EHS software
Incidents, risk, permits to work, audits and actions, and the ISO management systems.
This page.Software · EHS, cited
EHS software: what it covers, and how to test it
EHS software runs environment, health and safety work in one record: incidents, risk assessments, permits to work, audits, corrective actions and the management systems behind them.
This page sets out what the UK’s own duties ask of those records, where EHS meets ESG reporting, and 11 EHS vendors in their own words; this site has tested no products and ranks none.
What EHS software does
Six jobs, from hazard to closed action
EHS software is the system an organisation uses to run environment, health and safety work and keep the evidence that it did.
It does six jobs in order: it registers sites and people, assesses risks, controls the work, records what happens, checks and corrects, and reports.
The value is a single record: the same site, person and action seen by the safety team, the environment team and the auditor.
The environmental duties a UK site files — UK ETS, permits, the Pollution Inventory, packaging — are mapped on environmental reporting software; this page covers the EHS category as a whole.
- 1
Register the sites and people
Sites, activities, contractors and the duties and certificates that attach to each.
- 2
Assess the risks
Hazards and environmental aspects, the controls, and who is especially at risk.
- 3
Control the work
Permits to work, procedures and training, issued against the assessment.
- 4
Record what happens
Incidents, near misses, ill health and environmental events, from the site, on the day.
- 5
Check and correct
Audits, inspections and corrective actions, with owners, dates and evidence.
- 6
Report
Regulator reports, management review, certification audits and the ESG figures.
What EHS platforms cover
The modules the category is sold in, and what each must hold
EHS platforms are sold as modules, and the modules map onto the work a safety and environment team already does.
Incident management, risk assessment, permits to work, audits and inspections, and corrective action are the core of nearly every product in the category.
Environmental compliance and emissions modules sit beside them, and quality modules turn EHS into EHSQ.
Read what each module must hold, and why
| Module | What it holds | The duty or standard behind it |
|---|---|---|
| Incident management | The event, the person, the injury or occurrence, days off work, the report and its date | RIDDOR 2013 regs 4–7 and 12 |
| Risk assessment | Hazards, controls, significant findings, groups especially at risk, review history | MHSWR 1999 reg 3 |
| Policy and arrangements | The written policy, its revisions and how employees were told | HSWA 1974 s.2(3) |
| Permits to work and training | Who may do which work, under which controls, with what competence | HSWA 1974 s.2(2)(a) and (c) |
| Audits, inspections and actions | Findings by clause, nonconformities, corrective actions and closure evidence | ISO 45001:2018; ISO 14001:2026; ISO 9001:2015 |
| Environment and emissions | Aspects, permits, energy, waste, Scope 1 to 3 | ISO 14001:2026; ESOS; SECR; GHG Protocol |
A module that exists is not a module that fits: a US product may be built around a different recordkeeping format, so test the UK record, not the screen.
An EHS platformExplore
Module 01 / 06
Incidents
Injuries, ill health, near misses and dangerous occurrences, with what makes one reportable.
Module 02 / 06
Risk assessment
Suitable and sufficient assessments, their significant findings, and reviews after a change.
Module 03 / 06
Permits to work
Authorisation for higher-risk work, tied to the assessment and the people competent to do it; this site maps it to the safe systems of work in s.2(2)(a), which does not use the phrase.
Module 04 / 06
Audits and inspections
Planned checks against a standard, with findings tied to the clause.
Module 05 / 06
Corrective actions
Owners, due dates and the evidence that closed each one.
Module 06 / 06
Environment and emissions
Aspects, permits, energy, waste and the greenhouse gas inventory.
The words buyers use
EHS, HSE, EHSQ, SHEQ: one category, several names
The names change by employer and industry, but the category is the same.
“HSE software” is the same purchase as EHS software, with the words in a different order; in the UK the letters also name the regulator, the Health and Safety Executive.
EHSQ, QHSE and SHEQ add quality, which in practice means a quality management system to ISO 9001.
Health and safety management software usually means the safety half on its own, without environmental permits or emissions.
The useful question is not which acronym a vendor uses but which disciplines your team must hold in one record.
