Hot Work and Energy Isolation Permit Template
Four-page permit for one hot work job that also needs energy isolation: permit and job, other permits and precedence, hazards and precautions, an isolation list with lock and tag numbers and verification, a blinds and spades register, a flammable gas and vapour test record (the form prints no limits: you write the limit and its source), fire watch, extinguishers and the area, issue and acceptance, people on the permit, suspension and re-validation, hand-back, removal of locks and blinds, and cancellation. It is not the general permit to work, and any hot work permit your procedure or the law requires takes precedence. General information, not legal advice.
What's inside
Page 1: the job, other permits, hazards and precautions
- Permit and job: permit number, date and time issued, the general permit or work order and the adjacent work (SIMOPS) review reference, location and equipment, a description of the hot work and its limits, the kind of hot work, validity from and to, the performing authority and the number of people
- Other permits this job needs, and precedence: tick general permit, confined space entry, electrical isolation, breaking containment, work at height, excavation or other, the numbers of the other permits and of the site hot work permit, and the statement that this form is not the general permit and that a required hot work permit takes precedence
- Hazards and precautions: hazards including residual ones and those the work creates, precautions and who took them, the action in an emergency, whether the hot work could be avoided, and protective equipment
Page 2: isolations, blinds and the gas test record
- Isolation list: one row per point with the point and tag, the energy or medium and how it is isolated, lock and tag numbers, who applied it, who verified it and the verification test with its result; stored energy relieved, re-proving after a break, and the group lock box
- Blinds and spades register: line and tag, rating or class from the line specification, the type of blind, installed by, proved tight, vent or drain checked before removal, removed by, and the blind list and drawing updates
- Flammable gas and vapour test record: the limit for this job and its source (written by you, the form prints none), the instrument with its calibration due date and the bump or function test, where samples were taken, the retest interval, then time, location, oxygen, flammable gas (% LEL), hydrogen sulfide, benzene, other gas, within the limit or not, and tester
Page 3: fire watch, sign-off and people
- Fire watch, extinguishers, and area cleared or protected: combustibles, openings, drains and sewers, the far side of metal walls, extinguisher and fire blanket, escape route and communication, the named and trained fire watch, how long the watch stays after the work (your rule), the times and the final inspection of the area
- Issue and acceptance: issuer and receiver statements, with signature lines for the issuing and performing authorities, fire watch, gas tester, isolating person and the further approvals (operations lead, process engineer, HSE representative, maintenance lead, site manager)
- People working under this permit: name, role or trade, signature, time in and time out
Page 4: suspension, hand-back and cancellation
- Suspension, handover and re-validation: when and why, the state left, and the checks before restart (isolations and blinds still in place and proved, area re-inspected, gas tests repeated, handover briefing and re-validation)
- Hand-back, removal of locks and blinds, and cancellation: six steps in order with times, then receiver, issuer and cancellation signatures
This is a permit for one hot work job that also needs energy isolation. It is not the general permit to work. The section titles and tick options are ours, to change.
What requires or shapes this record
No source opened for this page says that hot work and energy isolation must be on one form. HSE's guidance on permit-to-work systems says separate forms may be needed for different tasks such as hot work and confined space entry, and also says that in some systems one permit is designed to cover several types, so a combined form is a design choice for your site. In the US, 29 CFR 1910.119(k) says the employer issues a hot work permit for hot work on or near a covered process, and that the permit documents that the fire prevention and protection requirements of 1910.252(a) have been implemented, shows the dates authorised and identifies the object to be worked on; that process safety standard does not apply to oil or gas well drilling or servicing, or to normally unoccupied remote facilities. Section 1910.252(a) asks the person authorising welding and cutting to inspect the area and designate the precautions, preferably in a written permit, and does not permit cutting or welding where explosive atmospheres are present or may develop in uncleaned tanks or equipment. The US lockout and tagout standard (1910.147) covers servicing and maintenance where unexpected energisation or release of stored energy could injure people, and lists oil and gas well drilling and servicing among the work it does not cover. In Great Britain, HSE names the Dangerous Substances and Explosive Atmospheres Regulations 2002 among the legal documents for hot work on containers, and HSG253 gives guidance on isolating process plant. CCOHS in Canada describes a hot work permit as one step in a hot work management program. The sources disagree on some details, for example how long a fire watch stays after the work (a US rule says at least half an hour, CCOHS says at least 60 minutes and, depending on the work, up to 3 or more hours), so this form leaves that time, the gas limits and the distances for your own procedure to set. Which rules apply depends on your country, your industry and the job. A completed form does not show compliance with any law or standard. This page is general information, not legal advice.
