Slab in plain language.

ISO 9001:2015 (Quality), ISO 45001:2018 (Health and Safety) and ISO 14001:2015 (Environmental). Each is mapped clause by clause inside Slab.

Yes, and an IMS is the most common case in our target market.

When you upload a document, Slab maps each evidence item to every clause it satisfies across all three standards in a single pass, rather than treating the standards as separate filing systems. A risk assessment that satisfies ISO 9001 Clause 6.1, ISO 45001 Clause 6.1 and ISO 14001 Clause 6.1 is mapped to all three at once. The dashboard shows compliance against each standard separately and against the IMS as a whole.

No. Slab works for businesses already certified, where the focus is making surveillance audits less painful, and for businesses pursuing accreditation for the first time, where the focus is putting a working evidence structure in place from day one.

First-time accreditation work tends to benefit more, because the structured repository removes most of the document-organising effort.

Method statements, risk assessments, RAMS, training records and matrices, toolbox talk records, inspection reports, supplier assessments, contractor approvals, customer feedback, meeting minutes, management review records, internal audit findings, corrective actions, environmental aspects registers, legal compliance registers and the rest.

File-format-wise: PDF (including scanned), Word, Excel, CSV, plain text and images (JPG, PNG, WebP). For prose documents Slab extracts the text, finds the discrete evidence items and maps each one. For spreadsheets and CSVs each row is treated as a candidate evidence item, which is faster and more accurate than treating the file as a single unit. iPhone photos taken in HEIC format need converting to JPEG before upload; automatic HEIC handling is on the roadmap.

Typed documents read reliably. A scanned permit-to-work, a photographed RAMS sheet pinned to a wall, an Excel sheet exported as PDF: Slab extracts the text and the audit trail records the source as it would for any other evidence.

Handwritten content is best-effort. Site staff jotting on a clipboard, a near-miss form filled in by hand, an inspection signature: Slab returns its best transcription plus a description of what it sees, and you correct it in the review screen before it lands in the evidence index. The audit trail records the original photo, the extracted text and any corrections.

You correct it in two clicks. Each item shows the clause, the confidence score and the page reference back to the source document, so you can see what Slab thought and why.

Within your account, the system learns from corrections so the same misclassification stops recurring. We do not share that learning across other customers’ accounts; your corrections improve your account only. The audit trail records every correction so a mapping can be traced back to who set it and when.

Your data is stored in the United Kingdom, on Supabase’s London region.

We do not transfer your data outside the UK or European Economic Area without your prior written consent, except where strictly necessary to deliver the service through a disclosed sub-processor. The current sub-processor list is in our Data Processing Addendum at getslab.uk/privacy.

Three groups, on a strict need-to-know basis.

You and your team. Authorised users you invite. Role-based access controls determine what each user sees: managers see everything, staff see only their own submissions.

Slab staff. Limited to engineering and support staff with a business reason to access your data, such as troubleshooting a specific issue you have raised with us. All access is logged.

Sub-processors. Anthropic processes the text of your documents to perform AI tasks (clause classification, gap analysis, management review drafts) and returns the structured output to your account in the UK. Supabase hosts the database in London. Stripe processes payments. The full sub-processor list is in our Data Processing Addendum at getslab.uk/privacy.

No.

Slab uses Anthropic’s commercial API, under which customer content submitted via the API is not used to train Anthropic’s models. We also do not run our own model training on your data.

We may use aggregated, anonymised data (for example, the proportion of evidence types or clause frequencies across our customer base) to operate and improve the service. This data is never identifiable to you, your company, or any individual.

You can export your data at any time while your account is active, and for 60 days after termination. Export covers all original uploaded documents in their original file formats, all clause mappings and evidence records, all generated reports and audit packs, and the full audit trail (every action, user, timestamp).

After 60 days from termination we delete your data in line with our Data Processing Addendum, except where retention is required by law.

Slab complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

In practice this means: a Data Processing Agreement is in place between you and Slab when you become a customer (incorporated by reference into your customer agreement); sub-processor disclosure at getslab.uk/privacy; UK data residency for all Customer Data; encryption of Customer Data at rest and in transit; your right to access, correct or delete personal data we hold; and breach notification within statutory timeframes.

For your Customer Data (the documents and records you upload to manage your ISO accreditation), you are the data controller and Slab is your data processor.

Customer Data is the documents and records you upload to Slab to manage your ISO accreditation: policies, procedures, evidence, audit records, corrective actions. You own it. Slab processes it on your behalf as your data processor.

Account data is the information about your authorised users (name, email, billing address). Slab is the data controller for this data and our use of it is described in our Privacy Notice at getslab.uk/privacy.

Yes.

If a member of your team, or one of your own customers, exercises a data subject right under UK GDPR (access, correction, erasure, portability, restriction, objection), you can fulfil the request through your Slab dashboard for Customer Data you control as data controller.

For requests relating to account data that Slab itself controls, the data subject can contact us directly at the email address in our Privacy Notice. We respond within statutory timeframes.

