I speak with UK construction directors and HSE managers regularly. The Health and Safety conversation in 2026 has shifted materially. Building Safety Act 2022 raised the compliance bar. HSE data still lives across spreadsheets, PDFs, WhatsApp groups, and filing cabinets. RIDDOR reports get compiled retrospectively.
Golden thread requirements for higher-risk buildings stress-test every contractor's documentation discipline.
That conversation is happening at every UK main contractor and property developer working on residential blocks above 18 metres. The gap between compliance requirement and actual documentation quality is the operational risk keeping HSE managers awake.
This article is a candid guide for HSE managers, Health and Safety Directors, and compliance officers scoping software in 2026. What the software actually has to do. CDM 2015 and Building Safety Act 2022 requirements. The 2026 UK vendor landscape. Real cost bands. And what we see across client rollouts.
What UK Construction H&S Software Actually Has to Do
Seven capabilities that separate real UK H&S software from a shared filing system.
CDM 2015 duty holder tracking. Client, principal designer, principal contractor, and worker duties. Software tracks who holds each duty, evidence of appointment, and compliance across the project lifecycle.
F10 notification generation. For projects over 30 working days with 20+ workers simultaneously, or 500+ person-days total. Software generates, submits, tracks status.
RAMS submission and review workflow. Risk Assessment and Method Statements per activity. Subcontractor submission, principal contractor review, approval, site display. Version-controlled.
Permit to work workflow. Hot work, confined space, working at height, excavation, electrical isolation. Request, authorisation, active tracking, expiry management.
Toolbox talks tracking. Topic, delivery date, attendee list with signatures, evidence of understanding.
Near-miss and incident reporting with RIDDOR export. Incident capture with photo evidence, witness statements, investigation workflow. RIDDOR-reportable events flagged and exported for HSE submission.
Health and safety file compilation. Continuous compilation of the H&S file required at handover under CDM 2015. Design information, hazards, maintenance data, building safety information consolidated.
Generic compliance platforms handle two or three of these. That is why UK construction H&S has specialist software.
CDM 2015 Documentation Requirements
The HSE construction guidance hub is the authoritative reference. Four documentation obligations software must support.
Pre-construction information. Compiled by the client with support from the principal designer. Sets out hazards known before design and construction start. Communicated to designers and contractors.
Construction phase plan. Compiled by the principal contractor before construction starts. Details how health and safety will be managed. Must be site-specific and proportionate.
Health and safety file. Compiled progressively through construction. Contains information the client and future users need to manage health and safety across the building lifecycle. Handed over at completion.
F10 notification. Sent to HSE for projects meeting the thresholds (30 working days with 20+ workers or 500+ person-days). Includes project details, duty holder appointments, and start dates.
Software that treats these as first-class objects delivers better compliance outcomes. Software that treats them as configuration effort fails audits.
The Building Safety Act 2022 Change
The GOV.UK Building Safety Act 2022 collections sets out the framework. For higher-risk buildings (18 metres or above, or 7 or more storeys, with 2+ residential units), the compliance landscape shifted materially.
Four new obligations that H&S software must now support.
Golden thread. Digital record of information about design and construction decisions maintained across the building lifecycle. Not paper-and-PDFs. Not scattered across systems. A structured, queryable, current record.
Building Safety Regulator (BSR) approval gates. Higher-risk building work requires BSR approval at gateway 1 (planning), gateway 2 (before construction starts), and gateway 3 (before occupation). Software supports the submission and audit trail.
Accountable person duty. For occupied higher-risk buildings, the accountable person holds ongoing safety duties. Software supports the trail from construction handover through operational life.
Mandatory occurrence reporting. Certain safety events must be reported to the BSR. Software captures, categorises, and supports the reporting workflow.
Off-the-shelf platforms are catching up on Building Safety Act support. Some higher-risk building portfolios already need custom builds because vendor gaps are material.
The 2026 UK Vendor Landscape
EcoOnline. European H&S SaaS with UK footprint. Focused specifically on H&S rather than construction generally. £30 to £80 per user per month. Best for H&S-specialist software rather than construction PM with H&S module.
PlanRadar HSE module. Within the broader PlanRadar platform. Strong on inspections, defects, and RAMS. £30 to £90 per user per month depending on modules. Best when H&S sits alongside construction PM in one platform.
iAuditor / SafetyCulture. US mid-market with strong UK adoption. Highly configurable inspection and audit workflows. £15 to £45 per user per month. Best for heavy inspection cadence.
Assignar. Australian platform with UK footprint. Strong subcontractor management combined with H&S. £25 to £60 per user per month. Best when subcontractor coordination is primary need.
Sitemate. UK-focused site H&S. Lighter platform tuned to UK site conventions. £20 to £40 per user per month. Best for smaller contractors wanting UK-native workflow.
Custom builds. Defensible for portfolios of higher-risk buildings under Building Safety Act 2022, contractors above £100m turnover with unusual workflow, or where H&S integrates with a broader custom construction platform.
