Listed on GOV.UK as a software provider for Report receipt of waste · Digital Waste Tracking becomes mandatory for permitted waste sites on 1 October 2026
Record every load you receive. And every load you carry.
If your site holds an environmental permit, from October 2026 you must record every load of waste you receive. DutyOS has passed all 14 of DEFRA’s production approval tests and is on the GOV.UK list of software providers. It captures each load at the gate or at the weighbridge, checks it against DEFRA’s own rules before it goes anywhere, and counts down the two working days you have to send it — alongside the waste transfer notes, carrier checks and duty-of-care records you already keep.
- 842 codes, matched to DEFRA’s catalogue
- 14 of 14 production approval tests, no exemptions
- 121 providers on the GOV.UK list, and we are one of them
About DutyOS
DutyOS is a compliance platform for the two ends of a waste movement: the permitted sites that receive waste, and the licensed carriers, brokers and dealers that move it. The Environment Agency already requires a permitted site to weigh each load on arrival — or measure it reliably by density and volume — and to “record the weight in your electronic or equivalent systems”. Most sites still do that on paper, in a weighbridge ticket book, or in a spreadsheet nobody can produce quickly when an officer asks.
DEFRA’s Digital Waste Tracking service makes that record a legal submission. It becomes mandatory for permitted receiving sites on 1 October 2026 — made law in England and Wales. For carriers, brokers and dealers DEFRA has stated an intention of October 2027, but no legislation has been made for it yet. DutyOS is built around it rather than bolted onto it: the acceptance check at the tipping face, the weight at the bridge, the EWC coding, the hazardous and POPs detail and the carrier’s registration are captured once, as part of the working day, and are ready to submit rather than needing to be re-keyed into a portal afterwards.
For carriers the same records serve the duty-of-care obligation you have today — waste transfer notes, Parts A–E consignment notes, waste coding, exemptions and permit renewals — so nothing has to be rebuilt when the carrier phase does arrive.
DutyOS is a record-keeping tool, not legal advice. Your duty of care under the Environmental Protection Act 1990 and the Hazardous Waste Regulations remains yours — DutyOS is independent and not affiliated with DEFRA or the UK Government.
What we provide
One platform covering compliance, site and fleet operations and customer-facing work for permitted receiving sites and waste carriers — not just note-filing.
Waste receipts — recording every load in
Record each load as it arrives, with the EWC codes, weights, containers, hazardous properties and POPs that Digital Waste Tracking requires. Every record is checked against DEFRA’s published rules before it can be sent, and the two-working-day deadline is tracked for you.
Mandatory from 1 October 2026
Digital Waste Tracking export
Export your records in the format DEFRA's Digital Waste Tracking service expects — built ahead of the mandate, not bolted on after.
Mandatory from 1 October 2026
Transfer & consignment notes
Digital duty-of-care waste transfer notes and full Parts A–E hazardous consignment notes, filed from the office or the cab of a truck — no paper duplicate books.
Exemptions register
Track waste exemptions (U, T, S and D codes) and their renewal dates in one place instead of a spreadsheet nobody remembers to check.
EWC, recovery/disposal & hazard coding
Built-in lookup across all 842 codes in DEFRA’s European Waste Catalogue, R/D recovery-disposal codes and HP hazard classifications, with hazardous loads flagged automatically.
Carrier & permit verification
Registration numbers and environmental permits are checked live against the Environment Agency's public registers, with renewal countdowns before anything lapses.
Supplier duty-of-care checks
Verify the suppliers and sites you deal with, including screening against the Environment Agency's enforcement-action history, before you hand waste over to them.
Fleet & driver app
Sites, vehicles, pre-shift and weekly safety checks, plus a mobile app drivers use to file notes and report issues directly from the field.
Office operations
CRM, sales pipeline, invoicing, scheduling, team messaging and secure document storage — so compliance records sit alongside the rest of how the business runs.
Customer portal
Give the businesses you collect from their own login to see their waste transfer notes and invoices, instead of emailing PDFs back and forth.
Who it’s for
Permitted sites that receive waste — transfer stations, skip yards, materials recovery and bulking facilities, whether you run a weighbridge or work from container volumes. Digital Waste Tracking applies to you from 1 October 2026.
Licensed waste carriers, brokers and dealers — from a single-vehicle operation to a multi-site fleet — keeping duty-of-care records today and ready for the carrier phase DEFRA intends for October 2027.
Why the records can be trusted
Compliance software is easy to write and hard to get right. These are the specific checks behind DutyOS — each one a claim we can show you the evidence for.
Our waste-code catalogue matches DEFRA’s, code for code
All 842 European Waste Catalogue codes reconciled against DEFRA’s live service — codes, hazard classifications, descriptions and entry types — with no differences. A wrong or retired code is one of the easiest ways to have a receipt rejected.
DEFRA’s assurance testing, passed with no exemptions
We ran all 14 of DEFRA’s production approval test scenarios and claimed no exemptions from any of them. DutyOS is listed on GOV.UK’s Report receipt of waste software provider list (8 September 2026).
A nil return is only filed when it is true
Quarterly consignee returns are built from your actual records. Where there is genuinely nothing to report, we say so — but a nil return is never sent in place of data we do hold.
Submissions wait rather than fail
If DEFRA’s service is busy or rate-limits us, the submission retries with exponential back-off and honours the service’s own Retry-After. Your load stays queued until it lands — a DEFRA outage is never reported back to you as your mistake.
A signed record cannot be quietly changed
Once a note is filed with a signature, that signature and its evidence become immutable — enforced in the database, not just in the screen you filed it from. Deliberately strict: even a typo in a signed name cannot be edited away afterwards.
Access rules are proven, not assumed
The row-level security policies protecting every table are read back from the live database and checked against what they are meant to be, rather than taken on trust from the code that created them.
Where your data lives
Your records are stored in the UK, in London. Our API runs in the EU, in Amsterdam. Both sit inside the UK/EEA, so no additional international transfer safeguards are required.
Cyber Essentials, for the whole organisation
DutyOS Ltd holds a Cyber Essentials certificate under the IASME scheme run for the National Cyber Security Centre, assessed by Punk Security on 18 September 2026 and valid for twelve months. The certificate can be checked on the IASME registry. Verify the certificate.
Is your data safe?
Ask any provider on the GOV.UK list for its Cyber Essentials registry link. Here is ours.
The list now carries 121 providers. Being on it says a product is connected to DEFRA’s service. It says nothing about how your records are protected — that is a separate question, with a public register that answers it.
DutyOS Ltd holds a Cyber Essentials certificate under the IASME scheme run for the National Cyber Security Centre, assessed 18 September 2026 and valid for twelve months. Verify on the IASME registry.
Cyber liability cover underwritten by AIG UK through the IASME scheme, with an incident response line. It runs with the certificate.
Records in the UK. The API in Amsterdam. Nothing leaves the UK/EEA, so no international transfer safeguards are needed.
On 18 September 2026 we read the public websites of 20 of them. None displayed a Cyber Essentials certificate or a registry link. Compare the providers.