Skip to main content
whoot.
Venues & eventsIncident managementMartyn's LawPricingFeatures
Sign inStart free
Venues & eventsIncident managementMartyn's LawPricingFeatures
Sign inStart free

Martyn’s Law asks venues to notify, guide and account for people.

whoot. alerts every device and any phone, hears back by name and keeps the record an inspector can read. What follows is where the Terrorism (Protection of Premises) Act stands, what each tier must do, and how the communication procedure runs on one platform.

Start free trialRequest a consultation14 days · full access · no card
An event control team briefing beside a wall-mounted venue map, overlooking the arena bowl
Procedures rehearsed before the bowl fills.
  • Two-way SMS
  • Always-on voice
  • 100% recorded
  • UK data residency
Sheet 1The Act · As of October 2026 · Dates from legislation.gov.uk and gov.uk
TimeFromEntryAction
3 Apr 2025

Parliament

In law. Not yet in force.

The Act is named for Martyn Hett, who died at Manchester Arena in 2017. It received Royal Assent in April 2025. The duties commence on a date the Government has not yet set, expected in spring 2027, and the Security Industry Authority (SIA) will enforce them.

SourcesStatutory guidance ↗ (opens in a new tab)SIA regulator page ↗ (opens in a new tab)Impact Assessment ↗ (opens in a new tab)Notification Regulations 2026 ↗ (opens in a new tab)

In law

Royal Assent. At least 24 months before the duties commence.

15 Apr 2026

Home Office

Statutory guidance published.

Published
15 Jun 2026

SIA

The SIA’s duty to issue its own guidance commenced.

Commenced
Autumn 2026

SIA

SIA final guidance expected.

Expected
Early 2027

SIA

SIA notification portal opens.

Expected
Spring 2027

Government

Expected commencement. Three months from that day to notify the SIA.

Expected
Two tiers

The Act

Two tiers of qualifying premises, by capacity.

The two tiers, their duties and their penalties
TierDutiesPenalty
Standard tier · 200 to 799Notify the SIA. Public protection procedures for evacuation, invacuation, lockdown and communication, so far as reasonably practicable.Up to £10,000, plus £500 a day
Enhanced tier · 800+All of the above, plus public protection measures, documented and submitted to the SIA, with a designated senior individual.Up to £18m or 5% of worldwide revenue, plus £50,000 a day

Thresholds attach to qualifying premises. A standalone event enters scope at 800. No documentation duty applies at the standard tier, though the guidance notes an undocumented procedure is hard to demonstrate on inspection.

Section 5

The Act

Four procedures. The first three depend on the fourth.

The Act names evacuation, invacuation, lockdown and communication. Most venues have no tool for communication, and that is what whoot. provides.

Evacuation
One alert to every device and any phone, with the route and the muster point.
Invacuation
Pre-scripted messages to hold people inside, and replies to show who did.
Lockdown
Zone rooms for the people acting, SMS for everyone else, and a live map of both.
Communication
Staff to staff, staff to control room, and back, with every message acknowledged, timestamped and kept. The other three procedures run on this one.
101 s

Explainer

The four procedures, in under two minutes.

The explainer is silent; the captions carry the narration.
End of sheet 1Back to the top

WhatsApp groups don’t work when seconds count.

Nobody can prove who read it. whoot. replaces the group chat and the ring-round with alerts that are acknowledged, recorded and kept.

Comms recorded
100%
To a full-team alert
<24s
SMS to any phone
2-way
Apps needed to reply
0

Instant alerts · Two-way SMS · 100% recorded · Live map · Audit trail

Traditional methods, and whoot.

Traditional methods compared with whoot.
CapabilityTraditionalwhoot.
Alert propagationWhatsApp group, minutesOne action, every device
People without the appNot reachableTwo-way SMS to any phone
Confirmation of safetyManual roll-callReplies, counted by name
The recordManual logsAutomatic, timestamped
DrillsNot evidencedLogged and replayable
SetupWeeks of installation90 seconds

From obligation to operation

No hardware · No installation
Prepare
Rooms, lists and scenarios, mapped to your zones and your four procedures.
Drill
Run it on the platform, with every word recorded and the run marked as a drill.
Respond
One action alerts everyone, voice for the team and SMS for the rest, and the replies come back.
Review
Replay the incident, export the dossier and run the after-action review from the record.
Sheet 2The communication procedure · Worked example, figures illustrative
TimeFromEntryActionNowReported14:32:01
Now
Index
  • 14:32:01Reported
  • 14:32:03Alert
  • 14:32:08Guide
  • 14:32:24Account
  • 14:32:31Sealed
14:32:01

Control room

A suspicious package at Gate 4 North, and a scenario tile is tapped.

Each of the four procedures is declarable in one tap, with its rooms, lists and checklist attached. Whoever is closest declares from a phone, and the response starts there.

