Protective security · Martyn's Law
//notify & guide the public · account for every person
The Act asks venues to notify, guide and account for people. whoot. alerts every device and any phone, hears back, and keeps the record.
Suspicious package reported — Gate 4 North
Evacuate now. Proceed calmly to Assembly Point B.
Initiating partial evacuation — Zone B
Visual on package. Cordoning 30m radius.
247 / 250 confirmed safe at Point B.
Summary sealed. Full recording committed to audit log.
100%
Comms recorded
<24s
To full-team alert
2-way
SMS to any phone
0
Apps needed to reply
Procedures rehearsed before the bowl fills
Enhanced tier800+
The Act · as of September 2026
In law.
Not yet in force.
Named for Martyn Hett, who died at Manchester Arena in 2017. Royal Assent was April 2025. The duties commence on a date the Government has not yet set, expected in spring 2027, and the SIA enforces them.
3 Apr 2025
Royal Assent. At least 24 months before the duties commence.
15 Apr 2026
Home Office statutory guidance published.
15 Jun 2026
The SIA's duty to issue its own guidance commenced.
Autumn 2026expected
SIA final guidance expected.
Early 2027expected
SIA notification portal opens.
Spring 2027expected
Expected commencement. Three months from that day to notify the SIA.
SourcesStatutory guidance ↗SIA regulator page ↗Impact Assessment ↗Notification Regulations 2026 ↗
Two tiers · qualifying premises
Standard tier · 200 to 799
Notify the SIA. Public protection procedures for evacuation, invacuation, lockdown and communication, so far as reasonably practicable.
Penalty · Up to £10,000, plus £500 a day
Enhanced tier · 800+
All of the above, plus public protection measures, documented and submitted to the SIA, with a designated senior individual.
Penalty · Up to £18m or 5% of worldwide revenue, plus £50,000 a day
Thresholds attach to qualifying premises. A standalone event enters scope at 800. No documentation duty applies at the standard tier, though the guidance notes an undocumented procedure is hard to demonstrate on inspection.
101 seconds
The four procedures,
in under two minutes.
Section 5 · public protection procedures
Four procedures.
One of them is ours.
The Act names evacuation, invacuation, lockdown and communication. The first three depend on the fourth.
01
Evacuation
One alert to every device and any phone, with the route and the muster point.
02
Invacuation
Pre-scripted messages to hold people inside, and replies to show who did.
03
Lockdown
Zone rooms for the people acting, SMS for everyone else, and a live map of both.
04
Communication
Staff to staff, staff to control room, and back. Acknowledged, timestamped, kept.
Two-way SMS
Reach everyone.
Even without the app.
Most of the public is not in a voice room. A text lands in the Messages app they already use, and the reply comes back to your team, so you know who is safe.
Incident SMS · list of 250
two-wayEvacuate now. Proceed calmly to Assembly Point B. Reply once you are safe.
Safe and accounted for at Point B.
On my way out via the south exit.
Need assistance — 2nd floor, west.
Reaches any phone
No app, no data connection, no sign-up.
It talks back
Replies thread into the same incident.
Know who's safe
Safe, stuck, or at the muster point, by name.
One list, both ways
The people you alert are the people you hear from.
When seconds count
WhatsApp groups don't work.
Nobody can prove who read it. whoot. replaces the group chat and the ring-round with alerts that are acknowledged, recorded and kept.
What the SIA will ask to see
The record
writes itself.
A procedure nobody can demonstrate is hard to defend. whoot. produces the evidence as a by-product of using it.
Procedures as scenarios
Each of the four procedures declarable in one tap, with its rooms, lists and checklist attached.
Drill log
Drills run on the platform, marked as drills, kept apart from live incidents.
Acknowledgement roster
Who was alerted, who replied, who needed help. By channel and by name.
Incident dossier
Timeline, transcripts, map and media in one PDF, for the review and the inspector.
The difference
Traditional methods
vs whoot.
Implementation
From obligation
to operation.
No hardware. No installation.
Rooms, lists, scenarios
Mapped to your zones and your four procedures.
Run it on the platform
Every word recorded. Marked as a drill.
One action alerts everyone
Voice for the team, SMS for the rest. Replies come back.
Replay and report
Dossier, after-action review, the record kept.
Guides
Two guides.
One email.
One for events and premises under 800, one for the enhanced tier. And a summary the day the SIA guidance lands.
Standard tier · 200 to 799 · 2 pages
Events and premises under 800
The alert, the sign-up poster, and the two-way list that hears back.
Enhanced tier · 800+ · 3 pages
Enhanced-tier premises
The live map, the SMS campaign, and the security operations view.
Before you need it
Protect your venue.
Protect your people.
Voice for your team, SMS for everyone else, and the record to prove it.
Note:whoot. provides incident-management and emergency-communication infrastructure that supports organisations in implementing their Martyn's Law obligations under the Terrorism (Protection of Premises) Act. It does not constitute legal compliance advice, and no product can make a venue compliant by itself. Consult a qualified safety professional for guidance specific to your premises.