EHS
Environment, health, safetyThe usual software termHSE
Health, safety, environmentSame field; also the name of the GB regulatorEHSQ / QHSE
+ qualityAdds an ISO 9001 quality systemHealth and safety software
Safety onlyIncidents, risk, inspections, trainingUK health and safety duties
Four duties an EHS record serves
UK health and safety law requires duties, not software, and four of them shape what an EHS record holds.
Section 2(1) of the Health and Safety at Work etc. Act 1974 makes it the duty of every employer to ensure, so far as is reasonably practicable, the health, safety and welfare at work of all its employees.
Section 2(3) requires a written statement of the employer’s health and safety policy and its arrangements, revised as often as appropriate and brought to employees’ notice, except in prescribed cases.
Read the risk assessment and reporting duties
Regulation 3(1) of the Management of Health and Safety at Work Regulations 1999 requires every employer to make a suitable and sufficient assessment of the risks to employees and to others affected by its undertaking.
Regulation 3(3) requires the assessment to be reviewed where there is reason to suspect it is no longer valid or there has been a significant change.
Regulation 3(6) requires an employer with five or more employees to record the significant findings and any group identified as especially at risk.
For software, those three paragraphs translate into a version history: an assessment, the change that triggered its review, and the revision, kept side by side.
RIDDOR 2013, set out in the next section, adds a reporting clock and a record.
HSWA 1974 s.2(1)
General dutyHealth, safety and welfare, so far as reasonably practicableHSWA 1974 s.2(3)
Written policyPrepared, revised and brought to employees’ noticeMHSWR 1999 reg 3
Risk assessmentSignificant findings recorded at five or more employeesRIDDOR 2013
Report and recordReportable incidents to the enforcing authorityRIDDOR reporting
From an accident to a report, and a record kept three years
RIDDOR is the duty an incident module is most often bought to carry, because it has a clock and a record.
The steps below are the Regulations’ own; the reporting itself is made to the enforcing authority, through HSE’s RIDDOR service.
- Day of the accident01
A work-related accident happens
The record opens with the date, the place, the person and a brief description of the circumstances. - Specified injury02
Report under the reporting procedure
Fractures other than to fingers, thumbs or toes, amputations, serious burns and the other injuries listed in regulation 4(1) must be reported. - More than 3 days off03
Record the injury
An injury incapacitating a worker for routine work for more than three consecutive days, excluding the day of the accident, is recorded. - More than 7 days off04
Report within 15 days of the accident
Incapacity for more than seven consecutive days must be reported as soon as practicable and in any event within 15 days of the accident. - At least 3 years05
Keep the record
Each entry is kept for at least three years, at the workplace or the usual place of business, and extracts sent to the enforcing authority on request.
Read what this means for an incident module
The 15-day clock in regulation 4(2) runs from the accident, not from the day someone opened the record, so a module should count from the accident date.
Whether an injury becomes reportable may only be known days later, when the worker is still off, so the record has to stay open and prompt a decision.
Fatalities, dangerous occurrences, occupational diseases and gas incidents have their own regulations in RIDDOR 2013, and Schedule 2 lists the dangerous occurrences.
Under regulation 12(4), a record kept for another purpose satisfies the duty if it covers the recordable injuries and the particulars in Schedule 1, so an EHS platform’s own incident log can be the RIDDOR record.
HSE’s reporting guide also covers how to amend a notification, for example when a notified injury later proves fatal.
ISO 45001, 14001 and 9001
Three management systems, one machinery
Most EHS platforms are bought to run one or more ISO management systems, and the three most often combined are ISO 45001, ISO 14001 and ISO 9001.
ISO describes ISO 45001 as specifying requirements for an occupational health and safety management system, and says it can be integrated with other ISO management system standards.
ISO lists ISO 45001:2018 as reviewed and confirmed in 2024, with one amendment, and states that it is expected to be replaced by ISO/DIS 45001, so a revision is coming.
ISO 14001:2026, the fourth edition, was published on 15 April 2026 and cancels and replaces ISO 14001:2015.
Read the status of each standard, and what it means for software
| Standard | Edition in force | Status, as ISO records it |
|---|---|---|
| ISO 45001 | ISO 45001:2018, edition 1 | Reviewed and confirmed in 2024; one amendment; expected to be replaced by ISO/DIS 45001 |
| ISO 14001 | ISO 14001:2026, edition 4 | Published 15 April 2026; replaces ISO 14001:2015 and its 2024 amendment |
| ISO 9001 | ISO 9001:2015, edition 5 | Edition 6 listed as under publication and set to replace ISO 9001:2015 |
Clause 1 of ISO 14001:2026 says the standard “does not state specific environmental performance criteria”, so certification attests a management system, not a level of performance.
