Terrorism (Protection of Premises) Act 2025 · In force spring 2027

Physical security reduces likelihood. Communication determines the outcome.

MAVAS — the Mass Audio Visual Alerting System — is Handy AV's intelligent safety and compliance platform, designed to help organisations meet Martyn's Law requirements with speed, clarity and control. One platform. Every zone. Every channel.

~1s

Local alert delivery via Edge Server

6+

Alert channels per incident

25 yrs

AV & communications expertise

Designed for Martyn's LawSIA Audit-Ready LoggingEdge Server ResilienceNo Rip-and-Replace RequiredMulti-Channel DeliveryDelivered by Handy AV
The Compliance Mandate

The challenge is not a lack of technology. It is fragmentation.

Access control, digital signage, public address systems, fire alarms and CCTV often exist in isolation — procured at different times, from different vendors, for different purposes. When an incident occurs, no single person can say with confidence how those systems will work together, who validates them, or how untested scenarios will run.

Martyn's Law does not prescribe specific technologies. It holds duty holders accountable for outcomes: that every person on site can be warned, directed and kept safe through proportionate and reasonably practicable measures. That is a communication capability question — not a paperwork exercise.

“Clarity in communication saves time — and time saves lives.”

What the Act means in practice

Venues with 200+ capacity have a legal duty under the Act
The SIA has powers to inspect, issue compliance notices and levy penalties
Standard tier penalties reach £10,000; enhanced tier, the greater of £18 million or 5% of worldwide revenue
The Act requires documented, tested procedures — not best efforts
The MAVAS organisation dashboard, showing a zone readiness table with each zone marked ready, action needed or not ready, alongside the date it was last drilled.
Martyn's Law readiness per zone — what is covered, what still needs devices, and when each zone was last drilled. The evidence an inspector asks for, maintained as a by-product of running the system.
Platform Capabilities

One platform. Every channel. Every zone.

MAVAS unifies audio, visual and emergency technology to streamline emergency response and safeguard every person on site through centralised AV and systems control.

MAVAS at the centre of eight connected channels: speakers, digital signage, body cams, HandyCHECKPOINT access control, mobile app alerting, desktop screen alerts, zone control and Blue River device management.
One trigger, every channel — orchestrated across the infrastructure you already own.

Multi-Channel Alert Delivery

A single trigger activates every relevant channel simultaneously: PA and voice announcement, digital signage overlays, SMS, WhatsApp, desktop and mobile push notifications, and access control lockdown — ensuring no zone and no person is missed.

Edge Server Resilience

On-site EDGE servers process and deliver alerts locally in approximately one second, independent of internet connectivity. Your alerting capability continues to function even under network failure — the moment when it matters most.

No Rip-and-Replace

MAVAS connects to the systems you already own via open API, webhooks and standard IP, wireless and Bluetooth protocols. Existing AV, access control and signage infrastructure is reused and orchestrated — not replaced.

Pre-Built Alert Templates

Configurable templates cover every required response type: Evacuation, Invacuation, Lockdown, All-Clear, External Hazard and Terror Threat — with per-zone messaging, priority routing and drill mode built in.

Accessibility by Design

Combined audio and visual alerts, text-to-speech and induction loop support ensure every person on site — including those with hearing or visual impairments — can receive, understand and act on an alert.

SIA Audit Evidence

Every alert trigger, device acknowledgment, drill and system event is logged automatically. Alert and audit logs are exportable, providing the evidenced capability the SIA and insurers expect from duty holders.

Centralised Cloud Dashboard

Manage all locations, zones, devices and users from a single secure dashboard. Supports single and multi-site deployments, role-based access control, and remote health monitoring — accessible from PC, tablet or smartphone.

Access Control & Lockdown

HandyCHECKPOINT integration enables targeted zone lockdown and controlled egress — supporting invacuation and shelter-in-place responses, alongside CCTV triggering and body-worn camera feeds in a single operational view.

Multi-Agency Coordination

Aggregated zonal status, CCTV feeds and message logs support coordination with emergency services — designed to help align internal messaging with responder instructions in real time and at the boundary of your premises.

On the ground

What people on site actually see

Compliance is judged on whether every person present can be warned, directed and kept safe. That is decided on the wall, not in the dashboard.

A ceiling-mounted screen showing a MAVAS evacuation message beside a pendant speaker broadcasting the matching voice announcement.

Seen and heard

Screens and voice announcement carry the same instruction at the same moment — so the message lands whether or not someone can hear it, or see it.

A hotel lobby display showing a lockdown alert instructing guests to remain in their rooms.

Lockdown, per zone

Invacuation and shelter-in-place instructions differ by zone. A lobby, a ward and a loading bay each get the message that applies to them.

A wall-mounted display showing a green MAVAS all-clear message.

And the all-clear

Standing an incident down is part of the procedure the Act asks you to document. It is one action, and it is logged like every other.

Screen layouts shown are configurable per zone and per alert template.

Inside the platform

Built for the person on shift

Not a control system that needs an engineer. The people who trigger alerts are duty managers, receptionists and security staff.

