Software built around ACoP L8, HSG274 and the standards your auditors carry

If you manage Legionella risk for a living, the standards below are your working week. Here's each one, what it asks of you, and where BlueWave carries the load — described honestly, including what stays your job.

The UK water-hygiene landscape, mapped

StandardWhat it governsWhere BlueWave helps
HSWA 1974 & COSHH 2002The legal duties everything else hangs off — manage the risk from biological agents, including Legionella.The evidence trail that shows you discharged the duty: who did what, where, when.
ACoP L8 (4th edition)The approved code of practice for controlling Legionella in water systems — what duty-holders must have in place.Records, responsibilities and schemes of control organised the way L8 expects them to exist.
HSG274 Part 1Evaporative cooling systems — cooling towers and condensers, the highest-consequence assets.Monitoring regimes as recurring schedules; readings captured against the asset.
HSG274 Part 2Hot and cold water systems — temperature monitoring, flushing, the bread-and-butter regime.Temperature runs as scheduled visits with validated capture forms.
HSG274 Part 3Other risk systems — spray humidifiers, vehicle washes, fountains and the rest.Custom form schemas for the odd systems, same records discipline.
HSG282Spa-pool systems — their own control and monitoring guidance.Spa regimes scheduled and recorded like any other programme.
BS 8580-1Risk assessment for Legionella — the methodology your assessments should follow.Assessments filed against site and asset, with review dates that surface in the schedule.
BS 7592Sampling for Legionella in water systems — how samples should be taken and handled.Sampling captured in structured schemas at the point of collection.
BS EN ISO 11731Laboratory enumeration of Legionella — the method behind the lab report you receive.The lab's results tracked from sample to logbook, positives flagged.
HTM 04-01Safe water in healthcare premises — the NHS estates regime.The evidence trail healthcare auditors expect, in the structure they expect it.
PWTAGSwimming-pool water treatment — the pools sector's technical code.Pool monitoring programmes scheduled and recorded alongside everything else.
LCA standardsThe Legionella Control Association's code for service providers — including records kept for five years.Five-year retention by default, and an audit trail that shows your service standards being met.

Built around these standards — not certified by them. No software is.

Where the load actually shifts

ACoP L8: audit-ready means findable

L8's records expectations fail in practice for one reason: the records exist but can't be produced. BlueWave's cascading library files every record where the work created it — customer, site, asset, job, date — so producing five years of evidence is a search, not an excavation.

Compliance records in depth

HSG274: regimes become schedules

Monthly sentinel temperatures, quarterly cleans, annual reviews — HSG274's monitoring tables are scheduling problems. BlueWave turns the regime into recurring visits with validated capture forms, so the programme runs itself and the gaps show up before the auditor finds them.

Scheduling in depth

BS 7592 & ISO 11731: sampling with a chain

Good sampling practice dies at transcription. BlueWave captures samples in structured schemas at the asset, tracks them through the lab, and lands the UKAS report's values back in the asset's history — one unbroken chain from tap to logbook, positives flagged on arrival.

Lab results in depth

LCA: five years, by default

The LCA expects service providers to keep records for five years and to evidence their service standards. BlueWave retains by default and logs every change — so demonstrating your standards is reading the trail, not reconstructing it.

How retention works

The questions compliance managers ask first

Does using BlueWave make us ACoP L8 compliant?
No — and be wary of software that implies otherwise. Compliance duties belong to duty-holders and the competent people supporting them; no tool discharges them. What BlueWave does is make the evidence of your compliance effortless to produce: the records, the schedules, the trail. The duties stay yours. The paperwork stops being a second job.
What records does the LCA expect us to keep?
The LCA's standards for service providers expect records of the work you deliver — monitoring results, assessments, remedial actions — retained for five years. BlueWave keeps them by default, filed against the site and asset they belong to, with an audit trail of changes.
Can BlueWave run our HSG274 monitoring programme?
Yes — that's the core of it. The monitoring regime becomes recurring scheduled visits; each visit carries validated capture forms; readings file against the asset's history. Missed or overdue visits are visible, which is precisely what a programme on a spreadsheet can't tell you.
Is BlueWave suitable for HTM 04-01 healthcare estates?
The records structure, audit trail and retention suit healthcare estates work, and the platform is built around the same standards HTM 04-01 leans on. If you serve NHS or private healthcare clients, bring their audit requirements to a demo and test us against them.
What's a written scheme of control, and where does it live?
It's the document ACoP L8 expects for each system at risk — what the system is, who's responsible, what monitoring happens, what to do when results are out of range. In BlueWave it lives with the site it describes, next to the records that prove it's being followed.

Bring your audit checklist

The fastest way to evaluate a compliance platform is to audit it. Book a demo, bring the checklist your auditors use on you, and run it against BlueWave live.