The same holds for software: a platform that runs a management system shows the system is operated, not that the site is safe or clean.
With all three standards revised or under revision in 2026, ask a vendor when its templates and clause mappings will follow each new edition.
ISO 9001’s catalogue record is a reminder to read the status line rather than the URL: the standard-number path serves the edition in production, while the 2015 edition sits at its own record.
Integrated management systemExplore
Module 01 / 04
ISO 45001:2018
Occupational health and safety management systems; current, with a replacement expected.
Module 02 / 04
ISO 14001:2026
Environmental management systems; fourth edition, published 15 April 2026.
Module 03 / 04
ISO 9001:2015
Quality management systems; the edition in force while the sixth is under publication.
Module 04 / 04
Shared machinery
Documented information, internal audit, management review, nonconformity and corrective action.
The ISO 14001 transition
UKAS’s dates for UK-accredited certification
The environmental half of most EHS platforms is built around ISO 14001, and its 2026 edition now has a UK transition timetable.
These dates are UKAS’s, from its technical bulletin Revision 2 of 7 October 2026; UKAS has said it will update the plan if the international mandatory transition document conflicts with it.
- 15 April 202601
ISO 14001:2026 published
The fourth edition cancels and replaces ISO 14001:2015 and its 2024 amendment. - 31 December 202602
Certification body self-declarations due
All CAB self-declarations, under UKAS’s plan. - 30 April 202703
UKAS transition decisions complete
A new-edition certificate requires a positive UKAS accreditation decision for the certification body. - 31 October 202704
No new certificates to the 2015 edition
Certification bodies stop all new certifications to the previous version. - 30 April 202905
Every certified organisation transitioned
Certification bodies transition all certified customers to the revised standard.
Read what changed, and where software should show it
ISO’s own summary of the changes names three areas — environmental context, leadership accountability and a clearer focus on outcomes — with a new clause 6.1.4 on risks and opportunities and a formal approach to planning changes at clause 6.3.
In an EHS platform, the context register, the risk and opportunity record and the change log are the places to check the 2026 edition has been built in.
UKAS’s bulletin also sets earlier tranche dates for certification bodies, from 30 October 2026; the full timetable is on environmental reporting software, and the standard itself on ISO 14001.
Where EHS meets ESG reporting
Energy, emissions and employees: the same records, a second audience
EHS data is ESG data with a different reader, and most EHS platforms now sell the reporting layer too.
In this site’s registry, 11 of the 11 EHS vendors also carry the carbon accounting category on their own pages, and 6 carry supply chain, as at 11 October 2026 and 30 September–1 October 2026.
An undertaking is large for ESOS if it employs at least 250 people, or has turnover over £44m and a balance sheet over £38m, under Schedule 1 of the ESOS Regulations; Phase 4’s qualification date is 31 December 2026 and notification is due by 5 December 2027.
The SECR size test is framed as “not more than” qualifying conditions on the exempt side, so a large unquoted company is in scope when it exceeds two of £36m turnover, £18m balance sheet and 250 employees, judged over two consecutive years after the first, under paragraph 20B.
The planner beside this turns the duties you carry into the capabilities a platform must show.
Read the statutory links between EHS and ESG
Traded, banking and insurance companies must cover, as a minimum, environmental matters and the company’s employees in their non-financial and sustainability information statement, under section 414CB(1) of the Companies Act 2006, which is where safety and environmental records reach the annual report.
SECR asks for energy, emissions from gas, electricity and transport fuel, an intensity ratio, the methodology and comparatives, under Schedule 7, and the government’s guidance records no statutory requirement to have SECR figures audited.
Listed companies in UKLR 6, 14, 15, 16 and 22 report against UK SRS on a comply-or-explain basis for periods from 1 January 2027 under the FCA’s PS26/19; UK SRS S1 and S2, published by DBT on 25 February 2026, are voluntary for everyone else.
An EHS platform’s emissions module should be tested as carbon accounting software is: factor years, Scope 2 methods, Scope 3 by category under the GHG Protocol, restatement and an audit trail.
