Last updated: 25 October 2026
1. About these terms
Effective date: 5 October 2026 · Version: 1.0
These Business Terms of Use and Service Agreement ("Terms") govern access to and use of AutoRAMS, including the AutoRAMS website, software platform, desktop application, mobile application, document-generation systems and associated services (collectively, the "Service").
Service provider
AutoRAMS is a software product and service owned and operated by:
Ambler Group Limited
Company Number: 12568344
Registered Office: 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF, United Kingdom
In these Terms:
- "Ambler Group", "we", "us" and "our" means Ambler Group Limited.
- "AutoRAMS" means the software platform, product, applications, systems, templates, databases, services and associated intellectual property operated by Ambler Group Limited under the AutoRAMS name.
- "Customer", "you" and "your" means the business, company, sole trader, partnership or other commercial organisation purchasing, subscribing to, accessing or using AutoRAMS.
- "Fees" means the subscription and other charges payable under section 5.
By creating an account, purchasing a subscription, accepting these Terms or accessing or using AutoRAMS, you enter into a legally binding agreement with Ambler Group Limited and agree to comply with these Terms.
AutoRAMS is not a separate legal entity. Any contract for use of AutoRAMS is entered into with Ambler Group Limited.
The person signing up confirms they have authority to bind your company. AutoRAMS is for businesses only, not consumers, and is currently available only to businesses based in the United Kingdom. Its RAMS and permits are written for UK law and HSE guidance. You confirm that your business is based in the UK and that the address you give us is your UK business address. We may refuse or close an account that is not a UK business, and if we close a paid account for that reason we will refund any fees paid for the period after it is closed. Our Privacy Policy explains how we handle personal data and forms part of the picture alongside these Terms.
Contracting party
Any reference within these Terms, the AutoRAMS website, subscriptions, invoices, generated documents or other Service materials to "AutoRAMS" shall, where the context concerns the supplier of the Service or a legal obligation, mean Ambler Group Limited trading through its AutoRAMS product/service.
Any payment made for AutoRAMS is a payment for services supplied by Ambler Group Limited unless expressly stated otherwise in writing.
2. Your account and users
- Each account has a company admin and, optionally, staff users. Company admins manage users, plans and billing.
- Each user must have their own login. Sharing logins is not allowed.
- Only one session can be active per user login at a time. Signing in somewhere else may end your earlier session.
- You must give accurate information when you sign up and keep it up to date.
- Keep your passwords secure. You are responsible for what happens under your users' logins, so tell us straight away at office@autorams.com if you think an account has been compromised.
- Extra users can be added for £6 per month each (including VAT), on top of the users included in your plan.
- Every package includes all of the trades listed on our website, at no extra cost.
3. The service and what RAMS are
AutoRAMS is a hosted web app. You choose the trades your company works in from those listed on our website and produce RAMS (Risk Assessments and Method Statements) as PDFs from our library of job types. Where your plan includes them, you can also create and manage permits to work (see section 3A).
Every RAMS produced by AutoRAMS is a draft. The content is generated from our library. It is a starting point, not a finished or approved safety document, and it is not legal, health and safety or professional advice.
Responsibility for checking every RAMS. AutoRAMS produces draft risk assessments and method statements from a general library of job types and the information you enter. It is a drafting tool, not a safety consultancy, and a RAMS produced by AutoRAMS is not a certified, approved or site-specific document. You are solely responsible for checking each RAMS before it is issued or used, and for confirming that it is complete, accurate and suitable for the work, the site, the people involved and the law that applies. A competent person in your company must review every RAMS, add or correct anything specific to the job, and approve it before work starts. You must not rely on AutoRAMS to identify every hazard or control.
AutoRAMS holds no insurance covering the content of the documents you produce, and you must not treat the service as providing any such cover. To the fullest extent permitted by law, AutoRAMS accepts no liability for any injury, loss, damage, claim, fine or enforcement action arising from a RAMS that has not been checked and approved by your competent person, or from your use of any RAMS. Nothing in these terms limits liability that cannot be limited by law, including liability for death or personal injury caused by negligence, or for fraud.
Your confirmations. When you sign up, you must confirm:
I confirm that a competent person from our company will check and approve every RAMS and permit produced with AutoRAMS before it is used, to make sure it meets our trade standards, suits the work and site, and that all risks are assessed. I understand that we are solely responsible for this, and that AutoRAMS holds no liability, and no insurance, for any risks that may or may not be covered.
