For IT & security
Straight answers for IT and security.
Assured Contractors is a web application: nothing to install, it runs in current browsers on computers, phones and tablets, with named roles, an audit log of every action, separate client workspaces and CSV and PDF exports.
Here's what it does today, and what it doesn't yet. If you need more detail for a supplier assessment, ask us.
- Nothing to install
- Seven named roles
- Every action in the audit log

Sound familiar?
What this usually looks like today.
Personal data in shadow spreadsheets
Card photos, phone numbers and insurance certificates spread across shared drives, inboxes and WhatsApp groups that nobody owns.
Shared logins that outlive the people
One login to the contractor portal, passed around the site team, still working after half of them have left.
No record of who decided what
Someone overrode a gate decision or approved a supplier, and there's no way to tell who, or why.
Data you can only leave with by asking
Getting your records out of a system means a support ticket and a wait.
What changes
What changes with Assured Contractors?
Named roles
Super Admin, Admin, Client Assurance Reviewer, Site Approver, Auditor (read-only), Gate/Security, and Company Admin for contractors. Everyone signs in as themselves.
An audit log of every action
Who did what, to which record, and when, with the reason where one is required. Filter it and export it to CSV.
Separate workspaces
Each client has its own workspace. A contractor's profile is shared only with clients it has connected to, and each client's reviews stay in its own workspace.
Your data, out when you want it
Lists export to CSV; permits, registers and worker records export to PDF.
White-label
Your logo, colours and product name on every screen your people and contractors see.
Nothing to install
A web app for computers, phones and tablets. No app store, no device management, no plug-ins. Visitors use their own phone at the kiosk.
Visitor sign-in kioskThe facts
What does Assured Contractors do today, and what doesn't it?
We'd rather you hear the gaps from us. If something on the “not yet” line matters to you, tell us.
- Delivery
- Web application in current browsers; no native app
- Sign-in
- Email and password per person; passwords stored as salted PBKDF2 (SHA-256) hashes
- Sessions
- Expire after 24 hours
- Roles
- 7 named roles, including a read-only Auditor and a Gate/Security role
- Audit
- Every action logged, with filters and CSV export
- Exports
- CSV for lists and the audit log; PDF for permits, registers and records
- Visitor data on the kiosk
- Sign-out list shows first name and initial only; the kiosk resets when idle
- Not yet available
- Single sign-on, multi-factor authentication, a public API, webhooks, offline mode
How it plays out
An auditor's question, answered in minutes
An internal auditor asks how an electrician got on site with an expired ECS card on 4 November.
The auditor already has the read-only Auditor role, so there's no shared login and nothing they can change.
Filter the audit log by the worker and the date: the gate decision (refer), the gate user who made it, and the reason.
Next entry: the site manager's readiness override, with the reason (“renewal confirmed, card in post”) and its end date.
Export the filtered log to CSV for the audit file.
Illustrative example.
The parts you'll use
Which parts of Assured Contractors will you use?
Site access & muster
Gate decisions with reasons, and who made them, for every check-in.
See how it worksVisitor sign-in kiosk
A kiosk that shows other visitors only a first name and initial, and resets when idle.
See how it worksContractor prequalification
Contractor data shared only with the clients a contractor has connected to.
See how it worksCOSHH & H&S policies
Policies published by version, with a read receipt from each person.
See how it worksIs there single sign-on or multi-factor authentication?
Not yet. Each person signs in with their own email address and password. Passwords are stored as salted PBKDF2 hashes, and sessions expire after 24 hours.
Is there an API or webhooks?
Not publicly. Data leaves Assured Contractors through CSV and PDF exports. If you need an integration, tell us what it is.
Does anything need installing on our devices?
No. Assured Contractors runs in current web browsers on computers, phones and tablets. There's no native app, and the visitor kiosk works on a reception tablet or the visitor's own phone.
Can contractors see other contractors' or other clients' data?
No. A contractor works in its own workspace and shares its profile only with the clients it has connected to. Each client sees the contractors connected to it, and its reviews and decisions stay in its own workspace.
Where can I find more about security?
Our Security page describes how Assured Contractors handles access, data and audit. For a supplier security questionnaire, contact us.
Related pages
Ask us the hard questions.
Book a demo with your IT and security colleagues, or start a 14-day free trial (no card needed) and look for yourself.