Guide · Health & Safety
A plain guide to risk assessment software for UK small businesses in 2026, from Word templates to dedicated tools to WhatsApp-based dynamic assessments.
Free forever: 20 reports a month. No card, no trial clock.
The legal duty
The Management of Health and Safety at Work Regulations 1999 require every employer to assess risks. Firms with five or more staff must record the significant findings in writing. There is no prescribed format: Word, Excel, a PDF, an app or a structured WhatsApp workflow all satisfy the law, provided the record holds the right information.
Your options
Adequate for stable risks that do not change between jobs. The limitation is currency: a template does not adapt to a new site or task.
From £20/moTemplate libraries, version control and sign-off. Strong for office-based teams; harder to embed where workers move between sites all day.
WhatsAppNo app, no login. Workers complete structured assessments on site over WhatsApp, timestamped and exported to PDF and CSV.
Field workers
A dynamic risk assessment is a continuous mental discipline for variable environments, a gas engineer entering a property, an electrician on an unfamiliar installation. The problem is recording it on site. Quickler captures it over a WhatsApp chat: no install, no login, voice notes transcribed, results in the office as they come in.
See it work
Quickler runs any inspection or checklist over WhatsApp, from risk assessments to EICRs, PAT, COSHH and asset checks. Rooted in UK compliance, it works anywhere WhatsApp does.
The law says assess your risks. With five or more staff, it says write the significant findings down. It does not say which tool. Word, Excel, a dedicated app, a structured WhatsApp chat, all of them satisfy the duty, provided the record holds the right information.
So the real question is not which risk assessment software is best. It is which one actually gets completed, on site, close to the work. That single test decides everything else.
The legal duty
The Management of Health and Safety at Work Regulations 1999 require every employer to assess the risks arising from their work. Regulation 3 is the core duty. It applies to all employers, whatever their size.
The recording duty kicks in at five or more employees. They must record the significant findings: the hazards identified, the people at risk, and the measures in place or needed. That does not mean a ten-page document. A concise, accurate record is more defensible than a lengthy one that ignores actual working conditions.
Sole traders and firms below five staff are not required to write assessments down. A written record is still worth keeping. It proves the assessment was done, reassures contractors and clients, and helps if HSE asks questions. There is no prescribed format.
Free and familiar
For a small firm with stable risks, the same tasks, the same environment, the same controls each time, a Word template is an adequate risk assessment tool. It is free, familiar, and produces a printable record.
Trade associations publish sector templates. The Electrical Contractors' Association, Gas Safe Register and equivalent bodies all offer them. A template completed honestly, reviewed periodically, and handed to operatives before work meets the legal standard with no software spend.
The limitation is currency. A template records conditions at the time it was written. It does not adapt to a new site or a changed environment. A generic RA for working at height written six months ago may not cover today's access arrangements. The law requires assessments to be suitable and sufficient for the actual work. Excel tracks many assessments in one file, but does not solve currency.
Dedicated tools
A range of dedicated risk assessment tools target UK SMEs. Most offer template libraries, version control, approval workflows, and electronic sign-off. Some integrate with RAMS (Risk Assessment and Method Statement) packages. Prices run from around £20 per month for basic tools to £100 per month and above for multi-user RAMS software UK platforms with contractor management.
Structured formats, audit trails, and the ability to link assessments to specific jobs or sites are the strengths. The limitation, for field-based firms, mirrors apps generally. The person on site must open the right tool, log in, find the correct form, and complete it under time pressure. Adoption among subcontract tradespeople tends to be low.
Dedicated tools work well when staff are office-based or have a computer at the start of a job. They are harder to embed in teams moving between sites all day.
Field workers
A dynamic risk assessment (DRA) is a continuous process of identifying hazards and assessing controls as conditions change. It is not a form, it is a mental discipline. It produces a record only when documented correctly.
DRAs matter most for workers entering variable environments: a gas engineer going into a property for the first time; an electrician starting a survey on an unfamiliar installation; an operative beginning a task in an area that has changed since the last shift. The hazards on day one are not always the hazards on day ten.
The practical problem is capturing the DRA at the point it is done. A worker who has just sized up a new area is unlikely to return to a van, open a laptop, and fill in a form. The record happens later, from memory, if at all. Quickler closes that gap. Field workers complete structured assessments, including DRAs, through a WhatsApp chat. No app install. No login. The questions prompt the right fields, the answers are timestamped, and the office sees results as they come in. Voice notes are transcribed automatically. Records export to PDF and CSV for file. Quickler is rooted in UK compliance but runs any inspection or checklist, used across the UK, Ireland, the United States, Canada, Australia and New Zealand. Quickler works in any country.
Minimum content
Significant findings, at minimum, means six things:
HSE guidance says assessments must be suitable and sufficient, not full to the point of paralysis. A brief, accurate, specific record beats a long generic one that ignores what happens on the day. Review dates matter. An assessment written two years ago for a task that has since changed is neither suitable nor sufficient. Most firms review annually as a minimum, and after any significant incident or change to work activity.
The decision
The right tool is the one that gets completed, accurately, close to the time of the work. In practice that is the only standard that matters.
For a firm with a fixed office base, standard tasks, and staff who start the day at a computer, a dedicated risk assessment tool or a well-maintained Word template library both work. A dedicated tool is justified if you have many assessments to manage, need approval workflows, or face pressure from a client or principal contractor to demonstrate a system.
For a firm whose workers are on the road by 7am and at a different site every day, the tool that gets used is the one with no friction. No app install, no login, no multi-step process. WhatsApp-based workflows complete at a higher rate here, because the channel is already open and familiar.
Yes, if you employ five or more people. The Management of Health and Safety at Work Regulations 1999 require employers with five or more staff to record the significant findings of their risk assessments. Sole traders and firms below that threshold must still assess risks but are not legally required to write the findings down, though doing so is advisable.
A dynamic risk assessment is a continuous mental process of identifying hazards and assessing controls as conditions change during a task. It is most relevant for field workers facing variable environments, a gas engineer entering an unfamiliar property, a construction worker starting a new section of a job. Dynamic RAs supplement formal documented assessments. They do not replace them.
For simple, stable risks a Word template is adequate and legally compliant, provided the assessment is genuine, reviewed periodically, and accessible to the people it covers. Where risks change between jobs, sites, or operators, a static Word template becomes unreliable. It will not reflect conditions on the day.
A structured WhatsApp workflow can capture the fields required for a dynamic risk assessment, task, hazards identified, controls in place, person responsible, and produce a timestamped record. It is not a substitute for formal generic assessments, which should still exist. But for site-specific or task-specific dynamic assessments, a WhatsApp workflow reduces the gap between the assessment being done and being recorded.
Field teams not completing risk assessments on site? Quickler runs any inspection or checklist over WhatsApp, not just one trade, from risk assessments to EICRs, PAT, COSHH and asset checks. No app install. Setup in under a week. Rooted in UK compliance, it works anywhere WhatsApp does. See how it works.
Related guides: Site safety inspection software, COSHH risk assessment for field teams, Near miss reporting in construction.
Field compliance