Skip to main content

This is Duty Room for the United Kingdom. We have a version for your country.

Martyn's Law preparation for UK premises

Martyn's Law is coming. Have your records ready.

Versioned procedures, drill records, and training records on file across your sites between adviser visits.

Early access · From £59/site/month at launch

Duty Room dashboard showing Martyn's Law procedures, drill records, and staff awareness across sites
  • Standard and Enhanced tier

    Procedures, awareness records, drill notes, and the documents enhanced sites need to keep current.

  • Free readiness pack

    Start before duties commence

  • Early access preview

    Be first in line

  • UK-hosted

    Secure AWS data centres, in-country

  • Full export

    Your data is always yours

  • All compliance areas included

    Martyn's Law plus fire, food, H&S, gas, licensing, and employment records.

Where this is up to

It's law. No one's checking yet. You've got time to get ready.

The Terrorism (Protection of Premises) Act 2025 received Royal Assent in April 2025. The duties are not yet in force: commencement is expected no earlier than spring 2027, after a 24-month implementation period. Nothing has to be submitted to the SIA today, so the work now is recording your scope, your procedures, and your staff awareness.

  1. Apr 2025 The Act received Royal Assent
  2. Apr 2026 Home Office statutory guidance first published
  3. Jun 2026 SIA enforcement guidance in consultation (until 12 June)
  4. Spring 2027 Earliest the operator duties commence

Worth doing now

  • Confirm the number behind your tier, and keep the method you used to reach it.
  • Draft the four procedures (evacuation, invacuation, lockdown, communication) and brief your team.
  • Start building records now, so they're there before duties commence.

The problem

The hard part is the records

Martyn's Law (the Terrorism (Protection of Premises) Act 2025) will bring around 178,900 UK premises into scope and give the SIA new enforcement powers when it commences. Most operators know the regime is coming. Far fewer can show the procedures, the staff awareness, and the drills on file when an inspector or insurer asks.

Today

  • Capacity number in one manager's head
  • Procedures rehearsed once, then forgotten
  • Staff awareness assumed
  • ACT certificates and SCaN training records lost in personal email
  • Drill records in a notebook, or not done at all
  • Area manager chasing sites for missing evidence

With Duty Room

  • Readiness actions scheduled per site, with owners and dates
  • Evidence attached as each task is completed
  • Documents and procedures with version history
  • Training and awareness records in one place
  • Live shared view for your safety adviser or insurer
  • Export or share in one click

1. Home Office impact assessment estimate for qualifying premises under the Terrorism (Protection of Premises) Act 2025.

How it works

From assessment to follow-through

1

Confirm your tier with the evidence behind it

Work with your adviser to record how you arrived at your tier: the method and the staff count behind it. Store it with the site so anyone who asks can see the working.

Capacity and tier assessment recorded against a site, showing the counting method, the counts, and the tier result

2

Run the four procedures with your team

Add evacuation, invacuation, lockdown, and communication procedures as documents you can version. Schedule drills, awareness refreshers, and review tasks at the cadence you set, with the owners you choose.

Martyn's Law check form

3

Keep records current

Your team's completed work and uploaded evidence stay visible to anyone you invite, with version history kept on the documents. When someone asks what's current, it's already in one place.

Martyn's Law proof pack

What's inside

Common Martyn's Law records to keep in one place:

  • Capacity Assessment Record

    The capacity method on file, with the staff count and tier result alongside.

  • Public Protection Procedures

    Evacuation, invacuation, lockdown, and communication, kept as versioned documents.

  • Staff Awareness Register

    Training and awareness records, with refresher dates where you set them.

  • Drill and Exercise Log

    Tabletop or live drill notes with attendees, observations, and follow-up actions.

  • Senior Individual Record

    For enhanced tier sites: a place to keep the designation, the review dates, and supporting documents.

  • Evidence Pack

    The documents and evidence you have on file, exported as a pack when an adviser or insurer asks.

Built for operators who keep records running as the work is done.

Blueprints

Start with Martyn's Law. Expand from there.

Martyn's Law
Active

Every blueprint comes with practical resources

What the records cover, how operators and advisers typically use them, and how to run them in Duty Room. Starter blueprints are kept up to date as Home Office statutory guidance is updated and the SIA's enforcement guidance moves from consultation to final form.

Read our Martyn's Law resources →

Same model, same follow-through. Add more areas as your needs grow.

Capacity checker

Check the number behind your tier

Add the people reasonably expected to be present at the same time. Use it as a planning aid, then keep the assumptions with your Martyn's Law records.

General premises capacity check

Use this for a first pass, then compare it with the sector-specific examples below.

Source: GOV.UK capacity methodology

GOV.UK says to determine the “greatest number of individuals reasonably expected to be present at the same time.” Its factsheet also says to include workers, and to consider immediate-vicinity areas for procedures rather than the threshold count.

Read the GOV.UK factsheet →

Compare

Your current method vs Duty Room

Your current method works until someone asks for everything at once.

