Gateway 2 Explained: The BSR Application in 2026

Gateway 2 is the point in every higher-risk building project where the Building Safety Regulator decides whether construction can start at all. It is not a formality and it is not planning permission: it is building control approval under the Building Safety Act 2022, and until it is granted, starting work is unlawful. Since the regime took effect it has become the single most discussed bottleneck in UK construction, and in 2026 it is still the stage that decides whether your programme holds.

A higher-risk building is defined precisely: at least 18 metres or seven storeys tall, containing two or more residential units. New buildings that meet the definition apply under regulation 4 of the Higher-Risk Buildings Procedures Regulations 2023. Just as important, and far less understood, is regulation 12: building work on an existing higher-risk building goes through the regulator too. A serious refurbishment inside a residential block of seven storeys or more, structural alterations to a penthouse, works to common parts: these need BSR building control approval, not the local authority route people are used to.

Gateway 1 sits at planning and asks whether fire safety has been thought about early. Gateway 2 sits before construction and is a hard stop: no approval, no start on site. Gateway 3 sits at completion, and residents cannot legally move in until the regulator has issued its completion certificate. The discipline the gateways impose is simple to state and demanding to meet: the building you describe, the building you construct and the building you hand over must be the same building, evidenced end to end. That evidence trail is the golden thread, and it follows the building for its whole life.

It pays to know both the rulebook and the reality. The statutory target for a Gateway 2 decision is 12 weeks. Through 2025, decisions on new-build applications commonly took 25 to 40 weeks, and programmes slipped by a year or more waiting. Since late 2025 the regulator has been reorganising, and the early signs are real: its newer processing routes have brought fresh cases down dramatically, and its published commitment is a decision on non-complex new-build applications within 18 weeks, and on remediation applications within 12, by March 2027. The regulator now publishes its application data quarterly, so the trend is public.

There is also a new cost arriving. From 1 October 2026, the Building Safety Levy applies to building control applications for certain residential buildings in England. The details are set nationally and the practical effect is simple: applications have a price attached, so a rejected application that has to be resubmitted costs money as well as months.

What separates approved applications from rejected ones is rarely a mystery. The regulator's own guidance asks for a direct line of sight between every aspect of the building and the regulation, standard or code it complies with. The applications that struggle share the same gaps:

• A fire strategy that does not match the architectural drawings it sits beside.
• Structural information that stops a storey short of the full load path.
• Compliance statements that assert compliance rather than evidence it.
• Specifications loose enough that the built outcome could differ from the approved one.

And the discipline continues after approval: the change control regime means significant changes to an approved design need the regulator's agreement before they happen, not an apology afterwards. Teams that treat the application as a paperwork exercise bolted onto a finished design tend to discover, expensively, that it is actually a test of whether the design is finished.

The Act also changed who carries the risk. Clients, principal designers and principal contractors now hold explicit competence duties for building regulations compliance: you are required to be capable of the work you take on, and to be able to show it. For anyone commissioning work on a higher-risk building, the practical question to ask every firm at the table is the same one the regulator will effectively ask: can you evidence that the building will comply, before a single trade starts?

The strongest applications tend to come from teams where design and construction sit together. When the people writing the compliance case are the people who will build from it, the drawings, the specification and the statements describe one real building rather than an aspiration. That is how MVV approaches it, working alongside specialist fire engineers and consulting structural engineers, with one accountable team from documentation to completion. If you are planning work on a higher-risk building in London and want the application treated as part of the design rather than an afterthought, talk to us before the programme is set.