- HSE, HSG250 Guidance on permit-to-work systems (first edition 2005, free web version), paragraphs 17, 19 to 26, 48, 49 and 51, Figure 1 and Appendix 2 paragraphs 1, 2 and 5
HSE guidance for Great Britain, written for the petroleum, chemical and allied industries; following it is not compulsory. Paragraph 17 lists work where heat is used or generated, such as welding, flame cutting and grinding, work that may generate sparks, and work that may involve breaking containment of a flammable substance as jobs where additional permits or certificates should be considered. Paragraph 48 says separate forms may be required for different tasks, such as hot work and confined space entry. Appendix 2 paragraph 1 notes that in some permit-to-work systems one permit is designed to cover all the types described there; paragraph 2 describes hot work as an operation that could apply heat or ignition sources to tanks, vessels and pipelines that contain or have contained flammable vapour, or in areas where flammable atmospheres may be present; paragraph 5 says the certificate for disconnecting equipment is normally used for inserting and removing spades. Suspension (paragraphs 19 and 20): a suspended permit remains live until it is cancelled, so isolations may still be active, and work should not restart until the issuing authority has verified it is safe and revalidated the permit or issued a new one. Paragraph 22: isolations should be clearly detailed on the permit or a cross-referenced isolation certificate. Paragraph 23: handover to another shift. Paragraph 24: hand-back questions (work complete, plant returned to a safe condition by removing isolations, operations acknowledges). Paragraph 25: site visits by the issuing authority at least at the start and completion. Paragraph 26: a second person for particularly high-hazard work, and nobody issues a permit to themselves. Figure 1 lists the essential elements of a permit form, including hazards with residual ones, precautions signed by those who took them, issue, acceptance, shift handover, hand-back and cancellation. Paragraph 51 lists what an electronic permit system must provide before it replaces paper. The web version is the 2005 first edition and is written for industries that use large permit systems, so adapt it to your own scale.
- HSE, HSG253 The safe isolation of plant and equipment (second edition 2006, free web version), paragraphs 75, 161 to 163, 165 to 168, 173, 174 and 184 to 188
HSE guidance for Great Britain for the onshore and offshore oil and gas industry, chemical manufacturing and associated pipelines, with general application where process isolations are made; following it is not compulsory. Paragraph 75: isolation certificates document the status of specified isolations, and certificates and permits should be cross-referenced. Paragraphs 161 to 163: where hot work is carried out on systems that have contained flammable substances, very stringent control is required, which includes demonstrating a non-explosive atmosphere (substantially below the lower explosive limit) internally immediately before the work starts; procedures should specify the control, calibration and checking of test equipment; and a representative sample should be taken, with top, middle and bottom samples for large items of plant. Paragraphs 165 to 168 and 173: prove each isolation point before intrusive work, and record the proving on the isolation certificate; paragraph 174: monitor isolations during the work and re-prove those left unattended or in place longer than one shift. Reinstatement (paragraphs 184 to 188): where several permits depend on common isolation points it is critical to define the sequence of reinstatement; check cross-referenced permits; always check vents or drains before a spade or blank is removed, because hazardous substances can build up behind it; confirm plant integrity before removing isolations; and control removal of blanks and blinds with a blank or blind register.