We notify you without undue delay if we become aware of a personal data breach affecting your Customer Data, in line with UK GDPR Article 33.

As data controller for your Customer Data, you decide whether the breach requires onward notification to the Information Commissioner’s Office (ICO) and to affected data subjects. Slab provides all reasonable assistance to support those decisions and any notifications you need to make.

Yes, in three specific ways at Enterprise tier: for HSQE consultancies who want to offer the platform to their own clients under their brand; for certification bodies offering a co-branded tool to their certified clients; and for larger enterprise customers with strict brand identity policies.

Pricing, scope and setup are agreed case-by-case.

Slab is operated as a single SaaS product and most customers use it under the Slab brand. The platform you and your team use day-to-day stays Slab-branded inside your account unless we agree a whitelabel arrangement.

One thing that is standard regardless of tier: the customer feedback forms Slab sends to your end clients (for ISO 9001 Clause 9.1.2 customer satisfaction evidence) carry your company branding, not Slab’s. That applies to every tier from day one.

For Enterprise whitelabel enquiries, contact us via the form on this site or directly via your Slab account manager.

Slab V1 is £149 per month, or £1,490 per year (annual billing receives two months free). Per company, not per user. All three ISO standards (9001, 45001 and 14001) and every V1 feature are included from day one.

Enterprise pricing (for organisations with 150+ staff or multi-site operations) starts from £399 per month and is negotiated to fit your structure.

All prices exclude VAT.

We trialled a three-tier card (Slab One, Slab Two, Slab Three, priced by how many ISO standards you held) and concluded it was charging artificial premiums for features V1 already includes for everyone. Every customer gets the same Slab whether they hold one standard or three.

A tiered model returns when V2 features (mobile site capture, supplier tracking and customer feedback workflow) ship in early 2027. Existing customers keep their V1 price as the base; V2 features sit behind a separate tier if and when they want them.

Per company. Add as many users as you have without the price changing.

We chose this on purpose: per-seat pricing punishes you for getting more of your team into the system, which is the opposite of what we want.

Add your team without the price changing. Slab is priced per company, not per user, so the HSQE manager, quality manager, ops director and any site staff contributing evidence all sit under one subscription.

Get in touch. Enterprise pricing starts from £399 per month and is negotiated to fit your structure, including multi-site operations, custom onboarding and dedicated support.

The 150-staff threshold is a guide, not a tripwire. We will not push you onto Enterprise the moment your headcount ticks over.

All listed prices exclude VAT. UK VAT will be added at the prevailing rate on invoicing.

We offer a thirty-minute demo call on the live product, using a sample evidence bundle so you can see how Slab handles real documents.

All sign-ups have a 14-day cooling-off period.

The first 20 paying customers receive a 50% discount on year one. That is £74.50 per month or £745 per year for the duration of the first 12 months. The discount reverts to standard pricing on your year-two renewal. The cohort closes when the 20th customer signs.

In exchange we ask for a short monthly feedback call, permission to name you in one case study (which you approve before publication), and permission to cite you as a Slab customer in our marketing and press. No testimonials required, no co-marketing commitments, no LinkedIn requests.

Your subscription auto-renews for another 12 months on the anniversary of your start date. Founding clients move to the standard V1 rate at year two (£149 per month or £1,490 per year, on the same billing cadence you chose at signup). We give at least 30 days notice before any change so there are no surprises.

Yes, at any time, with 30 days written notice. Monthly subscribers stop paying at the next billing cycle. Annual subscribers continue to use Slab to the end of their paid term; we do not refund paid annual fees on mid-term cancellation. You have 60 days to export your data after cancellation.

The product itself is set up in 30 minutes on a guided call: account, organisation, ISO standards in scope, user roles.

Loading historical evidence depends on how organised your existing system is. A typical SME goes from sign-up to first audit pack in two to three working days, including evidence loading.

No. The system is designed for evidence to flow in continuously rather than be back-loaded.

The faster route at first is to upload the most recent surveillance audit’s evidence pack, which gives Slab a working baseline. Add the rest as it comes through the door, in the normal course of work.

The interface is built around the audit workflow you already know. The thirty-minute setup call covers everything you need to start.

Email support included for every customer, with a working response within one business day. Foundation clients get direct access to the founders by email throughout their first year.

A folder structure is a filing system. It does not know what you have, does not know what is missing, does not know when something is due, and does not generate an audit pack. Slab does all four.

The shift is from passive storage to active evidence management. SharePoint can stay as your wider document store; Slab handles the ISO evidence layer.

A good consultant is worth keeping. Slab handles the day-to-day evidence capture and structuring; the consultant handles strategy, audit prep coaching and the harder calls. The two coexist.

Some consultants use Slab on behalf of their clients, which lets them serve more clients with the same hours because the evidence-organising work is no longer billable consultant time. If your consultant would like to discuss that arrangement, ask them to get in touch.