The Platform

One chain of custody across three modules

One chain of custody across three modules

One chain of custody across three modules

Risk Register, Permit to Work and Isolation Management were built as one system from the first day. This page shows exactly how the chain holds, and what happens when a link is missing.

Risk Register, Permit to Work and Isolation Management were built as one system from the first day. This page shows exactly how the chain holds, and what happens when a link is missing.

Risk Register, Permit to Work and Isolation Management were built as one system from the first day. This page shows exactly how the chain holds, and what happens when a link is missing.

THE INTERLOCK

A permit that is ready to open, and still will not.

A permit that is ready to open, and still will not.

A permit that is ready to open, and still will not.

This is the one thing a standalone permit app cannot do, and the reason an enterprise suite makes you buy thirty-seven other modules to get it. Watch the permit reach ready, and wait.

This is the one thing a standalone permit app cannot do, and the reason an enterprise suite makes you buy thirty-seven other modules to get it. Watch the permit reach ready, and wait.

This is the one thing a standalone permit app cannot do, and the reason an enterprise suite makes you buy thirty-seven other modules to get it. Watch the permit reach ready, and wait.

Risk Register
PUMP STATION A
Flammable atmosphere
High-voltage exposure
Confined space entry
HAZARDSWAITING
Permit to Work
#PTW-2847 · HOT WORK
Hazards inherited
Controls attached
Three signatures
STATUSDRAFT
Isolation · LOTO
4 ENERGY SOURCES
Electrical · MCC-3
Hydraulic · V-204
Pneumatic · A-07
Chemical · T-09
STATEENERGIZED
Permit blocked. Isolation not verified.
Every energy source must be locked and signed before this permit can activate.

The permit is complete, authorised and correct. It still cannot open.

MODULE 01 · RISK REGISTER

The register is the source. Everything downstream reads from it.

The register is the source. Everything downstream reads from it.

The register is the source. Everything downstream reads from it.

Stop treating risk assessments as documents that get filed. One living register of every hazard on site, with its controls and PPE attached, feeding every permit that gets raised.

Stop treating risk assessments as documents that get filed. One living register of every hazard on site, with its controls and PPE attached, feeding every permit that gets raised.

Stop treating risk assessments as documents that get filed. One living register of every hazard on site, with its controls and PPE attached, feeding every permit that gets raised.

Update it once, and it changes everywhere it is used.

Update it once, and it changes everywhere it is used.

Update it once, and it changes everywhere it is used.

When a worker raises a Permit to Work, the system pulls the relevant hazards from the register automatically and highlights the isolation procedures that job requires. Nobody retypes anything, and nobody works from a copy that went stale in March.

REVIEW HISTORY
HZ-114 · FLAMMABLE ATMOSPHERE
UNALTERABLE LEDGER
v4Exposure limit revised12 Aug
v3PPE requirement added02 Jun
v2Annual review signed14 Mar
v1Hazard created09 Jan
The ledger can’t be edited or deleted, including by us.

Centralised intelligence

One hazard, one record

Every hazard on site lives in one place, owned by one person, with a review date the system will chase rather than you.

Pre-defined controls

Standardised mitigation

Pre-define the exact controls, PPE and operational limits a hazard requires, so safety does not depend on who happens to be filling in the form.

Regulatory proof

Audit-ready version history

An unalterable ledger of every update, review and approval. When an inspector asks what changed and when, the answer takes seconds.

MODULE 02 · PERMIT TO WORK

Every authorisation routed, time-stamped and impossible to lose.

Every authorisation routed, time-stamped and impossible to lose.

Every authorisation routed, time-stamped and impossible to lose.

Digitise the authorisation workflow for high-risk work without creating a new bottleneck. Five stages, enforced in order, with the rules that matter built into the form rather than written on a poster.

Digitise the authorisation workflow for high-risk work without creating a new bottleneck. Five stages, enforced in order, with the rules that matter built into the form rather than written on a poster.

