Compliance

Compliance, Automated

Live coverage across ISO 9001, 14001, 45001 and UK HSE - with the NCRs, CAPAs, audits, and evidence packs your certification body actually asks for.

Compliance
Compliance Score
96%
Active Policies
14
Information Security Policy
15 Jan 2026Active
Data Protection Impact Assessment
22 Feb 2026Active
Risk Register
01 Mar 2026Under Review
GDPR aligned - Full audit trail enabled

Frameworks

Four frameworks, evaluated continuously

Every record you create is mapped against the clauses it covers. The Hub tells you, in real time, which controls are met and which still need evidence.

UK HSE

Health & Safety at Work etc. Act 1974, COSHH 2002, RIDDOR 2013, manual handling, fire safety.

ISO 9001

Quality Management Systems. Document control, internal audits, management review, CAPA loop.

ISO 45001

Occupational Health & Safety. Hazard identification, risk controls, worker consultation, incident investigation.

ISO 14001

Environmental Management. Aspects and impacts, legal register, monitoring, emergency preparedness.

What's Included

Every record, every workflow, every report your auditor expects.

Zero-click Compliance

Open Compliance for the first time and the Hub auto-enrols every framework, drafts the documents, runs the evaluator, and shows you a passing score. Sign-all promotes every draft in one click.

  • Auto-enrols UK HSE, ISO 9001, 45001 and 14001 on first load
  • Infers wizard inputs from existing tenant data (sector, staff, facility)
  • Generates every applicable policy and procedure from DOCX templates
  • Health Score (0-100) summarises coverage and shows what would drag it down
  • Mark a control as exempt when your evidence lives elsewhere - score stays clean
  • Raise NCR button on any Part, Order, Purchase Order or Account

Compliance Hub

One screen showing live coverage across every framework, with the gaps you need to close.

  • Coverage percentage per framework
  • Open NCRs and overdue CAPAs
  • Training expiring within 60 days
  • Calibrations past due
  • Next management review countdown

Nonconformances (NCRs)

Capture issues, drive containment, root-cause, and verification through a defined workflow.

  • Workflow: open to investigating to contained to corrected to verified to closed
  • Root cause and immediate action fields
  • Linked CAPAs
  • Evidence gallery on every record
  • Auditor-ready history

CAPAs

Corrective and preventive actions with owners, target dates, and effectiveness verification.

  • Corrective and preventive distinction
  • Target close date and owner
  • Effectiveness verification step
  • Linked to source NCR, audit finding, or risk
  • Overdue surfacing on the Hub

Internal Audits

Plan audits against your controls, capture findings, and track each finding to closure.

  • Audit plan with scope and lead auditor
  • Findings linked to controls and clauses
  • Finding-to-CAPA pipeline
  • Audit programme calendar
  • Evidence attached per finding

Risk Register

Score risks by severity, likelihood, and detectability. Track mitigations and residual scores.

  • Severity x likelihood x detectability scoring
  • Mitigation actions and owners
  • Initial vs residual risk tracking
  • Aspect and impact assessment for ISO 14001
  • Review cadence per risk

Training Records

Track competencies, certificate expiry, and refresher windows for every staff member.

  • Competency per staff member
  • Certificate expiry tracking
  • 60-day and 30-day expiry warnings
  • Renewal evidence upload
  • Training matrix view

Calibration Records

Keep measurement equipment in tolerance with next-due tracking and overdue alerts.

  • Calibration certificate per asset
  • Next-due date tracking
  • Overdue alerts on the Hub
  • Linked to equipment register
  • Tolerance and method fields

Management Reviews

Run Clause 9.3 reviews with inputs and outputs captured against ISO 9001 and 45001.

  • Inputs: audit results, customer feedback, KPI performance
  • Outputs: decisions, resource needs, improvement actions
  • Attendee register and minutes
  • Linked outputs auto-create CAPAs
  • Review cadence reminders

Legal Requirements Register

Track statutes that apply to your operation - HSWA 1974, COSHH 2002, RIDDOR, EPR 2016, GDPR.

  • Statute reference and applicability
  • Compliance evaluation status
  • Linked controls and evidence
  • Review cadence per requirement
  • Regulator and version tracking

HSE Documents

Manage SDS, COSHH assessments, fire risk assessments, and manual handling assessments.

  • Safety data sheets per substance
  • COSHH assessments linked to SDS
  • Fire risk assessment per site
  • Manual handling assessments
  • Review and re-issue tracking

QMS Documents

Controlled documents with category, status, owner, and review date - draft to published.

  • Category-based organisation
  • Status: draft, published, withdrawn
  • Owner and review-date fields
  • Version history
  • Distribution by role

Evidence Pack PDF

Compile an audit-submission pack on demand. One click, one PDF, everything stamped and dated.

  • Selectable framework and date range
  • Coverage summary front page
  • NCRs, CAPAs, audits, training, calibrations included
  • Branded cover and footer
  • Ready for certification body submission

Document Automation

Five hero documents, generated from your tenant data

The fastest way to a stalled audit is a blank-page policy manual. ICS Ops ships a DOCX template generator for the five documents most SMEs trip on - pre-filled with your company name, sites, equipment register, and staff list.

Edit in Word, save back, and the evidence pack will reference the published version. Every upload runs through GuardDuty malware scanning before it lands in your evidence library.

  • Health & Safety Policy Manual
  • Fire Risk Assessment
  • COSHH Inventory
  • Manual Handling Toolbox Talk
  • GDPR Records of Processing

Built for the SME pursuing certification

Large enterprises buy six-figure GRC platforms. SMEs end up with shared drives and three-ring binders, then scramble for six weeks before the auditor arrives. ICS Ops sits in the middle: the workflows a certification body expects, priced for a 20-person business.

If you are pursuing UKAS-accredited ISO 9001, 14001, or 45001 certification - or you need to demonstrate HSWA, COSHH, and RIDDOR compliance to a customer - this is the toolkit. No add-on modules to buy later.

Ready to see it in action?

Explore with real sample data. No account needed.