Declared

Suspicious package reported, Gate 4 North. Partial evacuation, Zone B.

14:32:03

whoot.

One alert to every device and any phone: 250 texts out, two seconds after the tap.

Most of the public is not in a voice room. A text lands in the Messages app they already use, and the reply comes back to your team, so you know who is safe.

Sent to
250
Message
Evacuate now. Proceed calmly to Assembly Point B. Reply once you are safe.
  • Reaches any phone, with no app, no data connection and no sign-up
  • Replies thread back into the same incident
  • Each person is safe, stuck or at the muster point, by name
  • The people you alert are the people you hear from

from £39a month+VAT · both directions

See SMS pricing

whoot. for iOS: the All staff alerts room, with the emergency control at the top and the hold-to-talk control in the centre
Attachment 01whoot. for iOS, All staff alerts. Actual screen.
Alert
14:32:08

Control room

Partial evacuation, Zone B: instructions to the people acting, and to everyone else.

The people acting are in zone rooms, everyone else is on SMS, and one live map shows both, with pings, what3words references and your own annotated plan. At 14:32:12 the Gate 4 team has visual on the package and is cordoning a 30 m radius, and every word on the room is recorded and transcribed as it is said.

G1G2G3G4NORTH STANDSOUTH STANDLOADING BAYZONE B · CORDON 30 MASSEMBLY POINT A · 247LIVE MAP · 14:32:1234 DEVICES
Attachment 02The live map at 14:32:12. Demonstration, synthetic data.
Guide
14:32:24

Replies

247 of 250 confirmed safe at Point B, by name.

Replies are counted by name: safe, stuck or at the muster point. The acknowledgement roster shows who was alerted, who replied and who needed help, by channel and by name, and the three who have not answered are chased.

Accounted for247 / 250

247 confirmed safe3 being chased

Alert to accounted for
24s
Confirm
14:32:31

whoot.

Summary sealed, and the full recording committed to the audit log.

A procedure nobody can demonstrate is hard to defend. Using whoot. produces the evidence as a by-product, so when the SIA asks what happened, the record already exists.

Procedures as scenarios
Each of the four procedures declarable in one tap, with its rooms, lists and checklist attached.
Drill log
Drills run on the platform, marked as drills, kept apart from live incidents.
Acknowledgement roster
Who was alerted, who replied and who needed help, by channel and by name.
Incident dossier
Timeline, transcripts, map and media in one PDF, for the review and the inspector.
At rest
AES-256
In transit
TLS 1.3 · DTLS-SRTP
Data residency
UK
Access
SSO · MFA · 50+ permissions
whoot. for iOS: the Transcripts view, each line attributed to its speaker with the recording behind it
Attachment 03whoot. for iOS, Transcripts. Actual screen.
Sealed
Guides

Two PDFs

Two guides for one email.

One for events and premises under 800, one for the enhanced tier, and a summary the day the SIA guidance lands.

  • Standard tier · 200 to 799 · 2 pagesEvents and premises under 800The alert, the sign-up poster, and the two-way list that hears back.
    Opens with your email
  • Enhanced tier · 800+ · 3 pagesEnhanced-tier premisesThe live map, the SMS campaign, and the security operations view.
    Opens with your email

Leave an email. The guides open straight away, and you get a plain-English summary the day the SIA publishes its guidance.

Double opt-in · One-click unsubscribe · No sharing

Today

You

Protect your venue. Protect your people.

Voice for your team, SMS for everyone else, and the record to prove it.

whoot. provides incident-management and emergency-communication infrastructure that supports organisations in implementing their Martyn’s Law obligations under the Terrorism (Protection of Premises) Act. It does not constitute legal compliance advice, and no product can make a venue compliant by itself. Consult a qualified safety professional for guidance specific to your premises.

Incident managementVenues & eventsIncident responseSMS pricingPricingSecurity specFeatures

Signed
Date
Start free trialRequest a consultation

14 days · full access · no card

whoot.

Push. Talk. Heard. Incident and crowd management for venues, events and operations, built on an always-on voice core.

  • whoot. on LinkedIn (opens in a new tab)
  • whoot. on Instagram (opens in a new tab)

Product

  • Features
  • Incident management
  • Pricing
  • Roadmap
  • Documentation
  • iOS app (opens in a new tab)
  • Android app (opens in a new tab)

Use cases

  • All use cases
  • Venues & events
  • Incident response
  • Financial services
  • Operations teams
  • Trader voice
  • Martyn's law

Company

  • About
  • Case studies
  • Blog
  • Investors
  • Contact
  • System status

Legal

  • Privacy
  • Terms
  • Acceptable use
  • Security
  • Accessibility

© 2026 Eager Lobster Ltd, trading as whoot. Registered in England and Wales, company number 17038042.

Registered office: First Floor, 1 Des Roches Square, Witan Way, Witney, OX28 4BE. Prices exclude VAT and other applicable taxes.

all systems operational