Compliance posture
41 Moorgate
Checking your secure session.
41 Moorgate
Against —. PDF, JPEG or PNG up to 25 MB. The file type is checked on content, not on the file name, and the document is stored off the web root and served only through this portal.
Everybody the access projection says is in the building gets an email with a link they tap at the assembly point. Once this is sent there is no undo — only calling it off, which emails them again.
Reported once, here. The classifications you choose decide which domains it attaches to and which statutory clocks start — you can see both before you send it.
What looked like a slip can turn out to have been a fall from a step. Adding a classification attaches any new domain and its obligations. Nothing already done is undone, and a classification is never removed — an obligation that existed is a record.
Drop in the spreadsheet you already keep. Nothing is written until you have read what it would do — this step only reads the file.
seed_key — the register's own key, or title — matched exactly, with domain to separate two duties that share a title.
last_done — YYYY-MM-DD or DD/MM/YYYY, read day-first, or holder — a name from the directory, with an optional holder_role. notes is appended if present.
Anything else in the file is ignored and listed back to you.
—. The notification audience is derived from these roles: whoever performs gets the booking reminder, whoever is accountable gets the escalation when it lapses. Leaving a duty unassigned is itself a finding.
Issuing does not activate. A second authorised person countersigns before work starts — one person cannot do both, because the control is that a second pair of eyes read the isolations.
Your name goes on this permit. What is written below is what the contractor says they will do and what they say is isolated — the countersignature is worth something only if somebody read it.
This is a hot-works permit. Record the fire watch — it either happened or it did not, and this note is the only place that is ever written down.
Approval is derived from these documents every time the screen is read. There is no approve button, because a typed flag goes stale on the day it matters.
—, due —. The record carries your name, your role at this moment and a hash chained to the previous entry. It cannot be edited afterwards; a correction supersedes it and both stay visible.
—
Declining is a valid answer and it goes on the record as one — not as a failure to answer. It takes this occupier out of the chasing ladder, so it needs the same thing a return needs: a person behind it. A company did not decline; somebody did.