- 29 CFR 1910.252(a), 1910.119(k), 1910.147(a) to (e) and, for the test order only, 1910.146(c)(5)(ii)(C) and (d)(5)(iii) (US OSHA; text read through the eCFR, current to 16 October 2026)
US general industry rules. Section 1910.252(a) (welding, cutting and brazing, fire prevention): fire watchers are required where other than a minor fire might develop or where listed conditions exist, such as appreciable combustible material closer than 35 feet (10.7 m) to the point of operation; they must have extinguishing equipment readily available, be trained in its use and know how to sound an alarm; the watch is kept for at least half an hour after the work ends; the area is inspected before work by the person who authorises it, who designates the precautions, preferably in a written permit; cutting or welding is not permitted in the presence of explosive atmospheres, including those that may develop inside uncleaned or improperly prepared tanks or equipment that held such materials; and used containers are cleaned and any pipe lines or connections to them disconnected or blanked. Section 1910.119(k): the employer issues a hot work permit for hot work on or near a process covered by the process safety standard; the permit documents that the 1910.252(a) requirements have been implemented, indicates the dates authorised and identifies the object; it is kept on file until the hot work is complete; the standard does not apply to oil or gas well drilling or servicing or to normally unoccupied remote facilities. Section 1910.147 (control of hazardous energy): lockout and tagout devices are singularly identified and show who applied them ((c)(5)); the application sequence includes shutdown, isolation, applying the devices, relieving stored energy and verifying isolation before work starts ((d)); before devices are removed the work area is inspected, people are checked to be clear, each device is removed by the person who applied it (with a documented exception procedure), and affected employees are notified ((e)); its definition of a lockout device includes blank flanges and bolted slip blinds; the standard does not cover oil and gas well drilling and servicing ((a)(1)(ii)(E)). Section 1910.146 is the separate standard for permit-required confined spaces: it asks for a calibrated direct-reading instrument and for testing oxygen first, then combustible gases and vapours, then toxic gases and vapours ((c)(5)(ii)(C) and (d)(5)(iii)); the form borrows only that order, and says so. The standards' own tables, appendices and the NFPA text they refer to are not reproduced here.
- CCOHS, OSH Answers: Welding - Hot Work (fact sheet last revised 12 August 2024) and HSE safety alert FOD 8-2010, Deadly explosions during cutting of drums and containers (18 November 2010)
Canadian and British guidance. CCOHS describes hot work as working with ignition sources near flammable materials and says getting a hot work permit is one step in a hot work management program that sets where and when hot work is allowed, who authorises, performs and monitors it, and how to get a permit. Its good practices include moving flammable and combustible materials away or covering them with fire-resistant blankets or shields, having suitable extinguishers accessible, securing, isolating and venting pressurised vessels, piping and equipment, posting a trained fire watcher including during breaks and for at least 60 minutes after the work stops (up to 3 or more hours depending on the work), and eliminating explosive atmospheres or not allowing hot work, with continuous monitoring for combustible gases before, during and after. The HSE alert (https://www.hse.gov.uk/safetybulletins/hotwork.htm) defines hot work as any process that generates a source of ignition and warns that a container that looks empty can hold enough residue in seams, creases and folds to give an explosive vapour, and that even liquids not classed as flammable can ignite when heated by hot work; it suggests cold cutting or other alternatives where hot work is not necessary, and gas-freeing, cleaning or inerting where it is.
Each source checked on 20 October 2026. Not legal advice; check the text in force for your site.
Field by field
The form is for one hot work job that also needs energy isolation, from the request to the cancellation. The section titles and tick options are ours: change them to fit your site and keep them the same from permit to permit. It is not the general permit to work, and a hot work permit that your procedure or the law requires takes precedence. The form prints no gas limit, no distance, no fire watch time and no number of signatures: your own procedure sets them, and you write each value and its source where the form asks. A limit copied from another document can be the wrong one for the job: an exposure average for a person over a shift is not the reading at which hot work stops.
- Permit number
- Why: The identifier that ties the isolation list, the blinds register, the test record and the general permit to this job. HSG250 Figure 1 asks for a reference number, with references to other permits or isolation certificates.
- Common mistake: Reusing a number, or leaving it blank on the copy at the job so it cannot be matched to the permit on file.
- Location and equipment
- Why: HSG250 Figure 1 lists the job location and the plant identification as separate elements. US rule 1910.119(k) asks a hot work permit to identify the object on which the work is done.
- Common mistake: "Unit 3" when the unit has many lines. Write the tag number of the line or vessel.
- Description of the work
- Why: HSG250 paragraph 12 says a permit should make clear the exact identity, nature and extent of the job and any limits on it. Writing what is not covered means other work has to be asked for separately.
- Common mistake: "Repairs on the skid", or letting a cut grow into a larger job under the same permit.
- Valid from and to
- Why: A permit authorises certain people to do specific work at a specific place at a certain time (HSG250 paragraph 11). The US process safety rule asks the hot work permit to show the dates authorised. The form sets no maximum duration: your procedure does.
