Skip to main content
    Updated 28 September 2026
    Research-based buying guide

    Permit-to-work software: authorisation, isolation and handover

    Compare a named work-permit application with the actual control-of-work process, then plan the digital rollout around an agreed operating procedure and accountable people. Environmental permit obligations, generic mobile forms and authorization to perform a job are different product scopes.

    Jump to the 21 products

    Editorial responsibility: Dimitris Mitsios (Founder of The QHSE Standard; product marketing at Tekmon) · Tekmon pays for sponsored placements on this site (disclosure) · How pages are made · LinkedIn

    On this page (15 sections)

    Define the decision before choosing the platform

    Permit-to-work mobile access does not establish disconnected authorization. Ask separately about preparation, capture, issue, approval, suspension, status freshness and reconciliation. Do not infer these from a general EHS app offline claim.

    A product description is not a test of your configuration. Keep documented capability, demonstrated result, unresolved question and out-of-scope work separate.

    Rules that define what a permit record must hold

    Where a legal text prescribes permit content, use it as the minimum field list for the demo, then add your own procedure's requirements. The texts below were checked on 24 September 2026; check which apply to your sites.

    • 29 CFR 1910.146 (US permit-required confined spaces): Paragraph (f) lists what the entry permit must identify, including the space, purpose, date and authorized duration, entrants, attendants, the entry supervisor, hazards, isolation and control measures, acceptable entry conditions, initial and periodic test results with the tester and time, rescue services, communication, equipment, and any additional permits such as hot work. The entry supervisor cancels the permit when the work is complete or a condition not allowed by the permit arises, and cancelled permits are retained for at least one year (paragraph (e)).
    • 29 CFR 1910.147 (US control of hazardous energy): Covers servicing and maintenance where unexpected energization or release of stored energy could cause injury. Energy control procedures are inspected at least annually by an authorized employee other than those using the procedure (paragraph (c)(6)). The standard excludes, among others, construction, electric-utility generation, transmission and distribution installations, electrical hazards covered by Subpart S, and oil and gas well drilling and servicing, so confirm which isolation rule applies before configuring the isolation record.
    • Directive 1999/92/EC (EU explosive atmospheres at work): Where the explosion protection document (Article 8) requires it, work in hazardous places follows written instructions and a system of permits to work is applied for hazardous activities and for activities that may interact with other work to cause hazards; permits are issued by a person with responsibility for this function (Annex II, Part A, point 1.2).
    • HSE HSG250 (Great Britain permit-to-work guidance): Guidance, not law, for the petroleum, chemical and allied industries (2005) that places the permit within planning, competence, risk assessment and review.

    A platform that stores these fields does not make a permit compliant. Ask the vendor to show a permit that cannot be issued while a required field, test result or cross-referenced permit is missing.

    Work-permit products and what each proposal must establish

    A named work-permit application, an environmental permit tracker and a generic mobile form are different scopes. For each product, confirm the exact permit, isolation and coordination applications in the proposal rather than inferring them from a wider EHS platform.

    Tekmon pays for a sponsored placement (above); its place in this list follows the same rule as every entry. How lists are ordered

    Same rule for every product: tagged “Permit to Work”, “Permits to Work (PTW)” or “Control of Work”, with a sourced permit-to-work or isolation capability in its record, or one the vendor stated to us, labelled as vendor-stated. 21 qualify; the first 8 are shown here. The directory below continues with the other 13 tagged profiles, 13 of which also meet the rule.

    Documented permit scope, offline limits and pricing
    ProductPublished priceFree trialOffline workflow
    SafetymintYesFree trial documentedPartial
    SitemateYesFree trial documentedNot classified
    IAMTech iPermitYesNot establishedPartial
    GOARCNoNot establishedNot classified
    Pisys Permit to WorkNoTrial or demo on requestPartial

    Status labels from each profile's sourced record; open the profile for the evidence and dates.

    The table shows the first 5 products of the list, in the same order; every profile carries the same fields.

    A different exception test for each qualifying product

    These proposed tasks follow the same complete product list and order as the rule above. They test the boundary suggested by each documented scope; they are not observed results or assurances that a control will pass.

    • Safetymint

      Permit module linked to task risk and isolation records.

      Demo task: Suspend a permit while a second user is disconnected; reconnect and show which status governs further approval and work.

      Scope source
    • Sitemate

      Hot works permit system

      Demo task: Demonstrate the documented hot works permit system with a rejected approval and a changed work condition.

      Scope source
    • IAMTech iPermit

      Industrial permits sharing isolation certificates.

      Demo task: Link two permits to one isolation, hand back only one job and demonstrate the remaining restriction on restoration. Resolve version-specific offline claims separately.

      Scope source
    • GOARC

      Permit and LOTO applications within control of work.

      Demo task: Change an isolation after permit approval and show the required authorization sequence and the status visible to the next shift.

      Scope source
    • Pisys Permit to Work

      Permit board with linked isolation records and plot plans.

