Skip to main content
    Updated 27 September 2026
    Process safety buyer guide

    Management of Change (MOC) Software for Process Safety

    Management of change (MOC) is the process-safety control that stops a change to process chemicals, technology, equipment, procedures or facilities from introducing a hazard nobody assessed. This guide is for EHS and process-safety teams choosing software for that workflow: hazard review, temporary changes, procedure and training updates, and the pre-startup safety review. If you mean quality change control for specifications, documents and validated processes, see change control software.

    Jump to the 10 products

    Editorial responsibility: Dimitris Mitsios (Founder of The QHSE Standard; product marketing at Tekmon) · Tekmon pays for sponsored placements on this site (disclosure) · How pages are made · LinkedIn

    On this page (9 sections)

    What the regulations ask an MOC process to cover

    In the United States, OSHA's process safety management standard, 29 CFR 1910.119(l), requires written procedures to manage changes to process chemicals, technology, equipment and procedures, and changes to facilities that affect a covered process. "Replacements in kind" are excluded, and the standard defines one as a replacement that satisfies the design specification, so the software should record who decided a change was like-for-like and against which specification.

    Before any change, 1910.119(l)(2) requires the procedure to address five considerations: the technical basis, the impact on safety and health, modifications to operating procedures, the necessary time period for the change, and authorisation requirements. The time-period consideration is where temporary changes, their expiry and any extension belong. Paragraphs (l)(3) to (l)(5) then require affected operating, maintenance and contract employees to be informed and trained before start-up, and the process safety information and operating procedures to be updated when the change affects them.

    Paragraph 1910.119(i) requires a pre-startup safety review (PSSR) for new facilities and for modified facilities when the modification is significant enough to require a change in the process safety information. For a modified facility the review confirms, before highly hazardous chemicals are introduced, that construction and equipment match the design specifications, that safety, operating, maintenance and emergency procedures are in place and adequate, that the management of change requirements are met, and that operator training is complete.

    Neither paragraph (l) nor Annex III of the Seveso III Directive describes an emergency or expedited MOC route. If your own procedure has one, the software should show how the (l)(2) considerations are still recorded, who authorised the shortened path and when the full review closes.

    In the EU, the Seveso III Directive (2012/18/EU) lists management of change, meaning procedures for planning modifications to, or the design of, new installations, processes or storage facilities, among the issues the safety management system must address (Annex III, point (b)(iv)). Article 11 adds that a modification which could have significant consequences for major-accident hazards triggers a review, and where necessary an update, of the notification, the major-accident prevention policy (MAPP), the safety management system and the safety report, with the competent authority informed before the modification. In Great Britain the COMAH Regulations 2015 carry the same management-of-change item in Schedule 2, paragraph 2(d).

    These are summaries for evaluating software, not legal advice. Whether a process is covered, and what your site's procedure must contain, is for your process-safety specialists to decide.

    MOC evaluation checklist

    RequirementAsk the vendor to demonstrateWhat the record should hold
    Scope and replacement in kind, 1910.119(l)(1)Classify one like-for-like replacement and one real changeWho decided, and the design specification the replacement was checked against
    Technical basis and safety impact, (l)(2)(i)-(ii)Route the change to a hazard review and leave a recommendation openReview method, participants, open recommendations visible at approval
    Time period, (l)(2)(iv)Create a temporary change that reaches its expiry dateExpiry, reversal or re-authorised extension, never a silent rollover
    Authorisation, (l)(2)(v)Try to approve with a role that lacks authorityConfigured approver roles and the refusal
    Procedures and process safety information, (l)(4)-(l)(5)Change a P&ID and an operating procedureLinked document revisions with owners and completion status
    Inform and train before start-up, (l)(3)Include a contract employee whose task changesTraining completion per affected person, checked before start-up
    Pre-startup safety review, 1910.119(i)Attempt start-up with one PSSR item incompleteWhat the configured gate blocks, and any recorded exception
    Emergency route, if your procedure has oneRaise an urgent change outside normal hoursWho authorised the short path and the date the full review closes
    Seveso III Article 11Flag a modification with major-accident consequencesReview of the notification, MAPP, safety management system and safety report, with the authority informed before the change

    Management of change from proposal to close-out

    This diagram shows the usual order of a change request, including the checks that happen before the changed plant or process is started.