Digitise the authorisation workflow for high-risk work without creating a new bottleneck. Five stages, enforced in order, with the rules that matter built into the form rather than written on a poster.

AUTHORISATION
#PTW-2847 · MODULE B, DECK 3
STAGE
01PLANNING
02PREPARATION
03AUTHORISATION
04EXECUTION
05CLOSURE
01RequesterM. Devries · 14:02
02Issuing authorityS. Petrov · 14:15
03ActivatorPending isolation
Segregation of duties: a person cannot issue a permit to themselves. High hazard work requires a second named authoriser.

The rules live in the form, not in someone’s head.

The rules live in the form, not in someone’s head.

The rules live in the form, not in someone’s head.

Mandatory fields, required documentation and risk acknowledgements are enforced before a permit can be activated. A permit that skipped a step never becomes a valid permit.

Streamlined authorisation

Fast, traceable approvals

Route permits to the exact authorised person instantly. From hot work to confined space entry, a time-stamped record of who approved what, and when.

Regulatory enforcement

Built-in compliance guardrails

Mandatory checks enforced before activation. The form will not let a critical field go unanswered, which is the cheapest control you will ever deploy.

Live floor visibility

Concurrent work mapping

See every permit that is active, suspended or closed across the site, so two crews never discover each other halfway through a job.

MODULE 03 · ISOLATION MANAGEMENT (LOTO)

Nobody skips a step, because the system will not let them.

Nobody skips a step, because the system will not let them.

Nobody skips a step, because the system will not let them.

Human error is the highest risk in lockout and tagout. Every energy source mapped, every lock signed for in sequence, and a live registry of which lock is on which valve and who put it there.

Human error is the highest risk in lockout and tagout. Every energy source mapped, every lock signed for in sequence, and a live registry of which lock is on which valve and who put it there.

Human error is the highest risk in lockout and tagout. Every energy source mapped, every lock signed for in sequence, and a live registry of which lock is on which valve and who put it there.

The isolation plan shouldn’t live in one person’s head.

Map every electrical, mechanical and chemical energy source once, then run the same standardised sequence every time. The technician who has done it for fifteen years and the contractor who arrived this morning follow the identical steps.

LOCK REGISTRY
LIVE · PUMP STATION A
4 DEPLOYED
MCC-3 breakerElectrical · 415VJ. Okafor14:31
V-204 valveHydraulic · 180 barJ. Okafor14:34
A-07 supplyPneumatic · 8 barL. Haas14:38
T-09 line feedChemical · IsolatedL. Haas14:41
Zero energy verified. Permit PTW-2847 released for activation at 14:42.

Visual mapping

Digitised isolation plans

Every energy source on a machine mapped and templated, so the sequence is decided in the office rather than improvised at the panel.

Sequential control

Forced-step verification

Technicians sign off each lock applied and removed, in strict order. The next step does not appear until the previous one is signed.

Live inventory

Real-time lock registry

Know exactly which locks and tags are deployed, on which valves or breakers, and by which named operator, at any moment.

WHY ONE SYSTEM

Three tools can each be excellent and still let the same accident through.

Three tools can each be excellent and still let the same accident through.

Three tools can each be excellent and still let the same accident through.

What matters is what you can ask once these are genuinely one system rather than three products with an integration between them.

Two jobs, one asset, one view

Two jobs, one asset, one view

Because every permit is attached to a real asset rather than a free-text location, the system can see that two crews are about to work the same pump on the same afternoon.

Because every permit is attached to a real asset rather than a free-text location, the system can see that two crews are about to work the same pump on the same afternoon.

Catching this anywhere else takes an integration project.

A hazard reported once reaches everyone

A hazard reported once reaches everyone

Add a hazard to a live permit and every other open permit touching that asset gets it too, with the control attached. The register updates itself as a consequence.

Add a hazard to a live permit and every other open permit touching that asset gets it too, with the control attached. The register updates itself as a consequence.

