An asset register is the central record of everything your organisation owns, from laptops and monitors to software licences and cloud subscriptions. It tells you what you have, where it is, who is using it, what it cost, and when it needs replacing or renewing. For UK organisations of any size, a reliable asset register is the foundation of financial control, IT security, and compliance.
This guide covers what an asset register is, why every organisation needs one, what to include, how to maintain it, the most common mistakes, UK legal requirements, and how ISO 27001 and ISO 55001 fit in. It also compares purpose-built software against spreadsheets, so you can decide which approach is right for your team. If you already know what you need, you can view AssetGraph pricing or start a 7-day free trial with no card required.
What Is an Asset Register?
An asset register is a structured list of every asset an organisation owns or is responsible for. Each entry, or record, describes a single asset with fields such as asset name, serial number, purchase date, cost, location, assigned user, and current status. The register is the single source of truth that finance teams, IT teams, and auditors all refer to.
Asset registers fall into two broad categories. A fixed asset register tracks physical items above a capitalisation threshold, such as servers, machinery, and vehicles, and is used for accounting and depreciation. An IT asset register is broader and includes laptops, monitors, phones, software licences, cloud subscriptions, and peripherals, regardless of their accounting treatment. For most UK organisations, the IT asset register is where day-to-day operational visibility matters most, because it is where costs accumulate and security risks live.
For a deeper look at what qualifies, read our guide on what counts as an IT asset.
Why You Need an Asset Register
Without an asset register, an organisation is guessing. The most common consequences of not having one are preventable, but they are also expensive:
- Lost equipment – laptops, monitors, and phones go missing between teams or during handovers, and nobody notices until an audit forces a count.
- Wasted software spend – SaaS seats keep increasing even when users have not logged in for months. You continue paying for licences nobody uses.
- Audit failure – when an auditor asks for a timestamped record of who had which device and when, a spreadsheet with no history is not sufficient.
- Renewal surprises – without visibility of renewal dates, you find out about a £4,000 annual contract renewal when the invoice arrives, not 30 days beforehand.
- Security blind spots – you cannot secure a device you do not know exists. Lost or untracked devices are a real risk to data and compliance.
If any of these sound familiar, our article on why you should track your IT assets covers the operational case in more detail.
What to Include in an Asset Register
A useful asset register needs enough detail to answer the questions that matter: what do we own, where is it, who has it, what did it cost, and when does it need attention. At minimum, each record should include:
- Asset ID – a unique reference such as AST-LT-001
- Asset name and model – e.g. Dell Latitude 5440
- Category – laptop, monitor, phone, server, software licence
- Serial number – manufacturer serial or service tag
- Purchase date and cost – in GBP, with supplier
- Assigned user or department – who is responsible for it
- Location – office, building, or remote
- Status – active, in storage, disposed, lost
- Lifecycle state – new, in use, approaching end-of-life, retired
- Warranty and renewal dates – for maintenance planning
- Licence details – seat count, cost per seat, renewal date (for software)
- Last seen or last audited – when the record was last verified
For organisations tracking software alongside hardware, the register should also capture SaaS subscription data: how many seats you have, what they cost, and when they renew. This is where most spreadsheet-based registers fall short, because the information lives in inboxes and admin consoles rather than in the spreadsheet itself. To understand the full lifecycle of an asset from procurement to disposal, see our guide on understanding asset lifecycle and operational states.
How to Maintain an Asset Register
The hardest part of asset management is not creating the register, it is keeping it current. A register that was accurate on day one becomes unreliable within a week if nobody updates it. The following practices keep your data trustworthy:
Automate data collection
Manual updates rely on someone remembering to log a change. Automated data collection removes that dependency. AssetGraph, for example, reads purchase emails, pulls device data from Microsoft 365 and Google Workspace, and builds the register without manual entry. This is known as passive asset discovery, and it means the register updates in real time as new devices are enrolled and new invoices arrive. Read more in our guide to passive asset discovery.
Keep a timestamped audit trail
Every change to the register should be logged with a timestamp, the user who made the change, and the previous value. This is what auditors look for and what gives the register credibility. Without an audit trail, you have no way to investigate when a device went missing or who reassigned it.
Run regular reconciliation checks
Reconciliation means comparing data from different sources to find conflicts. If your MDM says a laptop is assigned to User A but your purchase records show it was bought for User B, that is a conflict worth resolving. Regular reconciliation catches errors before they become audit findings.
Review renewals monthly
Software renewals are the most common source of unexpected costs. Review your renewal calendar monthly and cancel licences that are no longer needed before the renewal date. Our article on SaaS licence optimisation walks through how to find and eliminate waste.
Common Asset Register Mistakes
Most asset register failures follow the same patterns. Recognising them early saves time and money:
- Relying on a single spreadsheet – spreadsheets go stale, break formulas, and lack audit trails. They work for small estates but break down past 100 assets. See our guide on building an asset register in Excel for the limitations.
- No assigned ownership – if nobody is responsible for the register, nobody updates it. Designate an owner, even if the data collection is automated.
