Platform
One live risk register across every site
Every risk, control and owner in one register your board can read and your frontline can update - instead of a spreadsheet per site, none of which agree.
What is a risk register, and what makes one work across multiple sites?
A risk register is the single list of an organisation's risks, each with its assessed severity, the controls meant to reduce it, and a named person accountable for those controls. It stops working at scale for one reason: most organisations keep one register per site, in different templates, and consolidating them is manual. Frontline holds one register that every site updates and the board reads unedited - imported from the spreadsheets you already run, scored on your own risk matrix, with control verification tracked on the register rather than in a separate tracker.
- Inherent and residual scoring against your own consequence and likelihood scales
- Every control carries an owner, a verification frequency and a due date
- Site, division and group views roll up without a merge step
- Full change history - who raised it, who re-scored it, and when
- 1
- register instead of one per siteConsolidated on import
- 24h
- from your spreadsheet to a live register
- 0
- risk workshops needed to get started
- 100%
- of controls carry a named owner and a due date
The problem
Spreadsheets don't lose data. They lose agreement.
Most organisations already have a risk register. They have eleven of them, in different templates, at different revisions, owned by whoever built them.
Group asks for a consolidated view and someone spends a fortnight merging exports by hand. By the time the pack reaches the board, the sites have moved on. The register isn't wrong so much as it is nobody's - no owner, no review date, no link between a control and the evidence that it worked.
The fix is not a stricter template. It is one register that accepts what each site already records, normalises it after the fact, and keeps the audit trail of who changed what.
- Your matrix, your consequence and likelihood scales, your risk categories
- Site-level views that roll up to a group view without a merge step
- Every change attributed, timestamped and reversible
What it does
The register, the controls and the evidence in one place
Import what you have
Send the spreadsheet you run today. We map your columns to the register, keep your IDs, and hand it back live - no re-keying, no cleanup project first.
Inherent and residual
Score both against your own matrix. The residual position moves only when a control is verified, so the register reflects the work rather than the intent.
Controls with owners
Every control carries an owner, a verification frequency and a due date. Overdue verification surfaces on the register, not in a separate tracker.
Linked evidence
Inspections, incidents and audits attach to the risk they relate to, so the question 'how do we know this control works' has an answer on the page.
Board-ready output
The heat map, the top risks by residual score and the movement since last quarter export as the pack, generated from live data.
Change history
Who raised it, who re-scored it, what changed and when. Regulators and insurers ask; the register answers without an email thread.
How it works
From your spreadsheet to a live register
Send us the register you run today
Any shape - one file or twenty, per site or per division. We work from your export, not from a blank template.
We map it to your framework
Your categories, your matrix, your rating scales. Nothing is renamed to fit the product.
You walk it live
Within 24 hours you're clicking through your own risks, not a demo dataset. Changes from that session land the same day.
Your sites start updating it
Field capture, inspections and incidents feed the register from the tools your frontline already uses.
Included
What you get on day one
- Your register, imported and live, with your IDs preserved
- Inherent and residual scoring on your own matrix
- Control library with owners and verification schedules
- Site, division and group roll-up views
- Heat map and top-risk board export
- Full change history and audit trail
- SSO and role-based access for your whole team
- Read-only board access without a licence per director
Questions we get asked
Do we have to change our risk matrix?
No. The matrix, the consequence and likelihood scales and the risk appetite thresholds are configured to match what you already use and what your board has already approved.
What happens to the register we have now?
It becomes the starting point. We import it as-is, keep your risk IDs so existing references still resolve, and hand you the live version to check before anyone else sees it.
How long does it take to get running?
Send an export and you'll be looking at your own register inside 24 hours. Rolling it out to sites is a matter of access and habit, not implementation - there is no IT project in front of it.
Can the board see it without a full licence?
Yes. Directors and executives get read-only access to the views and packs that matter to them.
See it running on your own data.
Tell us what you run today. When your spot comes up you are looking at your own register, your own incidents and your own sites, not a canned demo environment.
- We take a few teams at a time
- Works with your existing exports
- No IT project