      Demo task: Use the plot plan to identify overlapping jobs, hand back one permit without clearing their shared isolation, then make the Maximo or API handoff unavailable and show which status remains authoritative.

      Scope source
    • Prometheus Group

      ePAS electronic permitting alongside separately scoped maintenance and barrier tools.

      Demo task: Change the source work order after ePAS approval; show how the mismatch reaches the permit issuer and who decides whether reauthorization is required.

      Scope source
    • Rapid Global

      Hot work permit issuing

      Demo task: Demonstrate the documented hot work permit issuing with a rejected approval and a changed work condition.

      Scope source
    • Sphera Control of Work

      Dedicated Control of Work with staged isolation plans.

      Demo task: Move between two work stages with different isolation points; demonstrate the approvals and dependent permits required before each point is restored.

      Scope source
    • Intelex

      A named hazardous-work application, distinct from regulatory permit tracking.

      Demo task: Submit a hot-work request with incomplete supporting evidence, reject it and demonstrate the permissions required to resubmit and authorize it.

      Scope source
    • Tekmon

      Configured work requests with job and location-based routing.

      Demo task: Change the job location after routing, remove a required risk assessment and show who must reassess and approve the revised request.

      Scope source
    • Cority

      CorityOne work permits cover configurable approvals and conflict monitoring.

      Demo task: Create overlapping work at one location, change one approval route and show how the coordinator resolves the conflict before authorization.

      Scope source
    • Enablon

      Control of Work with separately named permit, isolation and operational-risk applications.

      Demo task: Carry a changed risk assessment into a live permit and show which application controls suspension, reapproval and the isolation handoff.

      Scope source
    • Evotix

      Enterprise lists permits and isolation; Professional entitlement cannot be inferred.

      Demo task: Use the quoted Enterprise modules to suspend a permit, preserve its linked isolation and transfer responsibility to the incoming shift.

      Scope source
    • VelocityEHS

      Electronic permits connected to contractor qualification checks.

      Demo task: Let a contractor qualification expire after the request is approved; demonstrate the warning or gate and the person authorized to resolve it.

      Scope source
    • BizzMine

      Hazardous substances, work permits, management of change and lockout tagout

      Demo task: Demonstrate the documented hazardous substances, work permits, management of change and lockout tagout with a rejected approval and a changed work condition.

      Scope source
    • CORE-EHS

      CORE e-PTW is a named product within a wider EHS portfolio.

      Demo task: Attempt to authorize a job with an incomplete isolation check, then close it with missing hand-back evidence and inspect both outcomes.

      Scope source
    • EcoOnline

      Permit to work and contractor control

      Demo task: Demonstrate the documented permit to work and contractor control with a rejected approval and a changed work condition.

      Scope source
    • Qavach.AI

      Permit review and closeout belong to the optional safety-module scope.

      Demo task: Use the quoted safety module to delegate an unavailable approver, refuse an unauthorized approval and retrieve the final closeout history.

      Scope source
    • Salus

      Forms, JHAs, permits, inspections and corrective actions

      Demo task: Demonstrate the documented forms, jhas, permits, inspections and corrective actions with a rejected approval and a changed work condition.

      Scope source
    • SMS360

      Work permits

      Demo task: Demonstrate the documented work permits with a rejected approval and a changed work condition.

      Scope source
    • TenForce

      Permit to work with isolation and simultaneous operations

      Demo task: Demonstrate the documented permit to work with isolation and simultaneous operations with a rejected approval and a changed work condition.

      Scope source

    Tasks revised 28 September 2026 from the existing profile evidence. Pisys's current API and Maximo material was rechecked on that date; the other sources retain their profile research dates. General mobile access does not establish disconnected authorization.

    A permit from request to close

    The figure walks one permit through request, risk review, isolation, issue, work, suspension, handback and close, with the loop that sends a suspended permit back for review.

    Permit-to-work flowEight steps across three roles from the permit request to its close, with a suspension step and two paths that bypass or return from it.RequesterIssuing authorityIsolating personNo suspensionRe-review, then reissueStep 1Request the permitJob, location, timewindow, hazards andpeople.Step 2Review the riskRisk assessment, otherpermits andconflicting workchecked.Step 3Isolate the workareaIsolation points, whoisolated and theproving result.Step 4Issue the permitIssuer, conditions,validity period andacceptance.Step 5Do the workBriefing, testresults, changes andshift handovers.Step 6Suspend ifconditions changeReason, time and whosuspended; re-checkbefore reinstating.Step 7Hand the area backWork complete orstopped, area leftsafe, handback time.Step 8Close the permitClosure check; theclosed permit and itshistory retained.
    Role names and who proves an isolation differ between sites. The suspension step applies only when conditions change; dashed arrows show the bypass and the return path.
    Text version of this diagram
    1. Step 1. Request the permit. Owner: Requester. Job, location, time window, hazards and people. Then step 2.
    2. Step 2. Review the risk. Owner: Issuing authority. Risk assessment, other permits and conflicting work checked. Then step 3.
    3. Step 3. Isolate the work area. Owner: Isolating person. Isolation points, who isolated and the proving result. Then step 4.
    4. Step 4. Issue the permit. Owner: Issuing authority. Issuer, conditions, validity period and acceptance. Then step 5.
    5. Step 5. Do the work. Owner: Requester. Briefing, test results, changes and shift handovers. Then step 6.
    6. Step 6. Suspend if conditions change. Owner: Issuing authority. Reason, time and who suspended; re-check before reinstating. Then step 7.
    7. Step 7. Hand the area back. Owner: Requester. Work complete or stopped, area left safe, handback time. Then step 8.
    8. Step 8. Close the permit. Owner: Issuing authority. Closure check; the closed permit and its history retained. End of the sequence.