Each time you produce or amend a RAMS you must also tick a box confirming: "I confirm that a competent person will check and approve this RAMS before it is used on site, and that I understand AutoRAMS accepts no liability for its content." We keep a record of each confirmation, with the date and time and who gave it.
We do not check your RAMS, and we do not know your sites, your people or your clients. We do not accept liability for any risk that a RAMS does or does not cover.
3A. Permits to work
Permits are included in every RAMS plan (with the Construction permit templates) and are also available on their own with the permit-only plan (with the Construction or Manufacturing permit templates you choose).
- A recording and workflow tool. AutoRAMS lets you write, approve, verify, issue, accept, suspend, complete and close permits, and keeps a record of each step. The permit templates come from a general library. Like a RAMS, every permit is a draft until your competent people have checked it against the work and the site.
- You stay responsible for your permit system. You decide when a permit is needed, who may approve and issue permits, what isolations and other precautions are needed and when they can be removed. Closing a permit in AutoRAMS never releases an isolation or confirms that plant, equipment or an area is safe. Where you work on a client's site, their permit system and rules come first.
- Site verification. AutoRAMS asks a competent person to confirm site checks before a permit is issued. That confirmation is yours: we cannot see the site and do not check it.
- Signatures. Each user draws and saves their own signature, which is added to the steps they take. You must make sure each user signs only as themselves and keeps their login to themselves.
- Permit holders. When a permit is issued, each holder you name is emailed a private link and a one-time code to accept it. You must only name people who are taking part in the work, use their correct email addresses and make sure they know they will receive these emails.
- The limits on our liability in sections 3 and 12 apply to permits in the same way as to RAMS.
4. Plans, trial and usage limits
All prices are per month and include VAT at the current rate.
- Free trial: 2 RAMS, 14 days, 2 users. Trial RAMS are watermarked and view-only (no downloads or copying). One free trial per company.
- Solo: £25, 20 RAMS per month, 2 users.
- Standard: £49, 100 RAMS per month, 5 users.
- Business: £99, 500 RAMS per month, 15 users.
- Enterprise: bespoke terms and pricing, agreed with us in writing.
- Permit Solo: £15, 25 permits per month, 2 users, no RAMS.
- Permit Standard: £35, 150 permits per month, 5 users, no RAMS.
- Permit Business: £69, 750 permits per month, 15 users, no RAMS.
- Permit Enterprise: bespoke terms and pricing, agreed with us in writing.
Every RAMS plan includes all trades and permits to work: 25 permits a month on Solo, 150 on Standard and 750 on Business, and 5 permits in total on the free trial. A permit counts when it is created, like a new RAMS; editing, issuing and closing it does not. Extra users can be added to a paid plan for £6 a month each. If you are on a plan we no longer sell, it carries on at its price and limits until you change it.
A RAMS counts towards your monthly limit only when it is newly created. Amending an existing RAMS does not use any of your allowance. Your limit resets each month. Once you reach your limit you cannot create more new RAMS until the reset, unless you move to a higher plan.
5. Payment
- Direct Debit only. Paid plans are billed monthly by Bacs Direct Debit. Payments are handled by Stripe, our payment processor. AutoRAMS never sees your bank details.
- Referral discount. If an AutoRAMS customer gives you their referral code and you enter it when you sign up, then once your first payment has been taken you get 10% off your monthly subscription and the customer who referred you gets 10% off theirs. Each customer can earn this for up to 2 referred companies, so the most anyone can have off through referrals is 20%. A company cannot refer itself, a code only counts for a company that has not signed up before, and we may withhold or remove a discount if a code has been misused. Referral discounts apply from the next invoice, are not paid out as cash, and end if the subscription ends.
- Partner codes. If you sign up using a code or link from one of our partners (for example a content creator), you may get 10% off your first 3 monthly payments, depending on the partner's arrangement with us, and we show you whether a code gives a discount before you sign up. A code applies to new customers only, can be used once per company, cannot be combined with a customer referral code, and may be removed if it is misused. The partner is paid by us for introducing customers; that does not change the price you pay beyond the discount.
- Failed payments. If a payment fails, we will send you email reminders. You then have 3 days' grace with full service. After that your account moves to restricted mode. In restricted mode you can still log in, view and download your existing RAMS and fix your billing, but you cannot create new RAMS. Once you pay, full service is restored.
- No minimum term, cancel anytime. There is no minimum term. You can cancel at any time from your account. We ask you to tell us why you are leaving (or to choose "I would rather not say"). If you cancel before your next payment date, your subscription will not renew and you will not be charged again. You keep full use of the service until the end of the period you have already paid for, and we do not give refunds for part-periods unless the law requires it.