The ESOS scheme itself is set out on ESOS, and who is in scope for SECR on SECR reporting requirements.
Obligations in, capabilities out
A requirements list, not a recommendation: it names no product. Each line is tied to the provision that creates it.
Nothing is stored or sent.
EHS, environmental, carbon, sustainability
Four software categories that overlap
EHS software sits beside three other categories, and most vendors sell into more than one of them.
An EHS-heritage product began with safety and environmental compliance and added emissions and reporting; a carbon platform began with an inventory and may hold no incident or permit record at all.
The UK regulator returns are mapped on environmental reporting software, the inventory on carbon accounting software, and the disclosure layer on sustainability reporting software.
Buy for the category your duties fall in, then check what else the product holds, rather than the other way round.
Your
duties
duties
Environmental reporting
UK ETS, environmental permits, the Pollution Inventory, packaging, water and waste returns.
Regulator returns, each on its own calendar.Carbon accounting
The greenhouse gas inventory: activity data, factors, Scopes 1 to 3, restatement.
The number underneath SECR and UK SRS S2.Sustainability reporting
The disclosure layer: UK SRS, CSRD, CDP and the annual report.
Formats the figures for an investor or customer.The tests before you sign
Demonstration questions, each tied to its provision
The questions beside this turn each duty and standard into something a vendor can show on a screen; tick the ones that apply and copy the list.
Run every demonstration on your own data, with a real site, a real incident and a real audit finding, because a demonstration dataset is built to look finished.
Have a site supervisor log an incident on a phone during the demonstration, because the record is only as good as the person on site is willing to make it.
A blank answer is not a yes: a product that cannot show a RIDDOR clock may still be right for environmental data and wrong for safety.
Demo questions · tick the ones you need
The pass tests are our reading of the cited provisions.
Nothing you tick is stored or sent.
The vendors
11 EHS software vendors, in their own words
Every vendor this site files under EHS, alphabetically, which ranks nothing, each linked to its own site and to its profile here.
The directory covers 73 vendors across all categories; the filter narrows it within EHS.
11 vendors · ehs
“Benchmark Gensuite is a unified EHS management software platform built on a single architecture—connecting safety, environmental compliance, and operational risk across every site”
“One AI-enabled EHS software platform to drive performance across employee health, safety, quality, environmental, and sustainability”
“Dcycle is an ESG software platform founded in 2020 that helps companies collect, manage, and govern sustainability and non-financial data”
EcoOnline sells software to manage EHS and compliance.
“Enablon is Wolters Kluwer’s integrated software platform for environment, health and safety, PSM, and enterprise oversight, with ESG capabilities embedded as part of a broader risk approach”
“Manage safety, compliance, ESG, sustainability and operational risk from a platform built to keep programs reliable across sites, teams and operational change”
“Ideagen Carbon Accounting is an AI-powered solution designed to address complex multi-region ESG reporting challenges in carbon accounting”
“Bring safety, environment, and quality workflows into one connected platform”
IsoMetrix sells software to “manage their environmental, health, safety, sustainability, and social risks”.
“Digitally handle occupational safety, quality, sustainability, and environmental management”
“Sphera unifies risk, safety and sustainability into a single enterprise-wide view — connecting intelligence across operations, products and supply chains”
Alphabetical, which ranks nothing. Each description is the vendor’s own words from its own site, read 11 October 2026 and 30 September–1 October 2026; prices appear only where the vendor publishes one. No product here has been tested by this site.
