Martyn's Law preparation for UK premises
Martyn's Law is coming. Have your records ready.
Versioned procedures, drill records, and training records on file across your sites between adviser visits.
Early access · From £59/site/month at launch

-
Standard and Enhanced tierStandard and Enhanced tier
Procedures, awareness records, drill notes, and the documents enhanced sites need to keep current.
-
Free readiness pack
Start before duties commence
-
Early access preview
Be first in line
-
UK-hosted
Secure AWS data centres, in-country
-
Full export
Your data is always yours
-
All compliance areas included
Martyn's Law plus fire, food, H&S, gas, licensing, and employment records.
Where this is up to
It's law. No one's checking yet. You've got time to get ready.
The Terrorism (Protection of Premises) Act 2025 received Royal Assent in April 2025. The duties are not yet in force: commencement is expected no earlier than spring 2027, after a 24-month implementation period. Nothing has to be submitted to the SIA today, so the work now is recording your scope, your procedures, and your staff awareness.
- Apr 2025 The Act received Royal Assent
- Apr 2026 Home Office statutory guidance first published
- Jun 2026 SIA enforcement guidance in consultation (until 12 June)
- Spring 2027 Earliest the operator duties commence
Worth doing now
- Confirm the number behind your tier, and keep the method you used to reach it.
- Draft the four procedures (evacuation, invacuation, lockdown, communication) and brief your team.
- Start building records now, so they're there before duties commence.
The problem
The hard part is the records
Martyn's Law (the Terrorism (Protection of Premises) Act 2025) will bring around 178,900 UK premises into scope and give the SIA new enforcement powers when it commences. Most operators know the regime is coming. Far fewer can show the procedures, the staff awareness, and the drills on file when an inspector or insurer asks.
- UK premises expected to be in scope1
- ~178,900
Today
- Capacity number in one manager's head
- Procedures rehearsed once, then forgotten
- Staff awareness assumed
- ACT certificates and SCaN training records lost in personal email
- Drill records in a notebook, or not done at all
- Area manager chasing sites for missing evidence
With Duty Room
- Readiness actions scheduled per site, with owners and dates
- Evidence attached as each task is completed
- Documents and procedures with version history
- Training and awareness records in one place
- Live shared view for your safety adviser or insurer
- Export or share in one click
How it works
From assessment to follow-through
1
Confirm your tier with the evidence behind it
Work with your adviser to record how you arrived at your tier: the method and the staff count behind it. Store it with the site so anyone who asks can see the working.

2
Run the four procedures with your team
Add evacuation, invacuation, lockdown, and communication procedures as documents you can version. Schedule drills, awareness refreshers, and review tasks at the cadence you set, with the owners you choose.

3
Keep records current
Your team's completed work and uploaded evidence stay visible to anyone you invite, with version history kept on the documents. When someone asks what's current, it's already in one place.

What's inside
Common Martyn's Law records to keep in one place:
-
Capacity Assessment Record
The capacity method on file, with the staff count and tier result alongside.
-
Public Protection Procedures
Evacuation, invacuation, lockdown, and communication, kept as versioned documents.
-
Staff Awareness Register
Training and awareness records, with refresher dates where you set them.
-
Drill and Exercise Log
Tabletop or live drill notes with attendees, observations, and follow-up actions.
-
Senior Individual Record
For enhanced tier sites: a place to keep the designation, the review dates, and supporting documents.
-
Evidence Pack
The documents and evidence you have on file, exported as a pack when an adviser or insurer asks.
Built for operators who keep records running as the work is done.
Blueprints
Start with Martyn's Law. Expand from there.
Every blueprint comes with practical resources
What the records cover, how operators and advisers typically use them, and how to run them in Duty Room. Starter blueprints are kept up to date as Home Office statutory guidance is updated and the SIA's enforcement guidance moves from consultation to final form.
-
Fire Safety Fire risk assessments, alarm tests, and drill records.
-
Gas Safety CP42 certificates and appliance records.