A form becomes an active safety net.

One trail, not three exports

One trail, not three exports

Show me every hot work permit issued last quarter and who authorised each one. One query, with the hazards and isolations attached, rather than three systems and a spreadsheet.

Show me every hot work permit issued last quarter and who authorised each one. One query, with the hazards and isolations attached, rather than three systems and a spreadsheet.

The inspector’s question, answered in seconds.

AGENTIC AI

An agent is only as useful as the links it can follow.

An agent is only as useful as the links it can follow.

An agent is only as useful as the links it can follow.

Every EHS vendor is claiming AI right now. What separates them is what the model has to work with. Most systems store a permit as a document with a text box for the location. Ours stores it as a record joined to a real asset, a real hazard and a real isolation.

What a document-based system holds
Location“pump house, near the big tank”
Equipment“Pump 20 I think, maybe P20”
Hazard“flammable, see RA in shared drive”
Isolation“done, ask Jan”
Four text strings. An agent reading this can guess, and a guess about an isolation is worse than no answer at all.
What a connected system holds
ASSET P-20South wall pump
HZ-114Flammable
PTW-2847Hot work
LOTO-884 sources
SUB-31Butadiene
Real records with real joins. The agent can ask which other permits touch this asset, and get an answer rather than a search result.

Data Harmoniser

Spots the same asset entered three different ways and proposes one clean record.

Tag Interceptor

Recognises field language and offers the official equipment tag before a duplicate exists.

Risk Propagator

Pushes a newly reported hazard to every other team working that same asset today.

Regulation Watch

Flags when an exposure limit in your matrix falls out of step with current EU rules.

The agent never acts alone. Every suggestion goes to a named person for a yes or a no, and that decision is recorded in the audit trail like any other action.

Agentic AI sits alongside the three core modules as an add-on, and is priced separately.

GETTING IT RUNNING

The software installs in minutes. Your data is the real work.

The software installs in minutes. Your data is the real work.

The software installs in minutes. Your data is the real work.

A system that gates work on real assets needs to know what your assets and hazards actually are, and that list is rarely as tidy as anyone hopes. What we can do is stop it being a six-week transcription exercise.

A system that gates work on real assets needs to know what your assets and hazards actually are, and that list is rarely as tidy as anyone hopes. What we can do is stop it being a six-week transcription exercise.

A system that gates work on real assets needs to know what your assets and hazards actually are, and that list is rarely as tidy as anyone hopes. What we can do is stop it being a six-week transcription exercise.

01

Download the templates

Structured spreadsheets for each data set, with the required fields and the accepted values already laid out. No guessing at our format.

02

Fill them from what you have

Most of this already exists somewhere: a maintenance register, an HR export, a COSHH folder. Paste it in rather than retyping it.

03

Bulk upload

Your admin uploads the completed templates in one pass. The system validates as it loads and tells you exactly which rows need attention.

04

Configure and go live

Permit types, signatories, escalation rules and isolation templates set up with you. Then your team raises a real permit with us on the call.

What you will need to bring

Every one of these has a downloadable template. Bulk upload, not data entry.

Equipment tree and asset register

User list, roles and authorities

Substance register

Existing hazards and risk assessments

Permit types currently in use

Energy sources for critical assets

Browser only, so there is nothing to install, no server to provision and no infrastructure request for your IT team. How fast you go live depends mostly on how quickly you can pull that list together, which is why we hand you the templates on day one rather than at the end of a discovery phase.

The fastest way to judge this is to watch it run.

The fastest way to judge this is to watch it run.

The fastest way to judge this is to watch it run.

Twenty-five minutes, the real product, loaded with realistic site data. One job walked end to end through all three modules.

Twenty-five minutes, the real product, loaded with realistic site data. One job walked end to end through all three modules.

Twenty-five minutes, the real product, loaded with realistic site data. One job walked end to end through all three modules.

Early adopter pricing is open to the first five sites.