Read what each EHS vendor says about itself, and who owns it
| Vendor | In its own words | Ownership, as recorded |
|---|---|---|
| Benchmark Gensuite | “Benchmark Gensuite is a unified EHS management software platform built on a single architecture—connecting safety, environmental compliance, and operational risk across every site” | No acquisition found on its own site |
| Cority | “One AI-enabled EHS software platform to drive performance across employee health, safety, quality, environmental, and sustainability” | No acquisition found on its own site |
| Dcycle | “Dcycle is an ESG software platform founded in 2020 that helps companies collect, manage, and govern sustainability and non-financial data” | No acquisition found on its own site |
| EcoOnline | EcoOnline sells software to manage EHS and compliance. | No acquisition found on its own site |
| Enablon | “Enablon is Wolters Kluwer’s integrated software platform for environment, health and safety, PSM, and enterprise oversight, with ESG capabilities embedded as part of a broader risk approach” | Part of Wolters Kluwer since July 2016 |
| Evotix | “Manage safety, compliance, ESG, sustainability and operational risk from a platform built to keep programs reliable across sites, teams and operational change” | No acquisition found on its own site |
| Ideagen | “Ideagen Carbon Accounting is an AI-powered solution designed to address complex multi-region ESG reporting challenges in carbon accounting” | Part of Hg since June 2022 |
| Intelex | “Bring safety, environment, and quality workflows into one connected platform” | Part of Fortive since July 2019 |
| IsoMetrix | IsoMetrix sells software to “manage their environmental, health, safety, sustainability, and social risks”. | No acquisition found on its own site |
| Quentic | “Digitally handle occupational safety, quality, sustainability, and environmental management” | Part of AMCS since July 2022 |
| Sphera | “Sphera unifies risk, safety and sustainability into a single enterprise-wide view — connecting intelligence across operations, products and supply chains” | Part of Blackstone since September 2021 |
A vendor’s own claim that it covers a regime is recorded as its claim, dated; it is not evidence that the product passes the tests above.
The wider ESG reporting market, including the EHS vendors, is held against UK duties on the ESG software comparison.
Who owns the EHS vendors
5 acquisitions on the registry, dated
Several EHS platforms belong to larger groups, and the owner is who you contract with and who decides the product’s future.
Each date below is from the owner’s or acquirer’s own announcement, as recorded in this site’s registry, read 11 October 2026 and 30 September–1 October 2026.
- July 201601
Enablon: Part of Wolters Kluwer since July 2016
“Enablon is Wolters Kluwer’s integrated software platform for environment, health and safety, PSM, and enterprise oversight, with ESG capabilities embedded as part of a broader risk approach” - July 201902
Intelex: Part of Fortive since July 2019
“Bring safety, environment, and quality workflows into one connected platform” - September 202103
Sphera: Part of Blackstone since September 2021
“Sphera unifies risk, safety and sustainability into a single enterprise-wide view — connecting intelligence across operations, products and supply chains” - June 202204
Ideagen: Part of Hg since June 2022
“Ideagen Carbon Accounting is an AI-powered solution designed to address complex multi-region ESG reporting challenges in carbon accounting” - July 202205
Quentic: Part of AMCS since July 2022
“Digitally handle occupational safety, quality, sustainability, and environmental management”
For Benchmark Gensuite, Cority, Dcycle, EcoOnline, Evotix, IsoMetrix, the registry found no acquisition on the vendor’s own site, which is a statement about where it looked, not proof of independence.
After any change of owner, confirm which legal entity holds your incident and health records, and what the contract says about exporting them.
Choosing without a ranking
“Best” is a question about your duties, not a product
There is no best EHS software in general, and any list that names one has chosen the criteria that produce its answer.
The ranked lists that appear for this search are mostly written by vendors that appear in their own tables, and some describe US recordkeeping rather than RIDDOR.
The useful question is which product passes the tests your own duties impose, shown on your own sites and data.
Analyst placings and peer-review scores, where a vendor cites one, are the publisher’s statement, dated, and not a finding of this site.
None of the 11 EHS vendors in this site’s registry publishes a price, so ask each for a written three-year cost covering sites, users, mobile access, integrations and exit.
- 1
List your duties
HSWA policy, risk assessment, RIDDOR, the ISO systems you hold, ESOS, SECR — only the ones you carry.
- 2
List your sites and people
Who records an incident, on what device, and who closes the action.
- 3
Turn them into tests
The demonstration questions above, on your own data.
- 4
Check the evidence
Can an auditor or an inspector follow a record back to its source and its history?
- 5
Check the owner and the exit
Who you contract with, and whether three years of records leave with you.
What this page is not
No product has been tested here
This site has tested no products
Nothing on this page is a rating, ranking or recommendation of any product.
Vendor descriptions and ownership come from each vendor’s own pages and the owners’ announcements, as recorded in this site’s registry, read 11 October 2026 and 30 September–1 October 2026.
Every duty, date and standard traces to the instrument or body named beside it.
Frequently asked
EHS software, answered
What is EHS software?
