Risk, incidents, audits, training, contractors and facilities together, organised the way a management system is actually run.
New to Assuraz? Start a free 30-day trial
Assuraz scores ten areas from your live records, not a self-assessment, and rolls them into one health score. Fall behind on a review, an audit or an action and the dial tells you before an auditor does.
An example at full marks. Your own dashboard shows your real scores, with each area linked to the records behind it.
Incidents, KPIs, training and audits reference the same underlying records, so numbers agree with each other because they're never re-typed.
Process interaction, document control, management review and audit records follow the clause structure of ISO 9001, 14001, 22301, 27001, 45001 and 50001 — not a generic form builder retrofitted to fit.
Filter by location or department, or roll everything up company-wide — the same data, viewed at whatever level the question needs.
Every sign-in is protected by a second step — a code from an authenticator app or your email — on top of your password, at no extra cost.
Your risks, people and records are sensitive. Here's how we look after them.
See all twelve →Microsoft Azure's UK South region.
HTTPS everywhere; database and files encrypted.
Required for every app user.
Every upload scanned by Microsoft Defender.
Point-in-time restore, managed by Azure.
Microsoft or Google work accounts. Coming soon.
Every module follows the ISO high-level structure, from context to improvement, and shares one set of sites, people and data. Most of it is included in every plan; add the extras when you need them.
Internal and external issues from a UK library, climate change, a scope for each standard and how your processes interact.
Everyone with a stake in your business, gathered from your registers, with what each one expects of you.
AI drafts your policies and processes from a short brief, with 21 ready-made policies to start from.
Policy statements, management commitment and a signed statement from the top.
Key roles such as first aiders and fire wardens, with a RACI matrix and training checks.
A UK legislation library adopted onto your own register, with compliance evaluations.
All 93 ISO 27001 Annex A controls, plus the ISO 42001 AI controls.
Worker consultation, and satisfaction surveys for employees and interested parties that anyone can answer from a link.
Scored risk and opportunity registers with a heat map, controls, owners and review dates for every site.
Activity, aspect and impact register for ISO 14001, with significance scoring.
Hazards, controls and PPE ready to reuse in every risk assessment.
Asset owners, classification and risks for ISO 27001 and Cyber Essentials.
Business impact analysis and continuity risk assessments for ISO 22301.
Energy reviews for ISO 50001, and an AI system register with impact assessments for ISO 42001.
Build task risk assessments and RAMS from the hazard library, with sign-off.
Profiles, job titles, career levels, org chart and length of service.
Courses, records and a skills matrix that flags what is due or expired.
Competency requirements by job title and key role, matched to training.
Version-controlled documents with owners, reviews and a full history.
Conflicts of interest, acceptable use and more, signed by employees.
Recurring tests, checks and services on a rolling calendar for every site.
Short safety talks with a knowledge check, signatures and certificates.
Roadshows, briefings and town halls: bookings, joining links, attendance and feedback.
Holiday requests approved from an email, TOIL, bank holidays by region and a team calendar.
A newsletter your people want to read: stories, photos, polls and your objectives, in Base Camp and their inbox, with open and reading statistics.
Regular 1 to 1s, performance reviews, objectives and a 9-box grid.
Inspections, certificates and checkout history for every tracked asset.
Power BI and Excel reporting, employees synced from your HR system, training from your e-learning and a Power Automate connector.
Online contractor assessments before approval, then certificates, insurances and operatives' cards tracked against expiry.
Contractors upload their own certificates, keep their contacts up to date, sign your rules and raise feedback.
Plan, assess and sign off changes before they happen.
Report incidents and near misses, investigate and update KPIs automatically.
Substances, safety data sheets and COSHH assessments with PDFs.
Add AI with AI COSHH Assessments
Hot work, height, confined space and electrical permits, issued and closed.
Emailed sizes forms, a signed free-of-charge agreement and replacements.
Bills, fuel, waste transfer notes and CO2e by site and year.
Volunteering, donations and community projects linked to ISO 26000 and the UN goals, with targets, employee entries from Base Camp and a Social Value Statement.
Bribery risk, controls, gifts and hospitality and a confidential speak up line.
DPIAs, subject access and other rights requests with the one-month clock and a search log, and data protection complaints, following ICO guidance.
Process maps and step-by-step guides with screenshots.
A reception tablet for sign in and out, site briefings and the fire roll.
Construction phase plans, inductions, QR site sign-in, daily checks, permits, RAMS and the H&S File.
Measurable objectives and KPIs by company and site, tracked month by month against target.
Audit programmes, checklists and findings, with independent reviews.
Inspection types for assets and workplaces, assigned on a set frequency, with checks completed on any device.
Schedule reviews for every site, log the minutes and the actions agreed.
Add AI with AI Management Review
Root cause, corrective actions and follow-ups until closed.