- VAT. Prices include VAT at the current rate. If the VAT rate changes, the VAT part of the price changes with it.
- Price changes. We will give you at least 30 days' notice before changing the price of your plan. If you do not want the new price, you can cancel before it takes effect.
6. Acceptable use
You must not:
- share logins, or let people outside your company use your account;
- resell, sub-license or redistribute the library or its content, or offer it as a competing service;
- scrape, copy in bulk, or use bots or automated tools to extract the library or other content;
- try to break, overload or gain unauthorised access to the service or to other customers' data;
- reverse engineer the software, except where the law allows it;
- upload unlawful content or content you have no right to use; or
- use the service in a way that is misleading, or that breaks the law.
7. Your data and data processing
Your data. "Your data" means the information you put into AutoRAMS: company details, user names and emails, client names and site addresses entered into RAMS, staff names on RAMS, site photos, logos, and the RAMS PDFs you generate. You own your data and the RAMS you generate. You give us a licence to store, process and display your data only as needed to provide the service to you.
Who is responsible. For personal data of your clients and staff that you enter into AutoRAMS, you are the controller and we are your processor. For your account, billing and website contact data, we are the controller (see our Privacy Policy). You must have a lawful basis for putting personal data into AutoRAMS.
Data processing terms. When we act as your processor, we will:
- process personal data only on your documented instructions, which are these terms and your use of the service, unless the law requires otherwise;
- make sure people who handle it are bound by confidentiality;
- keep it secure, including encryption in transit (HTTPS), hashed passwords, separation of each company's data and daily backups;
- only use sub-processors approved in these terms, which currently are Stripe (payments), our email delivery provider (Resend or Postmark) and our cloud hosting provider (DigitalOcean, with our servers in London, United Kingdom), and put data protection terms in place with them. We will tell you about any change to these before it takes effect, and you can object by contacting us;
- help you, where reasonably possible, to respond to individuals exercising their data protection rights and to meet your security, breach notification and impact assessment duties;
- tell you without undue delay after becoming aware of a personal data breach affecting your data;
- on request, give you the information needed to show we are complying with this section; and
- after your account ends, return or delete your data as set out in section 13.
Support access. Our office staff can see your account and billing information by default. They can see a specific RAMS only if your company admin shares it with us for a support request.
8. Our content and intellectual property
AutoRAMS brand and intellectual property
AutoRAMS is a proprietary software service of Ambler Group Limited.
Unless expressly stated otherwise, all rights, title and interest in and to AutoRAMS remain vested in Ambler Group Limited or its licensors, including rights relating to:
- the AutoRAMS name and branding;
- software and source code;
- software architecture;
- user interfaces;
- document-generation systems;
- automated workflows;
- risk libraries;
- hazard libraries;
- control-measure libraries;
- trade and task libraries;
- COSHH libraries;
- permit libraries;
- templates;
- document structures;
- databases;
- wording libraries;
- graphics;
- designs;
- algorithms;
- processes; and
- other intellectual property incorporated into the Service.
The Customer receives only the rights expressly granted under these Terms.
Nothing in these Terms transfers ownership of AutoRAMS or its underlying intellectual property to the Customer.
AutoRAMS owns the software, the library of job types and content, and the AutoRAMS name and branding. We give you a non-exclusive, non-transferable right to use these during your subscription, for your own company's business. You may use the RAMS you generate for your own work and your own clients. You may not copy the library itself or pass it on to anyone else, as set out in section 6.
9. Customer documents
The Customer remains responsible for the documents it creates, approves, issues or uses through AutoRAMS.
Where a document is generated using Customer information, the Customer is responsible for checking the document and deciding whether it is appropriate for use.
Ambler Group Limited does not become responsible for a Customer's health and safety arrangements merely because AutoRAMS has assisted in drafting a document.
Subject to payment of all applicable Fees, the Customer may use, modify, reproduce and distribute final documents produced through AutoRAMS for its normal business activities and client projects.
This permission does not permit the Customer to copy, extract, reproduce, commercially exploit or create a competing service from AutoRAMS' underlying libraries, templates, systems, databases or intellectual property.
10. Customer-supplied information
The Customer is responsible for the accuracy, completeness and suitability of all information supplied to AutoRAMS.
AutoRAMS operates using the information, selections and instructions provided by the Customer and may rely on that information without independently verifying it.
Where inaccurate, incomplete, misleading or outdated information supplied by the Customer causes or contributes to an inaccurate or unsuitable document, responsibility for the consequences of that information remains with the Customer to the extent permitted by law.
