Assura brings risk, incidents, audits, training, contractors, facilities and reporting together — structured around how a management system is actually run, not a stack of spreadsheets and shared folders.
Incidents, KPIs, training and audits reference the same underlying records, so numbers agree with each other because they're never re-typed.
Process interaction, document control, management review and audit records follow the clause structure of ISO 9001, 14001, 27001 and 45001 — not a generic form builder retrofitted to fit.
Filter by location or department, or roll everything up company-wide — the same data, viewed at whatever level the question needs.
Every module below is scoped to a company and, where it matters, to a site — built up around how compliance work actually happens day to day.
Risk aspects, principal controls and point-of-work risk assessments, scoped to each site.
Log incidents by type and location, with the relevant KPI updated automatically as each one is recorded.
Schedule, run and track audits against defined audit types, with a clear completion trail.
Company-wide and location-level KPIs, tracked month by month against target.
A hazard library behind COSHH assessments, MSDS storage and PPE requirements.
Version-controlled documents and published processes, owned and reviewed on schedule.
Course attendance, evaluations and a skills matrix for every employee.
Certifications, approvals and waste carrier licences, tracked against expiry.
Recurring facility requirements — tests, checks, services — tracked on a rolling calendar.
Inspections, certificates and checkout history for every tracked asset.
Utility and fuel bills, waste transfer notes and CO2e, rolled up by site and year.
Agendas and minutes generated from real data across the system, aligned to ISO clause 9.3.
An incident updates its KPI on its own. A completed audit, a training record and a risk assessment all feed the same Management Review, generated from what's actually in the system rather than assembled by hand beforehand. Categories, locations and departments are shared everywhere, so a filter set on one screen means the same thing on every other.
Every record is scoped by location and department, with the same filters running down the nav bar. See one site in detail, or roll every site up into one company-wide view.
A consultancy gets its own branded login covering every client company it manages, with each client's data kept fully separate — and its own operating company alongside them, if it runs one.
A platform-wide dashboard shows usage, storage and activity across every company on Assura, for whoever's responsible for the system as a whole.
Assura isn't a generic form builder with "ISO" written on the box — the modules below are built around what each standard actually asks a management system to keep track of. Assura doesn't grant certification; that still comes from your accredited certification body, but the records, evidence and reviews it keeps are structured the way an auditor expects to find them.
Process Builder documents how work actually happens and feeds Management Review agendas and minutes generated straight from live audit, incident and KPI data — aligned to clause 9.3, not assembled by hand beforehand. Quality objectives are tracked in KPI Objectives against target, and nonconformities run through to close-out in Issues & Actions. The Document Register keeps every controlled document version-tracked, owned and reviewed on schedule.
The Environmental Aspects module builds a full Activity → Aspect → Impact register under Normal, Abnormal and Emergency conditions, scoring each one for Severity × Likelihood so significant aspects surface on their own rather than being judged by eye — the same clause 6.1.2 evaluation an auditor will ask to see. Utility and fuel consumption, waste transfer notes and CO2e all roll up by site and year in Carbon & Waste.
The Statement of Applicability module covers all 93 Annex A controls from the 2022 revision across all four control themes — Organizational, People, Physical and Technological — with an Applicable / Not Applicable determination and a recorded justification against every one of them, version-tracked as the assessment changes over time. Role-based access (Platform Admin, Company User, Consultant User) and strict per-company data isolation run underneath every module on the platform, not just this one.
Risk Assessments and Point of Work Risk Assessments put hazard control at the level work is actually done, backed by a Hazard Library and COSHH Register for substance risk. An incident logged against a location updates its linked KPI immediately, with no separate reporting step. Toolbox Talks record attendance and evaluation, and the Skills matrix keeps competence — not just training attendance — visible per employee.
Real screens from inside the system, how the subscription structure works, and how Assura supports consultancies managing several clients.