Paper / Spreadsheets

  • Capacity assessment (In someone's head)
  • Procedures (evac / invac / lockdown / comms) (Discussed once)
  • Training and awareness records (Email folder)
  • Drill records (Notebook / nothing)
  • Document version history (Filing cabinet)
  • Multi-site oversight (Chase each manager)
  • Evidence pack for inspector / insurer (Hours of assembly)
  • Export if you leave (Already on paper)

Generic checklist app

  • Capacity assessment (Some)
  • Procedures (evac / invac / lockdown / comms) (Some)
  • Training and awareness records (Varies)
  • Drill records (Varies)
  • Document version history
  • Multi-site oversight (Varies)
  • Evidence pack for inspector / insurer
  • Export if you leave (Varies)

Duty Room

  • Capacity assessment (Site record with the method behind it)
  • Procedures (evac / invac / lockdown / comms) (Versioned documents)
  • Training and awareness records (In one place)
  • Drill records (Scheduled with evidence)
  • Document version history (Built in)
  • Multi-site oversight (Built in)
  • Evidence pack for inspector / insurer (One-click export)
  • Export if you leave (Full export)

Martyn's Law questions and answers

Is Martyn's Law the same as Protect Duty?

Yes. Protect Duty was the earlier working name. The public name is Martyn's Law, and the legislation is the Terrorism (Protection of Premises) Act 2025.

Does Martyn's Law apply to my premises?

It applies if your premises is wholly or mainly used for a Schedule 1 use and 200 or more people, including staff, may reasonably be expected to be there at the same time, from time to time. Schedule 1 covers shops, food and drink, entertainment and leisure, sports grounds, halls, hotels, places of worship, education, healthcare, transport, visitor attractions, public authority buildings, and more. Your fire safety adviser, security adviser, or insurer can help you work out the answer. Duty Room keeps the assessment record and the evidence with the site.

What's the difference between standard tier and enhanced tier?

Standard tier (200-799) is procedures, notification, and staff awareness. The procedures themselves: evacuation, invacuation, lockdown, and communication. Enhanced tier (800+) adds public protection measures across four areas (monitoring, movement, physical security, information security), a designated senior individual who manages the affairs of, or controls, the organisation (the responsible person, not a lower-level employee), and a tailored compliance document submitted to the SIA. Penalties differ too. Standard tier maxes at £10,000 plus £500 a day. Enhanced tier maxes at £18 million or 5% of qualifying worldwide revenue, plus £50,000 a day.

What do I have to do at standard tier?

Once duties are commenced, notify the SIA when you become responsible for the premises and put the four public protection procedures in place: evacuation, invacuation, lockdown, and communication. Make sure your staff are aware of them and ready to implement them. Standard tier doesn't require physical measures or a formal terrorism risk assessment, and nothing is submitted to the SIA. The Home Office estimates standard tier compliance at around £330 a year, mostly in staff time.

What do I have to do at enhanced tier?

Everything in the standard tier, plus public protection measures across four areas (monitoring, movement, physical security, information security), a designated senior individual who manages the affairs of, or controls, the organisation (the responsible person, not a lower-level employee), and a tailored compliance document setting out an assessment of how your procedures and measures reduce vulnerability and harm. The document is submitted to the SIA, kept under review, and provided to the SIA within 30 days of any revision.

When does Martyn's Law come into force?

The Act received Royal Assent on 3 April 2025. Substantive duties are not yet in force. Commencement is no earlier than Spring 2027, after a 24-month implementation period. The Home Office first published statutory guidance in April 2026. The SIA's enforcement guidance is in consultation until 12 June 2026.

Do I need to notify the SIA now?

Not yet. The SIA notification duty has not commenced. Notifications begin once the relevant commencement order is made, no earlier than Spring 2027. For now, confirm which tier you fall into and start preparing. The assessment, the procedures, and the staff awareness can all be in place before notification opens.

Do I need a consultant or specialist software to be compliant?

The Home Office has said operators don't need to spend money on consultants to be compliant. Neither the Home Office, the SIA, nor the National Counter Terrorism Security Office endorses any third-party product. Duty Room is operational support: somewhere to keep the assessment, the procedures, the training records, and the drill log.

Does Duty Room replace official guidance or training?

No. The Home Office's statutory guidance, published in April 2026, is what you follow. The SIA's enforcement guidance is in consultation until 12 June 2026. ACT Awareness and SCaN, free from ProtectUK, are the most widely available training options; the statutory guidance does not mandate a specific programme. Duty Room helps you keep a record of what you've done.

Will Martyn's Law preparation affect my insurance?

It can. Insurers and brokers are publishing analyses of Martyn's Law and starting to ask policyholders about preparation. Pool Re's terrorism reinsurance scheme historically offered a premium discount for a security self-assessment, but that scheme (VSAT) closed on 31 March 2026; its replacement supports evidence-led conversations with insurers rather than an automatic discount. Either way, a clean record of procedures, training, and drills gives you something concrete to show at renewal, and to help defend a claim.

Can my safety adviser or insurer access the account?

Invite them in and they see the same live view of records, tasks, and evidence. No extra cost.

Where is my data stored?

Secure AWS data centres in the UK. Your data never leaves the country.

What can I export if I leave?

Everything. Your data is yours.

Start keeping your Martyn's Law work in one place.

Duty Room is operational compliance software: workflows, checklists, and evidence. It is not a substitute for professional legal, regulatory, or compliance advice. You are responsible for understanding and meeting the obligations that apply to your business.