Software for running environment, health and safety work: logging incidents and near misses, holding risk assessments and permits to work, scheduling audits and inspections, tracking corrective actions, and keeping the records a management system such as ISO 45001 or ISO 14001 needs.
Most platforms now also sell environmental data and emissions modules, which is where EHS meets ESG reporting.
What does EHS stand for?
Environment, health and safety.
The same field is also written HSE (health, safety and environment), EHSQ or QHSE when quality is added, and SHEQ in some UK sectors.
The words differ by employer and industry; the software category is the same, and the buyer’s question is which of those disciplines the platform must hold.
What is the difference between EHS software and health and safety management software?
Health and safety management software usually means the safety half on its own: incidents, risk assessments, inspections and training.
EHS software adds the environmental half, such as environmental permits, aspects and impacts, waste and energy data, and often emissions.
If you need only the safety duties, a narrower product may carry them; if one team runs both, a single record of sites, people and actions is the reason to buy EHS.
Which is the best EHS software?
This site does not rank products and has tested none.
The useful question is which product passes the tests your own duties impose: a RIDDOR record and its 15-day clock, risk assessments that keep their history, audits tied to the clauses of the standards you hold, energy and emissions data that reconcile with your reporting boundary, and an export you could rebuild elsewhere, shown on your own data.
What EHS software is used in the UK?
This site’s registry files 11 vendors under EHS, alphabetically and in their own words, with their ownership dated: Benchmark Gensuite, Cority, Dcycle, EcoOnline, Enablon, Evotix, Ideagen, Intelex, IsoMetrix, Quentic, Sphera.
Inclusion is not an endorsement, and a UK buyer should test each for the UK specifics, such as RIDDOR records, rather than for a US recordkeeping format.
Does UK law require EHS software?
No. UK health and safety law requires the duties, not a product: a written health and safety policy under section 2(3) of the Health and Safety at Work etc. Act 1974, suitable and sufficient risk assessments under regulation 3 of the Management of Health and Safety at Work Regulations 1999, and RIDDOR reports and records.
Paper or spreadsheets can meet them; software helps when sites, people and actions outgrow them.
What does RIDDOR require an EHS system to record?
RIDDOR 2013 requires the responsible person to keep a record of reportable incidents and of injuries that keep a worker off routine work for more than three consecutive days, excluding the day of the accident, with the particulars listed in Schedule 1. Each entry is kept for at least three years.
Injuries that incapacitate for more than seven consecutive days must be reported within 15 days of the accident.
Do I need software for ISO 45001?
No. ISO 45001 specifies requirements for an occupational health and safety management system, and a system can be run on documents and spreadsheets.
Software helps keep hazard registers, legal requirements, audits, incidents and corrective actions current across many sites.
ISO lists ISO 45001:2018 as current and expects it to be replaced by a new edition, so ask how a vendor will handle the revision.
What is EHSQ software?
EHS software that also runs a quality management system, usually to ISO 9001.
ISO 9001:2015 is the edition in force, and ISO lists a sixth edition as under publication, as read on 11 October 2026.
The common thread across ISO 45001, ISO 14001 and ISO 9001 is the same machinery — documented information, internal audit, nonconformity and corrective action — so one platform can hold all three.
Can EHS software do ESG and carbon reporting?
Often in part.
In this site’s registry, 11 of the 11 EHS vendors also carry the carbon accounting category on their own pages.
Check the emissions module as you would any carbon accounting software: factor years, Scope 2 methods, Scope 3 by category, restatement and an audit trail.
The test list is on the carbon accounting software guide.
How does EHS data feed ESOS and SECR?
Both draw on energy data an EHS platform may already hold.
ESOS asks large undertakings for total energy by organisational purpose, with Phase 4 qualification on 31 December 2026 and notification by 5 December 2027.
SECR asks quoted companies, and large unquoted companies and LLPs, for energy, emissions, an intensity ratio and comparatives; a company is large only when it exceeds two of £36m turnover, £18m balance sheet and 250 employees.
How much does EHS software cost?
None of the 11 EHS vendors in this site’s registry publishes a price on its own pages; each is recorded as Enterprise level · TBD, read 11 October 2026 and 30 September–1 October 2026.