- Ignoring software and subscriptions – hardware is visible, but SaaS spend is where the money leaks. A register that only tracks laptops misses thousands of pounds in annual licence waste.
- Recording data once and never verifying – a register is only useful if it reflects reality. Without regular reconciliation or automated updates, the data drifts.
- No disposal records – when a device is retired, the register should record how and when it was disposed of, including data wiping. This matters for both security and accounting.
Legal Requirements for Asset Registers in the UK
UK organisations have several legal and regulatory obligations that an asset register helps satisfy:
Companies Act 2006 and accounting records
Under the Companies Act 2006, limited companies must keep accounting records that show the company’s assets and liabilities. A fixed asset register is the standard way to demonstrate this. Assets above the capitalisation threshold must be recorded with purchase cost, depreciation, and current book value.
UK GDPR and data security
Under UK GDPR, organisations must be able to identify what personal data they hold and where. An IT asset register supports this by showing which devices hold or access personal data. If a laptop is lost, the register helps you determine what data was at risk and whether the incident is reportable to the ICO. For the practical steps, read what to do when a laptop is lost or stolen.
Public sector and charity requirements
Public sector bodies, including local authorities and academy trusts, have specific asset reporting requirements set by their regulators. Charities with income over £500,000 must follow the Charities SORP, which requires fixed asset accounting. In each case, a maintained register is the evidence base.
ISO 27001 and ISO 55001 Alignment
ISO 27001 information security management
ISO 27001 Annex A 5.9 requires organisations to maintain an inventory of information assets. The standard expects you to know what assets you have, who owns them, and where they are. A timestamped audit trail of asset changes is what auditors look for during certification. AssetGraph is designed to support ISO 27001 workflows by maintaining that audit trail automatically, though AssetGraph itself is not certified. Read more in our guide to ISO 27001 and asset management requirements.
ISO 55001 asset management
ISO 55001 is the international standard for asset management systems. It requires organisations to define an asset management policy, identify assets throughout their lifecycle, and maintain records that demonstrate control. A well-maintained asset register is the operational core of an ISO 55001 asset management system, providing the visibility and traceability the standard demands.
Asset Register Software vs Spreadsheets
Most organisations start with a spreadsheet. It is free, familiar, and works for a handful of assets. But spreadsheets have inherent limitations that become serious as your estate grows:
- Manual updates – someone has to remember to log every change, and they rarely do.
- No audit trail – spreadsheets do not record who changed what and when.
- No alerts – you get no warning when a warranty expires or a renewal is due.
- No visibility of SaaS spend – subscription data lives in inboxes, not in the sheet.
- Version conflicts – multiple people editing produces duplicates and broken formulas.
Purpose-built asset register software solves these problems by automating data collection, maintaining an audit trail, and providing alerts. AssetGraph takes a specific approach: it connects to your email and IT systems with read-only access, reads invoices and purchase emails, pulls device data from Microsoft 365 and Google Workspace, and builds the register without manual data entry. The inventory can populate within the first hour of connecting your systems. For the full comparison, read from spreadsheets to automated asset tracking.
How AssetGraph Helps
AssetGraph is built for UK organisations that have outgrown spreadsheets. It replaces manual updates with passive, automated data collection from the systems you already use:
- Email invoice scanning – reads purchase emails, invoices, and renewal notices from your inbox and extracts product, cost, renewal date, and device details.
- Passive device tracking – pulls device data from Microsoft 365, Google Workspace, Intune, Entra ID, Jamf, and Kandji without anyone updating a spreadsheet.
- SaaS licence monitoring – tracks how many seats you have, what they cost, when they renew, and which are unused.
- Risk alerts – notifies you when a device is lost or at risk.
- Timestamped audit trail – logs every asset change for ISO 27001, SOC 2, and ITIL workflows.
AssetGraph uses read-only access. It can see device data and invoices, but it never sends or changes anything. Credentials are stored server-side and never exposed to the browser. Data is hosted in the EU.
Pricing
AssetGraph has three plans, all paid by direct debit and cancellable at any time. Prices exclude VAT:
- Starter – £29/month for teams up to 100 assets. Includes 3 data source connectors, real-time dashboard and alerts, basic compliance reporting, and a 30-day audit trail.
- Professional – £99/month for teams up to 500 assets. Includes 8 data source connectors, advanced risk scoring, compliance policy engine, licence utilisation monitoring, reconciliation conflict detection, and an unlimited audit trail.
- Enterprise – £299/month for unlimited assets. Includes unlimited connectors, custom integrations and API access, custom compliance frameworks, a dedicated account manager, and SSO.
Annual billing saves 50%, so the Starter plan starts from £14.50/month when billed annually. A 7-day free trial is available with no card required. View the full pricing options or start your free trial.
Further Reading
- How to do a simple IT audit
- Preparing for a software licence audit
- Cutting software costs without losing tools
- Using Microsoft Graph for IT asset tracking
Start Your Asset Register Today
A reliable asset register is the difference between guessing and knowing. AssetGraph builds yours automatically by connecting to your email and IT systems, so your inventory populates within the hour and stays current without manual updates. Start your 7-day free trial, no card needed, or review the plans to find the right fit for your organisation.