, provider outages or technical issues. Unless a separate written service level agreement applies, no service level, uptime commitment or credit applies. Support is available at info@riskhub.com.au.

22. Suspension and termination

We may suspend or terminate access where a payment fails and is not resolved after notice, where these terms are breached and the breach is not remedied within a reasonable period after notice, or where use of the platform is unlawful or exposes us or another subscriber to risk. Where the risk is immediate, we may suspend first and notify promptly afterwards. Where we terminate other than for your breach, we will refund the unused portion of any period you have paid for.

Clauses 14, 17, 19, 20, 23, 24, 25 and 27 survive termination.

23. Limitation of liability

(a) Australian Consumer Law. Nothing in these terms excludes, restricts or modifies any right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded, restricted or modified. Where our liability under a non-excludable guarantee can be limited, it is limited, at our option, to resupplying the service or paying the cost of having it resupplied.

(b) Loss we are not liable for. Subject to paragraph (a), we are not liable for indirect or consequential loss, or for loss of profit, loss of revenue, loss of opportunity, loss of goodwill, loss of anticipated savings, business interruption, or the loss or corruption of data, however arising and whether or not it was foreseeable.

(c) Matters outside our responsibility. Subject to paragraph (a), we are not liable for loss arising from: the advice you give; your failure to review, check or verify an output; data produced by a third-party service; the unavailability, change or withdrawal of a third-party service; a beta feature; material you uploaded; a compromise of your credentials, users, devices, networks or systems; your use of the platform otherwise than in accordance with these terms; or any event beyond our reasonable control.

(d) Cap. Subject to paragraph (a), our total aggregate liability to you for all claims arising in connection with the platform and these terms – whether in contract, tort (including negligence), under statute or otherwise – is limited to the greater of the fees paid by you to us in the 12 months immediately before the first event giving rise to the liability, and A$2,000. This is an aggregate cap across all claims, not a cap for each claim.

(e) Time limit. Subject to paragraph (a), you must bring any claim within 12 months of the date on which you first became aware, or ought reasonably to have become aware, of the circumstances giving rise to it.

(f) Your responsibility is unaffected. Nothing in these terms transfers to us any responsibility for the advice you give.

24. Dispute resolution

If a dispute arises, the party raising it must notify the other in writing setting out the issue. Both parties must then, within 14 days, have a senior representative meet – in person, by telephone or by video – and try in good faith to resolve it. If it is not resolved within 30 days of the notice, either party may commence proceedings. Nothing in this clause prevents either party from seeking urgent interlocutory relief.

25. Entire agreement and general

These terms are the entire agreement between us about Risk Toolkit and replace any earlier representation, statement or understanding. Nothing in this clause excludes liability for fraud or for misleading or deceptive conduct under the Australian Consumer Law. If any part of these terms is unenforceable, it is severed and the rest continues to apply. A failure to enforce a right is not a waiver of it. You may not assign these terms without our written consent, which will not be unreasonably withheld; we may assign them to a purchaser of the business on notice to you.

26. Changes to these terms

We may update these terms. The current version is always published on this page. We will take reasonable steps to give you advance notice of any material change, and a material change takes effect no earlier than 30 days after we notify you. If you do not accept a material change, you may cancel before it takes effect.

27. Governing law

These terms are governed by the laws of New South Wales, Australia, and the parties submit to the non-exclusive jurisdiction of the courts of that State.

28. Contact

Point1 Pty Ltd trading as Risk Hub · ABN 17 645 442 262 · Kirrawee NSW 2232 · info@riskhub.com.au · riskhub.com.au