Most small business owners do not avoid risk assessments because they do not care about safety. They avoid them because a blank form with columns headed "hazard", "who might be harmed" and "controls" feels like homework. An AI assistant such as Claude removes the blank page problem. It does not remove your legal responsibility. This guide shows how to get a usable, UK-specific AI risk assessment template out of Claude, how to check it properly, and where the tool stops being useful.
Why are UK small businesses using AI for risk assessments?
The paperwork is not the point, and the regulator says so. The Health and Safety Executive's guidance on the steps needed to manage risk makes clear that the priority is controlling risks in practice, not producing documents. That framing is exactly why AI fits. If a tool can take the typing off your plate, you can spend the hour walking the floor, talking to staff and fixing the trailing extension lead instead of formatting a table.
The stakes are real. HSE's annual work-related health and safety statistics for 2024/25, published in November 2025, estimate 680,000 self-reported non-fatal injuries to workers and 1.9 million workers suffering work-related ill health, with 40.1 million working days lost. A small firm feels a single lost week from a back injury far more than a large employer does.
What does UK law require in a risk assessment?
HSE's risk assessment guidance is clear on the recording threshold: with 5 or more employees you must record your significant findings, including the hazards, who could be harmed and how, and the controls in place. You must also review those controls to make sure they work, and update the record when you change anything.
There is no prescribed national form. That matters, because it means a Claude-generated document is as valid as a paper one from a stationery shop, provided the content is right. HSE's risk assessment template and examples page suggests a simple record covering who might be harmed and how, what you already do, what further action is needed, who carries it out and when. Those are the columns to ask Claude for.
HSE covers Great Britain. If you trade in Northern Ireland, check the equivalent guidance from HSENI, which follows a very similar approach.
How do I build an AI risk assessment template in Claude?
The quality of the draft depends almost entirely on the description you give. A prompt like "write a risk assessment for a café" produces generic filler. A better approach, which works well in practice:
- Describe the place. "Ground floor café in Leeds, 40 covers, one commercial kitchen with gas range and deep-fat fryer, cellar with steep stairs, rear yard for bins."
- Describe the people. "Six staff, two under 18 on weekends, one part-timer who is pregnant, delivery drivers twice a week, customers including families with buggies."
- Describe the tasks. Opening, cooking, cleaning with chemical products, changing gas cylinders or kegs, cash handling, late closing alone.
- Give the structure. Paste the HSE column headings and ask for a table in that order.
- Ask it to interview you first. "Before drafting, ask me up to 15 questions about anything you would need to know to make this accurate." This one instruction stops Claude guessing.
Using a Claude Project helps if you run more than one site or redo assessments often. Store the HSE headings, your house style and your previous assessments as project knowledge, and every new draft starts from your own standard rather than from scratch. If you already document processes this way, the same habit is covered in our guide to using AI for business process documentation.
What should I check before trusting Claude's draft?
AI drafts fail in predictable ways. Watch for these:
- Invented controls. Claude may write "staff receive annual manual handling training" because it is typical. If you do not do it, either start doing it or delete the line.
- Generic wording. "Keep walkways clear" is not a control. "Cellar stairs: handrail both sides, light on a sensor, no carrying kegs, use the drop hatch" is.
- Missing people. Young workers, new and expectant mothers, lone workers, contractors and the public often need specific mention.
- Wrong jurisdiction. Ask Claude to use HSE guidance and UK terminology. Drafts can drift towards American references such as OSHA.
- Missing owners and dates. Every further action needs a named person and a deadline, or it will not happen.
HSE's own example assessments carry a warning not to just copy an example and put your company name on it. The same applies, even more strongly, to an AI draft. Print it, walk the site with a pen, and talk to the people who do the work. They will spot the things nobody told Claude about.
Which risk assessments can Claude help with?
For COSHH in particular, do not let Claude invent hazard information. Paste the actual safety data sheet text for each product and ask it to summarise hazards, PPE and first aid measures only from that text. Fire safety is a separate legal duty, enforced by your local fire and rescue service rather than HSE, so treat it as its own document.