For most UK contractors under £75m turnover with standard project mix, EcoOnline or PlanRadar HSE module cover essential needs. Higher-risk building specialists and portfolio developers increasingly justify custom.
Real 2026 Cost Bands
Off-the-shelf annual cost (fully-loaded for typical mid-market UK contractor):
EcoOnline: £15k to £60k
PlanRadar HSE module: £15k to £70k
iAuditor / SafetyCulture: £8k to £30k
Assignar: £15k to £45k
Sitemate: £8k to £25k
Custom build:
Proof of concept: £30k to £70k over 8 weeks
Pilot: £70k to £150k over 3 to 4 months
Production: £180k to £400k over 6 to 10 months
Add £15k to £60k per year in ongoing platform run cost. Add £30k to £100k per year if you keep in-house engineering.
Break-even for custom against off-the-shelf typically lands at year two for higher-risk building specialists or contractors above £100m turnover.
Site Adoption: The Documentation Gap
Every H&S rollout I see hits the same problem. Office side adopts fast. Site side keeps using WhatsApp for photos, email for RAMS, paper for permits. Six months in, the platform has clean office data and gappy site data.
Four things any H&S platform must handle for real UK site adoption.
Offline capability. Sites without reliable signal (basements, high-rise cores, rural work) require offline queue plus optimistic UI plus background sync.
Sub-30-second common actions. Toolbox talk sign-off, permit request, incident capture. Above 30 seconds on a phone with 2G, adoption fails.
Mobile-first design. Site H&S is a phone activity. Desktop-designed workflows with mobile view fail in the field.
Digital signature capture. RAMS acceptance, toolbox talk attendance, permit issue and close-out. All need signature evidence for compliance audit. See our earlier post on construction project management software UK for the broader adoption pattern.
What We See Across Client Rollouts
Across our engagement base I see three patterns consistently.
Programmes that succeeded designed for HSE compliance workflow, not IT deployment. Rollouts that mapped CDM documentation, RAMS review chains, and RIDDOR reporting workflow before choosing software adopted well.
Programmes that stalled underestimated Building Safety Act 2022 implications. Contractors doing higher-risk building work bought platforms lacking golden thread support. Six months in, compliance gaps forced replatform or heavy customisation.
Programmes that scaled tied H&S to commercial workflow. Near-miss trends, subcontractor scorecarding, and RIDDOR patterns fed procurement decisions. This is where portfolio value materialised beyond individual project compliance.
You can see our work at our portfolio. If you want a candid conversation about your specific H&S programme, book an H&S software audit with WhiteStone.
Common Failure Modes
Three failure modes I see repeatedly.
Buying platform without Building Safety Act 2022 audit. Higher-risk building work exposes golden thread gaps. Compliance risk materialises at gateway 2 approval, not before.
Skipping mobile adoption design during vendor selection. Desktop demo looks great. Site foreman tries it on a phone in a basement. Fails. Programme stalls.
Training only HSE managers, not the site workforce. HSE managers adopt. Foremen and subcontractors do not, because nobody trained them properly. Site data stays fragmented.
Frequently Asked Questions
What CDM 2015 documents does the software need to hold?
Pre-construction information, construction phase plan, health and safety file, and F10 notification. Software must track duty holder appointments (client, principal designer, principal contractor), maintain version-controlled RAMS per activity, support permits to work, evidence toolbox talks, and log near-miss and RIDDOR-reportable events.
How does the Building Safety Act 2022 change requirements?
For higher-risk buildings (18m+ or 7+ storeys residential with 2+ units), the golden thread requirement means a digital record of design and construction decisions maintained across the building lifecycle. BSR approval gates at planning, before construction, and before occupation. Ongoing accountable person duty post-handover. Software must support these.
How does H&S software connect to RIDDOR?
Incident capture on site with photo evidence, witness statements, and investigation workflow. Categorisation flags RIDDOR-reportable events (specified injuries, over-7-day incapacitation, dangerous occurrences). Export supports HSE reporting portal submission within statutory timeframes.
EcoOnline or custom for a UK main contractor?
EcoOnline for standard workflow at £15k to £60k annually. Custom for portfolios of higher-risk buildings under Building Safety Act 2022, contractors above £100m turnover with unusual workflow, or where H&S integrates with a custom broader construction platform.
How long does H&S software rollout take?
Off-the-shelf: 4 to 12 weeks contract to first live site, plus 3 to 6 months to reach genuine site adoption. Custom: 6 to 10 months from kickoff to production, plus 3 to 6 months to embed. Programmes that skip mobile adoption design fail.
The One Thing to Remember
UK construction H&S software in 2026 succeeds or fails on site adoption more than feature depth. The Building Safety Act 2022 raised the compliance bar, but no platform closes the compliance gap if site workforce keeps using WhatsApp for photos and email for RAMS. Programmes that succeed pick platforms with genuine offline-capable mobile capture and design the rollout as a compliance workflow programme, not an IT deployment. Programmes that fail buy the platform first and hope adoption follows.
If you want a candid conversation about your specific programme, browse our custom software development services or come to the audit.
