The law is coming. Your plan can be ready this evening.
Martyn's Law will require every UK venue that could reasonably expect 200 or more people at once, staff and volunteers counted in, to have terrorism protection procedures in place and staff who can explain them. Four Drills turns a 20-minute walkthrough of your building into both.
See this pack in full, all 13 pages
- 1 Walk your building (20 min)
- 2 Your pack writes itself
- 3 Staff confirm they know it (from 2027)
First, the honest question: are you actually in scope?
Under 200 people
The law doesn't apply to you.
No duty, no deadline, nothing to register, and we'll tell you so for free, in writing. But safety doesn't start at 200: many smaller venues set up the same procedures voluntarily.
200 to 799 people
You're Standard Tier.
From spring 2027 you'll need four procedures (evacuation, invacuation, lockdown, communication), staff who know them, and to notify the regulator. This is who we built Four Drills for.
800 or more
You're Enhanced Tier.
Bigger duties, different game. You likely need professional security advice, and we'll say so rather than sell to you.
Places of worship, childcare premises, schools and further education colleges stay Standard Tier at any capacity, so the 800 threshold does not apply to them. Universities and other higher education institutions are not on that list and are Enhanced Tier at 800 or more.
Count everyone, including customers, staff and volunteers, at your busiest realistic moment. Most venues guess wrong in one direction or the other. The check is free and takes two minutes.
Four procedures, written for your building.
Standard Tier asks for these four. Each section of your pack cites the statutory guidance paragraph it satisfies.
Evacuation
"…to get people away from danger by moving them out of the premises or event." (para 7.33)
Invacuation
"…to move people away from danger to a place within the premises or event where there is less risk of physical harm." (para 7.39)
Lockdown
"…to secure the premises, preventing people from entering or leaving… to keep people away from danger." (para 7.41)
Communication
"…to ensure information is provided to people at the premises or event, alerting them to danger as quickly as possible." (para 7.46)
The regulator's test is deliberately template-proof.
Two things are in the Act itself. Your procedures have to be appropriate for these premises, which is a judgement about your building rather than a form to file, and your staff have to be aware of them and of their own role. On top of that the SIA has said it will expect staff and volunteers to be able to explain them.
Our own shorthand for that, and the way this product is built, is three questions: do the procedures exist, do they make sense for this specific building, and can the people who work there explain them. The last of those is the regulator's; the first two are ours, and they are what the duty amounts to in a building.
A downloaded template fails the second test the moment an inspector asks "which door is this referring to?", and fails the third the moment they ask your Saturday bar staff what invacuation means.
Four Drills asks you about your actual building: your exits by the names your staff use, your locks and who holds the keys, your safer rooms, your assembly point. It writes the four procedures around your answers. Then it gets every member of staff to read them and confirm they understand, and keeps the dated, versioned record.
It also reads your answers back before it builds anything, and tells you where they disagree with each other: a capacity assessment dated after the figure it supports, a single assembly point with no second one, safer areas and a peak figure that do not agree about where people go. You are shown what it found and you decide what to do about it.
A template cannot do that, and the reason is not that ours is cleverer. It is that a template has no answers of yours to check against each other.
Staff attestation is not live yet: it launches before duties commence (expected spring 2027) and is included in the price you pay today.
The whole product in six words
Your building. Your plan. Your proof.
One walkthrough. Everything the duty asks for.
- The four procedures, written for your building. Evacuation, invacuation, lockdown and communication, each citing the statutory guidance it satisfies. Not one sentence of generic filler.
- The capacity assessment record. The evidence for why you're in scope (or not), by a method the guidance permits. The SIA can ask how you worked it out; this is the answer.
- A staff summary card. One printable page: the four actions, your real assembly point, your real phrases. Lives by the till.
-
Staff attestation, logged. Every member of staff and
every volunteer reads the procedures on their own phone, answers three
quick questions about your building, and confirms. Who, what
version, when: recorded permanently. Because the plan only counts if
your people know it.
Staff attestation is not live yet: it launches before duties commence (expected spring 2027) and is included in the price you pay today.
-
The evidence pack. An SIA letter arrives; you click
once; everything they'd ask for comes out as a single dated document.
The one-click evidence export is not live yet: it launches before duties commence (expected spring 2027) and is included in the price you pay today.
-
Annual review, prompted. Buildings change. We nudge you
yearly (or when guidance changes), you confirm or update, everyone
re-attests if needed. The record never goes stale.
Annual review prompts are not live yet: they launch before duties commence (expected spring 2027) and are included in the price you pay today.
£199 + VAT a year, per venue, for a venue in scope. A venue under 200 is £79 + VAT a year and has no duty to meet at all. The scope check is free, and you can walk your whole building before you decide. Full pricing.
The paperwork is the means. The four minutes are the point.
If the worst ever happened near your venue, everything would come down to a few minutes: whether the person behind the bar knows which doors to secure, whether someone thinks to bring the smokers inside, whether anyone can name the assembly point without looking it up. The law calls these public protection procedures. In real life, they are the difference between staff who move and staff who freeze.
No document keeps anyone safe by itself, and we will never claim otherwise. What a good plan does is simpler: it means your people are not improvising on the worst day of their lives. That is what the four drills are for. It is also why the part we take most seriously is not the PDF, but whether your staff can explain it.
Martyn's Law exists because of the Manchester Arena attack in 2017, and the campaign led by Figen Murray, whose son Martyn Hett was killed that night. We tell that history properly in our FAQ.
Built from the statutory guidance, paragraph by paragraph. Every section of your pack cites the guidance it satisfies.
Honest screening: if the law doesn't apply to you, we say so in writing, free.
Independent: not affiliated with the Home Office, the SIA or any government body. And we'll never charge you for something the government does for free (SIA notification is free; we prepare it, you submit it).