-
Health & Safety Risk assessments, COSHH, and accident records.
-
Food Safety Temperature logs, HACCP, and allergen records.
-
Licensing Licence conditions, refusals log, and incident records.
-
Employment Records Right-to-work, working time, and tipping records.
Same model, same follow-through. Add more areas as your needs grow.
Capacity checker
Check the number behind your tier
General premises capacity check
Use this for a first pass, then compare it with the sector-specific examples below.
Source: GOV.UK capacity methodology
GOV.UK says to determine the “greatest number of individuals reasonably expected to be present at the same time.” Its factsheet also says to include workers, and to consider immediate-vicinity areas for procedures rather than the threshold count.
Read the GOV.UK factsheet →Premises types
Start with your premises type
-
Hotels
Rooms, events, departments, night operations, and evidence across mixed-use hotels.
-
Pubs and bars
Big-match peaks, beer gardens, door teams, function rooms, and staff-awareness records.
-
Exhibition and conference venues
Venue, organiser, exhibitor and contractor handovers in one evidence trail.
-
Cinemas
Staggered showtimes, packed foyers, and who is in the building at once.
-
Community venues and halls
Recurring hires, volunteers, and the committee minute behind the call.
-
Music Venues
A full room with the lights down, plus crew and security working it.
-
Places of Worship
Service peaks, the place-of-worship rule, and volunteer awareness.
-
Restaurants and cafes
Covers, terraces, private dining, and the staff who push a busy service past 200.
-
Shops and retail
Peak footfall, seasonal staff, and surge days like Black Friday, not annual totals.
-
Sports Grounds
Match-day counts and the access-control facts that set the tier.
-
Theatres
Seated houses, foyers, backstage crew, and evacuating mid-performance.
Compare
Your current method vs Duty Room
| Paper / Spreadsheets | Generic checklist app | Duty Room | |
|---|---|---|---|
| Capacity assessment | In someone's head | Some | Site record with the method behind it |
| Procedures (evac / invac / lockdown / comms) | Discussed once | Some | Versioned documents |
| Training and awareness records | Email folder | Varies | In one place |
| Drill records | Notebook / nothing | Varies | Scheduled with evidence |
| Document version history | Filing cabinet | — | Built in |
| Multi-site oversight | Chase each manager | Varies | Built in |
| Evidence pack for inspector / insurer | Hours of assembly | — | One-click export |
| Export if you leave | Already on paper | Varies | Full export |
Paper / Spreadsheets
- Capacity assessment (In someone's head)
- Procedures (evac / invac / lockdown / comms) (Discussed once)
- Training and awareness records (Email folder)
- Drill records (Notebook / nothing)
- Document version history (Filing cabinet)
- Multi-site oversight (Chase each manager)
- Evidence pack for inspector / insurer (Hours of assembly)
- Export if you leave (Already on paper)
Generic checklist app
- Capacity assessment (Some)
- Procedures (evac / invac / lockdown / comms) (Some)
- Training and awareness records (Varies)
- Drill records (Varies)
- — Document version history
- Multi-site oversight (Varies)
- — Evidence pack for inspector / insurer
- Export if you leave (Varies)
Duty Room
- Capacity assessment (Site record with the method behind it)
- Procedures (evac / invac / lockdown / comms) (Versioned documents)
- Training and awareness records (In one place)
- Drill records (Scheduled with evidence)
- Document version history (Built in)
- Multi-site oversight (Built in)
- Evidence pack for inspector / insurer (One-click export)
- Export if you leave (Full export)
Martyn's Law questions and answers
Is Martyn's Law the same as Protect Duty?
Yes. Protect Duty was the earlier working name. The public name is Martyn's Law, and the legislation is the Terrorism (Protection of Premises) Act 2025.
Does Martyn's Law apply to my premises?