    Management of change flowSix steps across three roles from the change proposal to close-out, with two return paths: more information needed, and start-up items left incomplete.Change ownerReviewersApproverMore information neededItems incompleteStep 1Propose the changeDescription, reason,scope and whether itis like-for-like.Step 2Review the impactTechnical basis,safety and healthimpact, who reviewed.Step 3Approve or rejectDecision, authority,conditions and anyexpiry date.Step 4Implement thechangeWork done, documentsupdated, affectedpeople informed ortrained.Step 5Pre-startup checkChecklist items, whochecked and anyrecorded exception.Step 6Close out thechangeOpen items cleared andthe final sign-off.
    Names and the number of review stages differ by organisation. Temporary changes also need an expiry or extension decision; dashed arrows are return paths.
    Text version of this diagram
    1. Step 1. Propose the change. Owner: Change owner. Description, reason, scope and whether it is like-for-like. Then step 2.
    2. Step 2. Review the impact. Owner: Reviewers. Technical basis, safety and health impact, who reviewed. Then step 3.
    3. Step 3. Approve or reject. Owner: Approver. Decision, authority, conditions and any expiry date. Then step 4.
    4. Step 4. Implement the change. Owner: Change owner. Work done, documents updated, affected people informed or trained. Then step 5.
    5. Step 5. Pre-startup check. Owner: Reviewers. Checklist items, who checked and any recorded exception. Then step 6.
    6. Step 6. Close out the change. Owner: Approver. Open items cleared and the final sign-off. End of the sequence.

    Feedback loops

    • From step 2 (Review the impact) back to step 1 (Propose the change): More information needed.
    • From step 5 (Pre-startup check) back to step 4 (Implement the change): Items incomplete.

    Profiles documenting a management-of-change workflow

    Membership comes from a workflow-specific tag and sourced capability. Importing MOC documents into a hazard-study tool does not qualify it as an MOC approval system. The scenarios below are proposed acceptance tests, not observed results.

    Ordered by how closely our sources document this process, not by quality. Sponsored placements are labelled. How lists are ordered

    Same rule for every product: tagged “Management of Change”, with a sourced management-of-change capability in its record, or one the vendor stated to us, labelled as vendor-stated. 10 qualify; the first 8 are shown, then the other 2.

    • Intelex

      The application separates evaluation, design/analysis, implementation and review. Test a location-restricted approver, an overdue temporary change and an incomplete PSSR; the published phase names alone do not establish those controls. Source: intelex.com

    • Cority

      The product page describes risk screening and multi-step approval. In the demo, change the equipment specification after a reviewer signs and inspect which approval must be repeated; separately test temporary-change expiry and a PSSR gate. Source: cority.com

    • ERA-EHS

      Its flow names pre/post-startup tasks and PSSR approval. Leave training incomplete and ask what blocks start-up. For the advertised offline approval, introduce a newer online revision before reconnection and inspect conflict handling. Source: era-environmental.com

    • Evotix

      MOC is listed under Enterprise. Route a request by asset and location, leave an implementation action open and run the post-change review. Have the proposal name the product and module used in that demonstration. Source: evotix.com

    • Safework Suite

      Documented: Management of change. Source: safeworksuite.com

    • Sphera

      The page describes predefined workflows and central reviews. Start with a template, then test a site-specific exception and export its authorisation together with the original request and the post-change check. Source: sphera.com

    • Optial

      The MOC page links risk and environmental impact to approval. Return one change for further assessment, revise its controls and show whether the old sign-off remains distinguishable from the new approval. Source: optial.com

    • SMS360

      Documented: Actions, management of change, claims and document library (conditional). Source: sms360.com

    Also meet the rule, in the same order (2)

    MOC candidates: commercial and offline evidence to check
    ProductPublished priceFree trialOffline workflow
    IntelexYesTrial or demo on requestDocumented
    CorityNoNot establishedDocumented
    ERA-EHSYesTrial or demo on requestPartial
    EvotixNoNot establishedDocumented
    Safework SuiteYesNot establishedNot classified

    Status labels from each profile's sourced record; open the profile for the evidence and dates.