Every action from every module in one place, with owners and due dates.
Capture good practice and run brainstorms everyone can add to.
Start with everything included in your plan, then switch on the extras that fit your work. AI add-ons come with a generous yearly allowance.
IN EVERY PLAN
Draft a COSHH assessment from the safety data sheet in seconds, ready to check and sign off.
Agendas built from your live registers, emailed invites and minutes, and a slide deck for the meeting.
Run roadshows and town halls: sessions to book, reminders, attendance on training records and feedback charts.
Contractors keep their own certificates, contacts and operatives up to date, sign your policies and send complaints or compliments, with expiry reminders.
Holiday and TOIL requests from Base Camp, approved by the manager from an email, with a team calendar and regional bank holidays.
A polished newsletter for every employee and your interested parties, in Base Camp and their inbox, with open and reading statistics.
Regular 1 to 1s and performance reviews with objectives, ratings and the 9-box grid.
Task risk assessments and RAMS built from the hazard library.
Talks with knowledge checks, signatures and certificates on any device.
Reception tablets, site briefings, visitor badges and the fire roll.
Everything a principal contractor needs to run a construction site under CDM 2015.
DPIAs on the ICO template, subject access requests with the clock, search log and an employee data pack to review, and complaints, with requests from Base Camp.
Asset registers with inspections, certificates and checkout.
Report in Power BI and Excel, sync employees from your HR system or Active Directory, bring in training from other platforms and build flows in Power Automate.
An incident updates its KPI on its own. A completed audit, a training record and a risk assessment all feed the same Management Review, generated from what's actually in the system rather than assembled by hand beforehand. Categories, locations and departments are shared everywhere, so a filter set on one screen means the same thing on every other.
Every record is scoped by location and department, with the same filters running down the nav bar. See one site in detail, or roll every site up into one company-wide view.
A consultancy gets its own branded login covering every client company it manages, with each client's data kept fully separate — and its own operating company alongside them, if it runs one.
Assuraz is hosted entirely on Microsoft Azure in the UK, with your data held in an Azure SQL database in UK data centres and encrypted in transit and at rest. Notification and reminder emails are sent through Azure Communication Services, so your data never leaves Microsoft's infrastructure.
Assuraz isn't a generic form builder with "ISO" written on the box — the modules below are built around what each standard actually asks a management system to keep track of. Assuraz doesn't grant certification; that still comes from your accredited certification body, but the records, evidence and reviews it keeps are structured the way an auditor expects to find them.
Process Builder documents how work actually happens and feeds Management Review agendas and minutes generated straight from live audit, incident and KPI data — aligned to clause 9.3, not assembled by hand beforehand. Quality objectives are tracked in KPI Objectives against target, and nonconformities run through to close-out in Non-Conformity & Corrective Actions. The Document Register keeps every controlled document version-tracked, owned and reviewed on schedule.
The Environmental Aspects module builds a full Activity → Aspect → Impact register under Normal, Abnormal and Emergency conditions, scoring each one for Severity × Likelihood so significant aspects surface on their own rather than being judged by eye — the same clause 6.1.2 evaluation an auditor will ask to see. Utility and fuel consumption, waste transfer notes and CO2e all roll up by site and year in Carbon & Waste.
The Statement of Applicability module covers all 93 Annex A controls from the 2022 revision across all four control themes — Organizational, People, Physical and Technological — with an Applicable / Not Applicable determination and a recorded justification against every one of them, version-tracked as the assessment changes over time. Role-based access (Platform Admin, Company User, Consultant User) and strict per-company data isolation run underneath every module on the platform, not just this one.
Risk Assessments and Point of Work Risk Assessments put hazard control at the level work is actually done, backed by a Hazard Library and COSHH Register for substance risk. An incident logged against a location updates its linked KPI immediately, with no separate reporting step. Toolbox Talks record attendance and evaluation, and the Skills matrix keeps competence — not just training attendance — visible per employee.
The Scope module records the boundaries of the business continuity management system with every exclusion justified, and the Risks & Opportunities register scores each threat before and after controls against a target. A business continuity policy, a clause-by-clause internal audit checklist, RACI responsibilities and Management of Change are ready to use, and Management Review brings the evidence together for top management.
Carbon & Waste records utility and fuel consumption by site and year, converted to CO2e, giving the energy data an energy review starts from. Energy performance targets sit in KPI Objectives alongside the rest of the business, Measuring & Monitoring keeps the checks that prove them, and an energy policy, scope requirements and an internal audit checklist built around the standard are already in the libraries.
Also in the libraries
Internal audit checklists, policy templates, scope requirements and RACI processes are now included for five more management system standards.
Real screens from inside the system, how the subscription structure works, and how Assuraz supports consultancies managing several clients.