How do I keep staff data safe when using Claude?
A general risk assessment rarely needs personal data. "One part-time worker who is pregnant" is enough for the general document; the individual assessment for that worker can be written in your own system. Check your Claude plan's data and training settings before you start, and treat the tool as one more system covered by UK GDPR. For a wider checklist, read our guide to AI data protection for UK businesses.
How long does an AI-assisted risk assessment take?
Time savings vary too much between businesses to put an honest number on them. What changes reliably is where the time goes. Without AI, most of an owner's effort goes on structure and wording. With Claude, it shifts to checking and acting. Reviews get quicker too: paste last year's version, list what changed, such as a new coffee machine, an extra staff member or a refit, and ask Claude to update only the affected rows and mark them. If admin time is the wider problem, our breakdown of how AI cuts admin hours in small businesses covers other tasks that work the same way.
What are the limits of using Claude for health and safety?
Be honest about three trade-offs. First, a polished document can create false confidence; a neat table full of controls nobody follows will not help you after an accident. Second, Claude's knowledge of specific regulations can lag or blur, so check anything legal against HSE's own pages. Third, for higher risk sectors the competent person duty means you need someone with real expertise, and AI does not count as that person.
Used well, though, Claude makes good practice easier to keep up. Assessments get written, reviewed after changes, and explained to staff in plain English, including short toolbox talk summaries or translated briefing notes for staff whose first language is not English. Have a fluent speaker check any translation before it goes on the wall.
What is a sensible first step this week?
Start small. One task, one area, one honest draft. Once the first assessment is done properly, the rest of the building follows the same pattern, and the annual review becomes an edit rather than a rewrite. More practical guides on putting Claude to work in a UK business live on our Claude hub.
Claude AI Risk Assessments UK — FAQ
Can I legally use an AI-written risk assessment in the UK?
Yes. No law says who or what has to type the words. The law cares about whether the assessment is suitable and sufficient for your actual workplace, and whether the controls are really in place. The Health and Safety Executive's guidance sets out the duty to identify hazards, decide how likely and serious the harm is, and act to remove or control the risk. Claude can draft that record quickly. You are still the duty holder, so you must walk the site, correct anything that does not match reality, and sign off the final version yourself. A draft nobody has checked against the real premises is a liability, not a defence.
Do I need a written risk assessment if I only have a few staff?
HSE guidance states that if you employ 5 or more people you must record the significant findings of your risk assessment, covering the hazards, who could be harmed and how, and the controls in place. Below that headcount there is no recording duty, but you still have to carry out the assessment itself. Most small firms write it down anyway, because a short written record makes it easier to brief new starters, show an insurer or landlord what you do, and spot what has changed at the next review. Claude turns that written record into a much quicker job than starting from a blank form.
Is it safe to paste details of my business into Claude?
Keep it to what the assessment needs. Describe tasks, equipment, the layout and roles, not named employees' medical details or other personal data. If you must record something sensitive, such as a pregnant worker's individual assessment, write that section yourself and store it outside the chat. Check your plan's data and training settings before you start, and treat the conversation like any other business system that falls under UK GDPR. A short internal rule on what staff may and may not paste into AI tools saves a lot of awkward questions later.
How often should I update a risk assessment Claude helped write?
HSE guidance says you must review the controls you have put in place to make sure they are working, and update your record with any changes you make. In practice, review after any accident or near miss, when you bring in new equipment, chemicals or tasks, when you take on a new or vulnerable worker, and at least once a year as a habit. Because the first draft lives in a chat or document, updating it is quick. Paste in the old version, describe what changed, and ask Claude to flag every row the change affects.
Can Claude replace a health and safety consultant?
Not for higher risk work. For a low risk office, shop or café, a careful owner using Claude plus the HSE example assessments can produce a sound record. For construction, work at height, hazardous substances, asbestos, machinery guarding or anything involving young or vulnerable people, bring in a competent adviser. Claude does not see your premises, does not know what it has not been told, and can sound confident when it is wrong. Use it to prepare, so a consultant's time goes on judgement rather than typing.
