Plans, billing and your data

Starter is £0 — one real project, free, no card needed. Pro is £39/mo, or £30/mo billed yearly (£360/yr). Business is £199/mo. Site Control, the per-site tier for principal contractors, is £675/site/mo plus a £5,000 setup, sales-led.

Yes — Settings → Billing, no minimum term, no cancellation fees. You keep access until the end of your billing period, your documents are never deleted, and you keep read-only access to your history afterwards. Read-only means exactly that: your projects and documents stay readable and your data stays exportable, but your own team cannot change anything — no new jobs and no edits to projects, workers or documents — whether signed in on the web or the phone app, through a saved draft from our website, or through a Zapier step that creates a job or adds a worker, which will start returning an error. The one exception is safety recording, which stays open wherever your plan still includes it — document sign-offs and sign links, the crew sign-off link and workers' own sign-offs. A blocked change shows a message explaining that the account is read-only. While your account still has the plan and permissions for each control, you can use its web revocation actions to tidy up access: on Business or Site Control that includes removing team members and cancelling invitations, and eligible accounts can revoke share links, API keys, webhooks and connected apps. If cancellation moves the account to Starter, Business-only team controls pause until you reactivate under Settings, then Billing.

You don't need a trial — Starter gives you one real project completely free, no card required, and it stays yours. On paid plans there's no minimum term: cancel anytime and you keep access until the end of the billing period, so there's nothing to claw back.

Business and above includes up to 10 internal team logins — owners invite admins or members from Team settings; admins can invite members. Pro is one internal login, with read-only document sharing for clients and principal contractors.

Yes. Your plan and retained feature access apply in both places. Site Diary, incidents, permits, toolbox talks, COSHH and the Audit-Ready Pack require Pro or above; a project bought through our setup service keeps its project-scoped Pro tools. Project subcontractor paperwork stays available on Starter because it is part of the core RAMS workflow, while the reusable account-wide subcontractor directory requires Pro.

Yes. You can request a focused 20-minute Business walkthrough around your team and live jobs before deciding. The form asks for your role, team size, active-job count and main need so the demonstration can stay relevant; timing and extra context are optional. Your request is saved before the booking page opens, so we can follow up if you leave without choosing a time. Business is £199/mo, and direct checkout remains available if you are ready to start without a walkthrough.

Open the website's Compare page at `/compare`, choose a page type such as Head-to-head, then select your size. The size choice puts matching comparisons first without hiding the others. Site Control — per-site contractor access is prioritised only for 20–100 person firm and 100+ enterprise; smaller businesses see the ordinary product comparisons first.

Yes — open Settings → Export Data and select Download my data. The ZIP includes your current account's project records, document metadata and complete frozen H&S review draft history, together with available files within the export limits. Available anytime, including after cancelling. Wait for the download to finish, then check its notes for any unavailable or oversized files and save missing originals separately from the relevant project.

Open Settings → Delete Account, read the warning, then type DELETE to confirm. Export anything you need first: deletion cannot be undone. Records owned solely by you are removed. If you contributed to another company's shared account, its projects, saved sites, contacts, COSHH library and legally retained compliance or finance evidence stay with that account; your user link is reassigned, removed or anonymised. The Privacy Policy explains the limited legal and anti-resurrection records that may remain.

If marketing email is still enabled, we may send one review request shortly after you generate a document, while the result is fresh. If you have not left a review, we may send one final reminder a week later. Every review email includes an unsubscribe link; open it and confirm to stop the reminder and other marketing emails for that address. The address stays opted out even if a new demo or account record is created later; only a separate, verified re-consent process could switch marketing back on.

If marketing email is enabled, we may send a short setup guide, demo follow-up, review request, monthly summary or another message that matches where you have reached. These are scheduled after relevant milestones rather than sent at an exact minute. If a scheduled run is interrupted, unfinished recipients remain eligible for the next successful run; where messages form a sequence, a newer relevant step replaces an outdated earlier one instead of stacking both together. Every marketing email includes an unsubscribe link.

All major credit and debit cards via Stripe — Visa, Mastercard, American Express. Payments are secure and PCI compliant.

While we retry the payment, your account keeps working normally — on the web and in the phone app alike. For the account owner, a red banner appears at the top of every page with an Open billing portal button — use it to update your card or pay the outstanding invoice. You can also sort payment any time under Settings → Billing. Team members see a heads-up version of the banner instead — only the account owner can fix payment, so their banner carries no billing buttons. On Pro, if the payment still hasn't gone through after 10 days your account moves back to Starter — your projects and documents are kept, you lose Pro features, and the account becomes read-only until payment is sorted; paying restores them automatically. We apply that switch across your account in one transaction; if a temporary system error prevents every part from completing, nothing is switched and a later run retries. Business and Site Control accounts aren't subject to that 10-day step — they keep working while we get in touch to sort payment personally, including when a Site Control renewal invoice has passed its due date. On any plan, if the subscription is eventually closed or cancelled because payment never completes, the account moves to Starter and becomes read-only in the same way — and paying brings your plan straight back. While the account is read-only, everyone on it can still open its projects and documents, and Download my data under Settings → Export Data keeps working, but changes made by your own signed-in team (a new job, an edit, a new worker) — and by any Zapier step that creates a job or adds a worker — are refused with a message explaining why, and the account unlocks as soon as the payment goes through. On Starter you also cannot start a new job if you already have one, so any Zapier Create Project step will fail until the plan is back. Safety recording stays open wherever your plan still includes it: on the web, document sign-offs captured on your own device, new sign and share links for your documents and your project's crew sign-off link all keep working, and workers' own sign-offs carry on as normal, on the web and in the app. A read-only account is on Starter, so safety tools that come with a paid plan — such as incident records, inspections, site check-ins, join-request reviews and evacuation roll-calls — stay available only if your plan still includes them. The account owner can still use revocation controls included in the account's current plan and permissions: share links, subcontractor request links, project manager access, API keys, webhooks and connected apps keep their usual plan and role checks, and Business-only controls — such as removing team members — pause while the plan is Starter. An internal team invitation cannot be accepted into a read-only account until its owner fixes billing, even if the invited person's own account is healthy.

Select Cookie preferences in the site footer. Choose Accept all or Reject all, or select Choose cookies to switch Analytics, Advertising and More relevant advertising on or off and then Save choices — essential cookies stay on either way. More relevant advertising is a separate permission that requires Advertising, so switching it on also switches Advertising on, and switching Advertising off switches it off. Rejecting a category takes effect immediately in that browser: our optional first-party identifiers for that category are removed and new collection stops, rejecting Advertising also clears stored advertising attribution, and rejecting More relevant advertising stops Google building a remarketing audience from your visit. If you make an explicit choice before signing in, that choice follows the same browser into the signed-in session; if you are the billing owner, it is then saved against your account. A choice deferred while you are already signed in is bound to that signed-in user, so a different owner using the browser must confirm their own choice. A team member's choice stays in their own browser and cannot change the owner's account setting. We ask again after 180 days. One exception is permanent: if you previously withdrew Google Ads server-side matching for your account — by rejecting Advertising while signed in, or through the email-verified withdrawal form — accepting Advertising again does not re-enable that matching, and the banner shows a dismissable notice confirming it stays withdrawn. A Site Control enquiry or Business walkthrough request can be withdrawn separately through the email-verified withdrawal form on our Cookie policy page. When a paid Pro checkout is measured server-side, it uses the settled checkout amount and its exact Pro plan; the same current advertising consent and permanent withdrawal rules apply.