Incident management for UK venues
See it. Report it.
We'll sort it.
Anyone on site scans a QR code and reports an issue in seconds, with no app to install. Your control room triages it, dispatches the right contractor, and ends up with a PDF report and an append-only audit trail.
Workspace / live operations
Live12
3 critical
4m
under target
28
9 available
Live queue
Riverside Arena
- Medical assistance neededNorth stand, block 118Dispatchedjust now
- Barrier came looseEast concourse, gate 4In progress2 min
- Spillage by the kioskSouth concourseAcknowledged6 min
- Hand dryer not workingWest toilets, level 2New14 min
No app install
The public reporter is a web page behind a QR code
Live, not refreshed
Queue, map and dispatch board update over websockets
Staff and contractors
One mobile app, two roles, magic-link sign in
Append-only history
Every state change is written, nothing is edited away
How it works
From a scan to a signed-off report
The whole loop lives in one system, so nothing is retyped from a radio call or a WhatsApp thread into a spreadsheet afterwards.
Scan
A QR code at a gate, a toilet block or a stand opens a page that already knows the site and the exact location. No account, no app, and a photo only if the reporter wants to add one.
Triage
The report lands in the control room queue and on the live map the moment it is submitted. Set severity, pick the category, pin it to the exact spot, and see which contractors are on site right now.
Dispatch
Choose someone by hand from your contractor roster, or, on plans that include automatic dispatch, send it to the nearest available contractor or round the rota. They get it on the mobile app with a push notification.
Account for it
Comments, status changes, SLA warnings and breaches all land in an append-only history. Export the incident as a PDF, or, where your plan includes scheduled reports, have it arrive every week on its own.
The platform
Everything the control room needs, in one place
Built for the people running a venue on the night, and for the people who have to explain what happened afterwards.
QR public reporting
Every location gets its own code and its own page. Members of the public report without an account, and can add a photo if they have one.
Live operations map
Incidents, contractor positions, a density heatmap and your real site footprint on one map, filtered by severity and open status.
Dispatch that fits the shift
Assign by hand from your contractor roster on any plan. Nearest contractor, round robin and contractor self-claim are plan features, with availability and shift state on the board.
The full incident record
Severity, categories and subcategories, status through to resolved or closed, comments, helper contractors, and a medical flag that alerts separately.
SLA warnings and breaches
On plans that include SLA monitoring, a response target runs from the moment an incident is assigned. A warning fires before the deadline, and a breach notifies and emails the control room.
Mobile app for the field
One Flutter app serving both Staff and Contractors. Magic-link sign in, push notifications, and status updates from where the work is.
Branded PDF reports
Generate a report for any date range, site, severity or category. Plans that include branded reports carry your own logo and colour on the file.
Reports on a schedule
Where your plan includes scheduled reports, set a daily, weekly or monthly run with the filters and recipients you want, and the PDF arrives without anyone remembering.
Multi-site management
Sites, the locations inside them, map layers for floor plans, and printable QR posters you can put up the same afternoon. How many sites you get is set by your plan.
Append-only audit log
Every state change and every privileged action is written and kept. There is no update endpoint and no delete endpoint.
Broadcast to the field
Send one message to staff and contractors when something needs saying to everyone at once, narrowed by role and by site where your plan includes targeting.
Guided walkthroughs
Most screens carry a short tour that points at the real controls, so a new controller learns the room without a training day.
Who uses it
Five people, one incident, no retyping
Each role sees only its own surface, and the boundary is enforced on the server. Staff and contractors cannot sign in on the web; controllers and admins cannot sign in on mobile.
Account admin
Web dashboard
Owns the account: billing, branding, categories, team, data export and erasure.
Signs in with: Password and one-time code
Controller
Web dashboard
Runs the room: triage, assignment, the live map, reports and the audit log.
Signs in with: Magic link
Staff
Mobile app
Reports from the floor and follows their own reports through to resolution.
Signs in with: Magic link
Contractor
Mobile app
Clocks on to a site, takes or claims jobs, updates status and resolves them.
Signs in with: Magic link
Public reporter
QR code
Scans, describes the issue, optionally adds a photo, and can check the status later.
Signs in with: No account
Security
The parts a safety manager will be asked about
No badges we have not earned. These are mechanisms in the product, and each one is something you can ask us to demonstrate.
Tenant isolation
The workspace a request belongs to is derived from the session on the server, never from anything the browser sends. Every scoped query is filtered on it and every stored file sits under that workspace's own prefix.
A role check on every route
Each API route declares the roles allowed to call it, or declares itself public. Hiding a button in the interface is a courtesy; the refusal happens on the server.
Two-factor for admin accounts
Account admins and platform operators sign in with a password and a one-time code, every time. Codes are checked against a secret that is encrypted at rest and never shown again after enrolment.
Append-only audit log
Every state change is written with the actor, the time and, where one applies, the reason. Privileged actions are flagged. There is no update endpoint and no delete endpoint on that table.
Photos never touch the API
The browser uploads straight to object storage with a short-lived signed URL, and the server records only the key. Uploaded images have their EXIF metadata stripped, so a photo does not carry a location home.
Export and erasure built in
Account admins can export the whole workspace as JSON and CSV, erase an individual's personal data in place, and let photo retention windows expire on their own schedule.
Pricing
Priced for an event season
Run a single fixture on a one-off pass, or subscribe and add seats and sites as the season grows. Billing is in GBP, USD and EUR, and the currency is fixed at your first checkout.
Get started
Put a QR code up this week
Start a free trial and set up your first site, or book a walkthrough and we will show you the control room on a real incident.