    The table shows the first 5 products of the list, in the same order; every profile carries the same fields.

    A process-safety demo scenario

    Use a temporary equipment substitution with an expiry date that changes an operating procedure and one P&ID, and affects a contract maintenance crew. Leave one hazard-review recommendation open and one PSSR item incomplete, then ask the vendor to attempt start-up. Next, let the temporary change reach its expiry and test both an extension and a reversal. Your specialists set the acceptance rules; the demonstration should prove how the configured workflow applies and records them.

    Pricing: quote the MOC, PSSR and training scope

    Quote the MOC application, approval roles, PSSR and training links, document links and any PHA or permit interfaces separately, and include workflow administration and upgrade review. Do not accept a general mobile feature as evidence that disconnected approval or start-up authorisation is supported.

    Questions to include in your RFP

    How does the workflow record a replacement-in-kind decision and the specification it was checked against?
    Can a temporary change expire automatically into a reversal or re-authorisation task, and who is notified?
    Can reviewers see the current P&ID revision and the one used in their hazard review?
    Which open items, such as hazard-review recommendations, training or PSSR checks, block start-up in the configured workflow, and how are exceptions recorded?
    Can you export the request, reviews, PSSR, extensions and final authorisation as one record for an audit or inspection?

    Related Guides

    Sources and evaluation method

    10 sources, checked 25 Sep 2026

    Regulation texts checked 25 September 2026; six vendor MOC pages rechecked 27 September 2026. Product-level pricing and offline evidence keep their own review dates in each profile. This guide uses primary legal texts and vendor documentation, not hands-on testing or customer testimony. The checklist and demo tests are editorial judgements, not verified product performance.

    We have not assigned numerical scores here. AI-assisted explanations may be incomplete and do not replace primary documentation or a demo. Evaluation methodology.

    Software categories to explore

    Use this Process to define the work, then explore these software types. Confirm the exact workflow and module with each vendor.

    See all software categories

    Frequently Asked Questions

    What is the difference between MOC and change control?
    Management of change is the process-safety control for changes to process chemicals, technology, equipment, procedures and facilities, with hazard review, training before start-up and a pre-startup safety review where the change alters process safety information. Change control is the quality-system process for product, specification, document and validated-process changes. A module's name does not tell you which of the two it was built for; the records each must hold differ.
    Does OSHA require an emergency MOC procedure?
    29 CFR 1910.119(l) does not describe an emergency or expedited route. It requires the listed considerations to be addressed before any change. If your procedure allows an expedited path, check with your specialists how it meets that requirement, then test how the software records the authorisation and the completion of the full review.
    When does a change need a pre-startup safety review?
    Under 1910.119(i), for a modified facility when the modification is significant enough to require a change in the process safety information. The review confirms construction and equipment, procedures, the management of change requirements and operator training before highly hazardous chemicals are introduced.
    Does MOC software make a change safe to commission?
    No. It can support the record and approval process, while competent people remain responsible for evaluation and authorisation. Test your required gates and how exceptions are controlled. A completed checklist is not a safety guarantee.
    Can MOC approvals work offline?
    Offline capture and offline approval are different capabilities, and a vendor describing offline requests or approvals in a mobile app does not settle how prerequisites are checked while disconnected. Ask each vendor to demonstrate the exact device, role, prerequisite checks and synchronisation behaviour.