It applies if your premises is wholly or mainly used for a Schedule 1 use and 200 or more people, including staff, may reasonably be expected to be there at the same time, from time to time. Schedule 1 covers shops, food and drink, entertainment and leisure, sports grounds, halls, hotels, places of worship, education, healthcare, transport, visitor attractions, public authority buildings, and more. Your fire safety adviser, security adviser, or insurer can help you work out the answer. Duty Room keeps the assessment record and the evidence with the site.
What's the difference between standard tier and enhanced tier?
Standard tier (200-799) is procedures, notification, and staff awareness. The procedures themselves: evacuation, invacuation, lockdown, and communication. Enhanced tier (800+) adds public protection measures across four areas (monitoring, movement, physical security, information security), a designated senior individual who manages the affairs of, or controls, the organisation (the responsible person, not a lower-level employee), and a tailored compliance document submitted to the SIA. Penalties differ too. Standard tier maxes at £10,000 plus £500 a day. Enhanced tier maxes at £18 million or 5% of qualifying worldwide revenue, plus £50,000 a day.
What do I have to do at standard tier?
Once duties are commenced, notify the SIA when you become responsible for the premises and put the four public protection procedures in place: evacuation, invacuation, lockdown, and communication. Make sure your staff are aware of them and ready to implement them. Standard tier doesn't require physical measures or a formal terrorism risk assessment, and nothing is submitted to the SIA. The Home Office estimates standard tier compliance at around £330 a year, mostly in staff time.
What do I have to do at enhanced tier?
Everything in the standard tier, plus public protection measures across four areas (monitoring, movement, physical security, information security), a designated senior individual who manages the affairs of, or controls, the organisation (the responsible person, not a lower-level employee), and a tailored compliance document setting out an assessment of how your procedures and measures reduce vulnerability and harm. The document is submitted to the SIA, kept under review, and provided to the SIA within 30 days of any revision.
When does Martyn's Law come into force?
The Act received Royal Assent on 3 April 2025. Substantive duties are not yet in force. Commencement is no earlier than Spring 2027, after a 24-month implementation period. The Home Office first published statutory guidance in April 2026. The SIA's enforcement guidance is in consultation until 12 June 2026.
Do I need to notify the SIA now?
Not yet. The SIA notification duty has not commenced. Notifications begin once the relevant commencement order is made, no earlier than Spring 2027. For now, confirm which tier you fall into and start preparing. The assessment, the procedures, and the staff awareness can all be in place before notification opens.
Do I need a consultant or specialist software to be compliant?
The Home Office has said operators don't need to spend money on consultants to be compliant. Neither the Home Office, the SIA, nor the National Counter Terrorism Security Office endorses any third-party product. Duty Room is operational support: somewhere to keep the assessment, the procedures, the training records, and the drill log.
Does Duty Room replace official guidance or training?
No. The Home Office's statutory guidance, published in April 2026, is what you follow. The SIA's enforcement guidance is in consultation until 12 June 2026. ACT Awareness and SCaN, free from ProtectUK, are the most widely available training options; the statutory guidance does not mandate a specific programme. Duty Room helps you keep a record of what you've done.
Will Martyn's Law preparation affect my insurance?
It can. Insurers and brokers are publishing analyses of Martyn's Law and starting to ask policyholders about preparation. Pool Re's terrorism reinsurance scheme historically offered a premium discount for a security self-assessment, but that scheme (VSAT) closed on 31 March 2026; its replacement supports evidence-led conversations with insurers rather than an automatic discount. Either way, a clean record of procedures, training, and drills gives you something concrete to show at renewal, and to help defend a claim.
Can my safety adviser or insurer access the account?
Invite them in and they see the same live view of records, tasks, and evidence. No extra cost.
Where is my data stored?
Secure AWS data centres in the UK. Your data never leaves the country.
What can I export if I leave?
Everything. Your data is yours.
Start keeping your Martyn's Law work in one place.
Duty Room is operational compliance software: workflows, checklists, and evidence. It is not a substitute for professional legal, regulatory, or compliance advice. You are responsible for understanding and meeting the obligations that apply to your business.