Embedded Files
The Terrorism (Protection of Premises) Act 2025, known as Martyn's Law, received Royal Assent in April 2025. It is named after Martyn Hett, one of the 22 people killed in the Manchester Arena attack in 2017.
It places legal duties on those responsible for certain premises and events to prepare for a terrorist attack, and to be ready to keep people safe if one happens.
It is not yet in force. The Home Office published its statutory guidance in April 2026, and the implementation period is expected to conclude in early 2027. Organisers are in the preparation window now.
The regulator is the Security Industry Authority (SIA).
Whether It Applies To You
Whether It Applies To You
Standard tier covers premises where 200 to 799 people may be present.
Enhanced tier covers premises where 800 or more may be present.
Events are different. An event is only in scope if 800 or more people are expected — and a qualifying event is subject to the same requirements as enhanced tier premises.
There is no middle tier for events
If your festival or event expects 800 people or more, you are in the enhanced tier.
WHERE KTEEPEE FITS
WHERE KTEEPEE FITS
Let's be straight with you first: KteePee is not a compliance product, and we will never sell it as one.
Meeting your duties under Martyn's Law is your responsibility, and no app discharges it.
What KteePee can do is contribute to two of the four procedures, and give you something concrete to document.
Evacuation
Evacuation
Every entrance, exit and gate on your site can be in the app, with a compass arrow pointing the way and a live distance.
It works with no phone signal, no data and no wifi. That matters, because the moment you most need people to know where the nearest gate is, is the moment the mobile network is least likely to be usable — either because the site never had coverage, or because thousands of people are all using it at once.
A crowd that knows where the exits are moves faster than one that doesn't.
Communication — the part we can do
Communication — the part we can do
Your safety information, your instructions and your emergency guidance can be carried inside the app and shown to every attendee, offline, at any time. Run, Hide, Tell. Where to go. What to do. Whatever you want it to say.
That is information provided to individuals at your event, available without signal, and it is documentable.
Communication — the part we cannot do
Communication — the part we cannot do
KteePee cannot send a real-time alert. It is not a mass notification system, and it must not be relied on as one.
The app works offline by design. It has no live connection to your attendees' phones during your event. If you need to alert a crowd to immediate danger, that requires PA, radio, screens, stewards and a proper mass-notification capability. KteePee is not a substitute for any of them.
WHAT WE DON'T TOUCH
WHAT WE DON'T TOUCH
Of the four categories of public protection measures, KteePee contributes to none:
Monitoring — we have no cameras and no surveillance. We do not track anyone's movements around your site, and we never will. That is a founding principle of the product, not an oversight.
Movement — controlling entry, exit and flow is physical, and it's yours.
Physical safety and security — barriers, vehicle mitigation and physical protection are not something an app can provide.
Security of information — see below. We take this one seriously, but it is a constraint on us rather than a service to you.
HOW WE HANDLE INFORMATION SECURITY
HOW WE HANDLE INFORMATION SECURITY
The Act is clear that excessive detail about a site's layout and operation can itself create a vulnerability. We agree, and we work to a simple policy:
We publish only what you already publish. Pack content is built from the site map and information you make public yourself. If it isn't on your public map, it isn't in the app.
Sensitive areas are excluded by default. Staff facilities, logistics routes, back-of-house and artist areas are left out unless you specifically ask otherwise.
You sign it off. Nothing goes live until you have reviewed the final pack. The decision about what is public rests with you, where the legal responsibility already sits.
We hold no personal data on your attendees. No names, no accounts, no location histories, no profiles. There is no attendee database to be lost, breached or requested.
WHAT YOU CAN PUT IN YOUR DOCUMENTATION
WHAT YOU CAN PUT IN YOUR DOCUMENTATION
The SIA will expect your procedures and measures to be documented. If you use KteePee, the following are things you can accurately state:
Attendees had offline access to the location of every gate and exit, with directional navigation, independent of mobile coverage
Attendees had offline access to first aid, water and welfare locations
Your safety messaging and emergency instructions were carried on attendees' own devices and available without signal
Site information published in the app was limited to information already in the public domain, with sensitive areas excluded, and signed off by the responsible person
We will provide a written summary of what the app carried at your event, so you have it on file.
CLOSING
CLOSING
Martyn's Law is not yet in force, but the preparation window is now. Most organisers we speak to know it is coming and have not yet worked out what their documentation looks like.
If you want to talk about where an offline navigation app does and doesn't help — including the places where the honest answer is that it doesn't — we're happy to have that conversation.
Disclaimer
Disclaimer
This page is a plain-English summary and is not legal advice. It is based on the Terrorism (Protection of Premises) Act 2025 and the Home Office statutory guidance published in April 2026. Responsibility for determining whether your event is in scope, and for meeting the duties that follow, rests with you. For the authoritative position, see the Home Office guidance on GOV.UK and the ProtectUK website, and take your own professional advice.
Page updated
Google Sites
Report abuse