Ambler Group Limited is not responsible for independently investigating or verifying the circumstances of a Customer's project, workplace, employees, equipment or site.
11. Availability and support
We will use reasonable endeavours to keep the service available, but we do not guarantee uptime. The service may occasionally be unavailable for maintenance, updates or reasons outside our control. We may change, add or remove library content and features from time to time. Support is available at office@autorams.com and on 0345 548 5451.
12. Liability
- Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited or excluded by law.
- Subject to that, we are not liable for injury, loss, damage or regulatory action arising from the use of any RAMS that has not been checked by a competent person, or from any risk that a RAMS does or does not cover, or from you relying on a RAMS without checking that it suits the job and site.
- Subject to the first point, we are not liable for loss of profit, loss of business, loss of goodwill or any indirect or consequential loss.
- Subject to the first point, our total liability to you for all claims arising out of or in connection with the service in any 12-month period is limited to the fees you paid to us in the 12 months before the event that gave rise to the claim.
- We are not liable for delays or failures caused by events outside our reasonable control.
13. Suspension and ending
- Suspension. We may suspend or restrict your account for non-payment (see section 5) or if you seriously or repeatedly break these terms, including the acceptable use rules. Where reasonable, we will tell you why and give you a chance to put things right.
- Ending. You can cancel as set out in section 5. We may end your account if you seriously break these terms and do not put it right after we ask you to, or if we stop providing the service, in which case we will give you reasonable notice.
- What happens to your data. After cancellation, we keep your data for 90 days so you can download your RAMS or come back. After that we delete it, unless the law requires us to keep it. Billing records are kept for 6 years. Backups roll off within 35 days. You should download anything you need before your account ends.
14. Changes
We may update these terms, for example when we change the service or the law changes. We will tell you about material changes by email or in the app before they take effect. If you keep using the service after the change takes effect, you accept the new terms. If you do not agree, you can cancel before then. Price changes are covered by section 5.
15. Governing law
These terms, and any dispute or claim arising out of or in connection with them, are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction.
16. Contact
Ambler Group Limited, trading as AutoRAMS
Company number: 12568344
Registered office: 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF, United Kingdom
Email: office@autorams.com
Phone: 0345 548 5451
Last updated: 25 October 2026
1. Who we are
AutoRAMS is a trading name of Ambler Group Limited, company number 12568344, whose registered office is at 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF, United Kingdom. We provide a web app that helps companies in the trades produce RAMS (Risk Assessments and Method Statements).
Our ICO registration number is ZC268153. You can contact us at office@autorams.com or on 0345 548 5451.
This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018. There are two different roles, explained next.
2. Our two roles
- Controller. For your account, billing and website contact data, we decide how and why the data is used. We are the controller, and this policy applies directly.
- Processor. For your clients' and staff information that customers enter into RAMS, the customer is the controller and we are the processor, acting on the customer's instructions. This is covered by section 7 of our Terms of Service. If you are a client or worker named on a RAMS and want to use your rights, please contact the AutoRAMS customer that created it first. We will help them to respond.
3. What we collect and why
Account data (we are the controller)
- Company details (including your business address, postcode and country), and the names and email addresses of users, with their role (company admin or staff), login details (passwords are stored hashed) and the trades chosen.
- We use this to create and run your account, provide the service and contact you about it.
Sign-up location checks (we are the controller)
- AutoRAMS is currently for UK businesses only. When you sign up we record the country your connection comes from (worked out on our own server from your IP address, using the free IP to Country Lite database by DB-IP; your IP address is not sent to anyone for this) and the time zone your browser reports. A sign-up that looks like it comes from outside the UK goes ahead but is marked for our office to check.
- If you choose a country other than the UK, we cannot open an account. We keep a short record of the attempt (the country chosen, the company name if you typed it, the package, the connection country and time zone), and your name and email address only if you ask us to tell you when AutoRAMS is available in your country. We keep these records for 12 months and use them only to understand interest from outside the UK and to reply if you asked us to.
- We do this under our legitimate interests in offering the service only where it is designed to be used and preventing misuse.
Billing data (we are the controller)
- Your plan, invoices, payment status and payment history. Payments are made by Bacs Direct Debit through Stripe. We never see your bank details; Stripe collects and holds them.
- We use this to take payment, manage failed payments and keep financial records.
Website contact data (we are the controller)
- Names, email addresses and messages you send us through the website, by email or by phone.
- We use this to reply to you and provide support.