    Feedback loops

    • From step 6 (Suspend if conditions change) back to step 2 (Review the risk): Re-review, then reissue.
    • From step 5 (Do the work) back to step 7 (Hand the area back): No suspension.

    Run this proposed demonstration

    1. Request a permit for a defined job, location and time window.
    2. Demonstrate roles, supporting records and a rejected approval.
    3. Introduce competing work and show how a coordinator receives the conflict.
    4. Suspend or change the work and trace the authorization history.
    5. Verify closure, exports and the current status seen by each role.

    Record the proposed production plan, application, version, role, evidence and unresolved limitation. These exercises are evaluation suggestions, not tests performed by this site.

    The scorecard compares up to three vendors, so these six products are split into alphabetical groups. Keep the same requirements in each scorecard.

    Plan the digital rollout and its acceptance evidence

    Configure the workflow around the agreed operating procedure, then test exceptions and handovers before replacing existing paper or spreadsheet arrangements.

    1. Map requester, issuer, performing authority and coordinator responsibilities for your process.
    2. Agree status transitions, permissions, required evidence and a fallback.
    3. Configure a representative scenario and test denied access and incomplete evidence.
    4. Test changed conditions, shift handover and an unavailable approver.
    5. Approve rollout only after the responsible team accepts the evidence and support arrangements.

    These are rollout checks for your own configuration, not tests performed by this site.

    Prove the handoff and failure behaviour

    Name the source record, receiving system, identifier mapping, data direction, licensed connector or API and support owner. Show what happens when delivery fails or a source status changes. A connector name does not establish a completed interface.

    Pisys's Maximo article is a reference architecture that still requires configured state definitions, mappings, retries and ownership. It is not evidence of a universal connector included in every subscription.

    Quote the complete workflow

    Request modules, user roles, sites, implementation, migration, integrations, devices and support as named items. Preserve currency, contract term and renewal conditions. A directory fee or an entry subscription is not the total cost of the process.

    Evaluate value with a measured baseline

    Measure time spent requesting missing information, reconciling records and retrieving evidence. Compare those observations with complete costs and ongoing administration. Do not assume fewer incidents, legal compliance or guaranteed payback from a software purchase.

    Expand only after acceptance

    Start with representative records and roles. Resolve critical gaps, test fallback arrangements and name the operational owner before wider rollout. No universal implementation duration is established.

    Compare specialist scope with enterprise scope

    When a work-permit process is the main purchasing need, evaluate specialist permit products alongside the permit applications of broader EHS suites. Compare the same roles, sites, isolations, status transitions and integration requirements. Specialist positioning alone does not establish a lower price or a shorter implementation.

    Sources and evaluation limits

    Guide revised 28 September 2026. Each listed product line carries its source, and each linked profile lists its vendor sources with their check dates. The editorial methodology separates vendor documentation from observed results. No performance score is assigned. AI-assisted explanations may be incomplete; confirm primary documentation and the agreed operating procedure.

    More researched products for this process (13)

    The rest of the list above: every other catalogue profile meeting the same tag-and-capability rule, in the same order, checked against the vendor's own documentation on the date shown. Not a recommendation or a complete market map; confirm the module and workflow with the vendor.

    Software categories to explore

    Use this Process to define the work, then explore these software types. Confirm the exact workflow and module with each vendor.

    See all software categories

    Frequently Asked Questions

    Which permit-to-work products should I compare?
    In our catalogue, the 21 products that meet this guide's rule (a matching tag and a sourced permit-to-work or isolation capability or one the vendor stated to us) are Safetymint, Sitemate, IAMTech iPermit, GOARC, Pisys Permit to Work and 16 more, in documented-match order (see the list on this page). That order reflects documentation, not quality; no product is recommended. Use the linked profiles to check the named application and purchased scope; a permit module should not be assumed to include the vendor's complete EHS suite.
    Does a reviewed record authorize the work?
    No. Apply the actual site process and designated authority. Document review, worker readiness and work authorization are different decisions.
    Can all approvals run offline?
    That is not established. Demonstrate each status transition and current-status delivery under the intended connectivity conditions.
    Does the subscription include integrations?
    Confirm named modules, connector entitlements, configuration and support in the proposal. A published API does not establish a finished integration.
    What should determine acceptance?
    Agreed critical requirements, observed workflow evidence and accountable operating arrangements. A score or completed form cannot replace those decisions.