Ask for a written three-year cost that includes implementation, the number of sites and users, mobile access, integrations and the cost of exporting your records at exit.
Has this site tested any EHS software?
No. This site has tested no products.
The page is built from the Health and Safety at Work etc. Act 1974, the Management of Health and Safety at Work Regulations 1999, RIDDOR 2013, the ISO management system standards and the ESOS and SECR regulations, each cited to its provision, and the vendor directory quotes only what each vendor publishes about itself.
Sources
Primary sources
Every duty, date and standard on this page traces to the instrument or body listed here.
Vendor descriptions and ownership are cited on each vendor’s profile to the vendor’s or acquirer’s own page.
Checked against 21 sources fromlegislation.gov.ukHealth and Safety ExecutiveISOUKASEnvironment AgencyGOV.UK (DESNZ, Defra)
- legislation.gov.ukHealth and Safety at Work etc. Act 1974, section 2
The employer’s general duty, s.2(1), and the written health and safety policy, s.2(3).
- legislation.gov.ukManagement of Health and Safety at Work Regulations 1999, regulation 3
Suitable and sufficient risk assessment; significant findings recorded where five or more are employed.
- legislation.gov.ukRIDDOR 2013 (SI 2013/1471), regulation 4
Specified injuries, and over-seven-day injuries reported within 15 days of the accident.
- legislation.gov.ukRIDDOR 2013 (SI 2013/1471), regulation 12
The record of reportable incidents and over-three-day injuries, kept for at least three years.
- legislation.gov.ukRIDDOR 2013 (SI 2013/1471), contents and Schedules 1 and 2
The reporting procedure, the particulars to record, and the dangerous occurrences.
- Health and Safety ExecutiveMake a RIDDOR report — overview
Who reports, how, and how to amend a notification.
- ISOISO 45001:2018 — Occupational health and safety management systems
Edition 1, 2018; reviewed and confirmed in 2024; ISO expects a replacement, ISO/DIS 45001.
- ISOISO 14001:2026 — Environmental management systems (Foreword, Clause 1, §§0.3, 0.5)
Fourth edition, published 15 April 2026; it states no specific environmental performance criteria.
- UKASEMS ISO 14001:2026 transition — technical bulletin, Revision 2 (7 October 2026)
The UK transition timeline for UK-accredited certification.
- ISOISO 14001 — what has changed
ISO’s own summary of the 2026 revision.
- ISOISO 9001:2015 — Quality management systems
Edition 5, 2015; the edition in force until its successor is published.
- ISOISO 9001 — catalogue record for the next edition
Edition 6 “under publication” and set to replace ISO 9001:2015, as read on 11 October 2026.
- legislation.gov.ukESOS Regulations 2014 (SI 2014/1643), Schedule 1
The large-undertaking test: at least 250 employees, or turnover over £44m and balance sheet over £38m.
- Environment AgencyHow to comply with ESOS phase 4
Qualification on 31 December 2026; notification by 5 December 2027.
- legislation.gov.ukSI 2008/410 Schedule 7, paragraph 20B
The SECR size exemption and its two-year test.
- legislation.gov.ukSI 2008/410 Schedule 7
The SECR lines for quoted and large unquoted companies.
- GOV.UK (DESNZ, Defra)Environmental Reporting Guidelines, including SECR requirements
The government’s environmental reporting guidance; no statutory requirement to audit SECR figures.
- legislation.gov.ukCompanies Act 2006, section 414CB
Environmental matters and the company’s employees in the non-financial and sustainability information statement.
- Financial Conduct AuthorityPS26/19 — final rules on UK SRS reporting by listed companies
Comply or explain across UK SRS for UKLR 6, 14, 15, 16 and 22, periods from 1 January 2027.
- Department for Business and TradeUK Sustainability Reporting Standards S1 and S2
Published 25 February 2026 for voluntary use.
- GHG Protocol (WRI, WBCSD)A Corporate Accounting and Reporting Standard
The method behind most EHS platforms’ emissions modules.
Continue reading
Read next
Software
Environmental reporting software
UK environmental duties beyond carbon: UK ETS, permits, the Pollution Inventory and packaging.
Software
Carbon accounting software
The emissions half of the job: factors, scopes, restatement and the tests.
Standards
ISO 14001
The environmental management standard, its 2026 edition and certification.