Customer content (we are the processor)
- Client names and site addresses, staff names on RAMS, site photos, logos and the generated PDFs.
- Names, roles and drawn signatures of people who sign a RAMS briefing on their phone.
- Permits to work and their records: the people named on a permit, each step taken with the name, time and saved signature of the person who took it, and the names and email addresses of permit holders. When a holder accepts a permit we record their name, email address, drawn signature, the time, their IP address and their browser type, so the acceptance can be shown to be theirs. One-time codes are stored only in scrambled (hashed) form.
- We use this only to provide the service to the customer. Permit holders and people signing a briefing are asked to sign by the customer; the customer decides what the record is for and how long it is needed.
Support access
Our office staff can see account and billing information by default. They can see a specific RAMS only if your company admin shares it with us for a support request.
4. Our lawful bases
- Contract: where we need to use your data to provide the service you signed up for, such as running your account and taking payment.
- Legitimate interests: for running and securing our business, keeping the service safe, preventing misuse, responding to enquiries and keeping our records. We balance these against your rights and interests.
- Legal obligation: where the law requires us to keep or share data, for example keeping billing and accounting records.
5. Who we share data with
We do not sell personal data. We share it only with the providers that help us run the service (our sub-processors), and where the law requires:
- Stripe, for payments and the customer portal.
- Our email delivery provider (Resend or Postmark), to send account, billing and service emails.
- Our cloud hosting provider, which hosts the service and its data (DigitalOcean, with our servers in London, United Kingdom).
We may also share data with our professional advisers, or with authorities or courts if the law requires it. We have data protection terms in place with our providers.
6. International transfers
Stripe and our email provider may transfer or process personal data outside the UK. Where that happens, we make sure appropriate safeguards are in place, such as the UK's approved international data transfer agreement or addendum, or an adequacy decision that allows the transfer. Our service and its data are hosted in London, United Kingdom.
7. How long we keep data
- Account data: kept while the account is active.
- After cancellation: your data is kept for 90 days and then deleted, unless the law requires us to keep it.
- Billing records: kept for 6 years.
- Sign-ups from outside the UK: kept for 12 months.
- Backups: deleted data rolls off our backups within 35 days.
8. Security
We take reasonable steps to protect personal data. Data is encrypted in transit using HTTPS. Passwords are hashed. Each company's data is kept separate from other companies' data. We take daily backups. No system is completely secure, but if there is a personal data breach that affects you, we will follow the law on telling the people who need to know, including customers whose data we process, without undue delay.
9. Cookies
We use one essential session cookie. It keeps you logged in and is needed for the service to work, so it does not need your consent. We do not currently use advertising or analytics cookies. If that changes, we will update this policy and ask for consent where the law requires it.
If you arrive through a partner's link (an address ending in ?ref= and a code), your browser keeps that code on your device so the discount can be applied when you sign up; you can clear it by clearing this site's stored data. We also count the visit for the partner. This uses a short-lived, one-way value made from your connection details, which we cannot turn back into your identity or use to follow you to other sites, and we do not store your IP address for it. Partners are told only how many visits, sign-ups and payments their link produced, never who the customers are.
Website visit statistics. We count visits to our website without cookies and without storing anything on your device. Our server records which pages are viewed, roughly how long each is open, where the visit came from (for example a search engine, LinkedIn or Instagram), the type of device (mobile, tablet or desktop) and whether the contact or sign-up form was used. To tell one visit from another we use a one-way scrambled code made from your connection details and browser, mixed with a random value that changes every day and is then deleted. We do not store your IP address for this, we cannot turn the code back into your identity, and we cannot follow you from one day to the next or to other sites. We use these statistics, under our legitimate interests, only to improve our website, and keep them for up to 13 months.
10. Your rights
Under the UK GDPR you have the right to:
- be told how your data is used (this policy);
- access a copy of your data;
- have inaccurate data corrected;
- have your data erased, in some cases;
- restrict how your data is used, in some cases;
- object to use of your data based on legitimate interests;
- receive your data in a portable format, where the right applies; and
- complain to the regulator (see below).
To use a right, email office@autorams.com. We normally respond within one month. We may need to check your identity first. These rights are not absolute and some have exceptions.
11. Complaints
We would like the chance to sort out any concern first, so please contact us. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on our website with a new date and, if the changes are important, tell account holders by email.
13. Contact
Ambler Group Limited, trading as AutoRAMS
Registered office: 167–169 Great Portland Street, Fifth Floor, London, W1W 5PF, United Kingdom
Email: office@autorams.com
Phone: 0345 548 5451