The MAVAS emergency scenario wizard asking whether this is a live incident or a test drill, with the test drill option labelled as logged for Martyn's Law compliance.
Triggering

The drill is not an afterthought

Every alert starts by declaring itself: live incident, or test drill. Drills exercise the real routing without firing the real alert — and they are logged as drills, which is precisely the evidence the Act asks a duty holder to keep.

The MAVAS audit log, listing timestamped user actions such as trigger alert and clear alert, with an export to CSV button.
Evidence

Written down while you work

Every trigger, all-clear, login and configuration change is recorded with a timestamp and a name against it. Export the trail to CSV when the SIA, your insurer or your own board asks what happened and when.

The MAVAS alert plans list, showing plans such as chemical hazard, evacuation drill and end of day announcement, each with a priority and the zones it covers.
Preparation

Decisions made before the incident

Which zones, which message, which priority, which channels — settled in advance and reviewed on a schedule. During an incident nobody is composing wording or working out who needs telling.

The Adoption Journey

From audit to operational resilience

Best practice front-loads understanding what already exists. For most venues, the first step is discovering the gaps — not procuring more hardware.

01

Discover & Map

A site-wide audit catalogues existing AV, access control, signage and PA infrastructure — identifying coverage gaps, dead zones and reusable assets. For most organisations, the start point is understanding what already exists, not procuring more hardware.

02

Connect & Configure

MAVAS integrates with your existing systems via open API and standard protocols. Alert templates are configured per zone and per incident type. The platform adds an intelligent orchestration layer over infrastructure you already own.

03

Test & Validate

A dedicated testing mode supports live drills without triggering real alerts. Every test is logged, producing the audit trail and evidenced capability record that the SIA expects from duty holders — particularly at the Enhanced Tier.

04

Operate & Maintain

Authorised personnel trigger alerts from the dashboard, mobile application or a physical button. The cloud platform provides continuous remote health monitoring, usage analytics and a living evidence base for ongoing compliance assurance.

MAVAS architecture: the cloud platform and Blue River sit outside a local network boundary containing zone players, a mixer amplifier, the MAVAS Edge Server, zone speakers and zone screens. The Edge Server pushes messages over UDP and serves zonal HTML overlays.
Everything inside the dashed boundary keeps working without the internet. The Edge Server holds the alert templates locally and pushes to zone players and screens over the local network — which is why delivery stays around a second, and why a broadband failure is not an alerting failure.
Martyn's Law

MAVAS supports both tiers of duty

The Terrorism (Protection of Premises) Act 2025 received Royal Assent on 3 April 2025. The Home Office published its statutory guidance in April 2026, and the duties are expected to come into force in spring 2027. Named in honour of Martyn Hett — one of the 22 people who lost their lives in the Manchester Arena bombing of 2017 — the Act establishes a legal duty for publicly accessible venues to take proportionate and practicable measures to protect every person on site.

Standard Tier

200 – 799 persons

Requires notification to the SIA and reasonably practicable public protection procedures covering evacuation, invacuation, lockdown and communication. No physical security measures are mandated.

  • Documented emergency procedures
  • Staff training on how to respond
  • Regular testing of procedures and systems
  • Evacuation, invacuation and lockdown planning
  • Clear in-incident communication capability
Enhanced
Enhanced Tier

800+ persons

All Standard Tier duties, plus a requirement to reduce vulnerability so far as reasonably practicable and to document measures for the regulator. Applies to large venues, stadiums, arenas, campuses and transport hubs.

  • Everything in the Standard Tier
  • Documented vulnerability reduction measures
  • SIA-ready audit evidence and reporting
  • Multi-zone alert management and control
  • Real-time device and system health monitoring
  • Integration with existing security infrastructure

Enforcement: The Security Industry Authority (SIA) enforces the Act and may issue compliance notices, restriction notices and monetary penalties. Standard tier penalties are capped at £10,000. For enhanced tier premises and qualifying events the maximum is the greater of £18 million or 5% of qualifying worldwide revenue — so for a large organisation there is no effective ceiling. Daily penalties of up to £500 (standard) or £50,000 (enhanced) may also run for each day a contravention continues. The Act sets the outcome; the duty holder is responsible for demonstrating that measures taken are proportionate and reasonably practicable.

Martyn's Law SolutionsAbout MAVAS

Built on nearly 25 years of AV and communications expertise

MAVAS is an intelligent safety and compliance platform developed by Handy AV — a specialist in digital communication, signage and audio integration with nearly 25 years of industry experience. Our white paper, Martyn's Law: Security, Sound and Vision — the Missing Layer, identified the communication gap at the centre of venue security and informed the development of MAVAS from the ground up.

We are uniquely positioned to help organisations transform existing AV infrastructure into effective, auditable communication networks — connecting the systems you already have, addressing the gaps that place people at risk, and producing the evidenced capability that regulators and insurers require.

Ready to protect your venue?

Speak with a Martyn's Law specialist. We will assess your existing infrastructure, identify coverage gaps and demonstrate how MAVAS can support your compliance journey — without replacing the systems you already own.

Contact us at info@mavas.net

The MAVAS mobile app, showing alert templates for a communication alert, suspicious activity, fire evacuation and terror threat, each tagged with its priority.