- Common mistake: A validity that runs past the shift with no handover signature, or a permit left open until the job ends.
- Other permits this job needs
- Why: HSG250 paragraph 17 lists jobs where additional permits or certificates are considered, among them breaking containment and confined space entry. This form is not the general permit: tick each other permit, issue it as well and write its number. A hot work permit required by your procedure or the law takes precedence over this form.
- Common mistake: Using this form as if it replaced the general permit, or two permits for one job that do not name each other.
- Hazards and precautions
- Why: HSG250 Figure 1 asks for hazards including residual ones and those the work creates, and for precautions signed by the people who took them. The form also asks whether the hot work could be avoided: CCOHS lists substitutes such as hydraulic shears and mechanical bolting, and the HSE alert on drums and containers says hot work may not be necessary and suggests cold cutting.
- Common mistake: Listing the hazard of the plant but not the hazards the work creates, or ticking precautions that are not yet in place.
- Isolation list
- Why: HSG250 paragraph 22 says isolations should be detailed on the permit or a cross-referenced isolation certificate; HSG253 paragraph 173 says the proving is recorded. The US lockout standard asks for singularly identified devices that show who applied them and for verification of isolation before work starts, and its definition of a lockout device includes blank flanges and bolted slip blinds.
- Common mistake: A tick instead of numbers. Write the lock and tag numbers, who applied them and the test that showed they hold.
- Blinds and spades register
- Why: HSG253 paragraph 188 lists a blank or blind register among the systems that control removal of blanks and blinds, and paragraph 186 says to check the vent or drain before a spade is removed because hazardous substances can build up behind it. The rating comes from your line specification: the form prints none.
- Common mistake: Fitting a spade and not entering it, so nobody removes it, or removing it without checking the vent behind it.
- Flammable gas and vapour test record
- Why: HSG253 paragraph 161 says hot work on systems that have contained flammable substances needs a demonstrated non-explosive atmosphere immediately before the work starts, and the US welding rule does not allow cutting or welding where explosive atmospheres are present. The record shows who tested, when, where and what. Oxygen, hydrogen sulfide and benzene have columns because the old form had them; the other gas column is for whatever your job needs.
- Common mistake: One reading at the start and none after a break, or readings with no unit, or a "within the limit" tick when no limit was written.
- Limit for this job and its source
- Why: The form prints no limit. The value, unit, document and date are for the issuer to write. The sources differ and each is for its own purpose, for example a flammable gas figure for permit spaces in the US confined space rule is not a hot work limit.
- Common mistake: Copying a limit from another site's form or from a worker exposure table, or writing a number with no source.
- Test instrument and its check
- Why: HSG253 paragraph 162 asks procedures to specify the control, calibration and checking of test equipment, and that gas testing equipment is suitable for use after purging. The US confined space rule asks for a calibrated direct-reading instrument. The form asks for the serial number, the calibration due date and a bump or function test today.
- Common mistake: An instrument past its calibration date, or no check that it responds on the day.
- Fire watch
- Why: The US welding rule requires fire watchers in listed conditions, trained in the extinguishing equipment and the alarm, with a watch kept for at least half an hour after the work; CCOHS says at least 60 minutes and up to 3 hours or more depending on the work. The form leaves the time for your rule and asks for its source.
- Common mistake: Ending the watch when the torch is switched off, or a fire watch who is also doing a task.
- Extinguishers and area cleared or protected
- Why: The US rule asks for suitable extinguishing equipment in a state of readiness, floor and wall openings protected, combustibles moved away (35 feet where practicable) or protected, and a watch on the far side of metal walls where combustibles are not moved. CCOHS adds ducts, cracks and sweeping combustibles from floors. The form prints no distance for the area or for drains and sewers: your procedure sets it.
- Common mistake: Checking the work side of a deck or wall and not the far side, or leaving a drain open to the sump.
- Issue and acceptance
- Why: HSG250 Figure 1 asks for the issuer's signature that isolations are made and precautions taken, except those that can only be taken during the work, and the receiver's signature that the work, hazards and precautions are understood. Paragraph 26 asks for a second person for particularly high-hazard work and says nobody issues a permit to themselves. The further approvals are the old form's roles, to keep or drop.
- Common mistake: The same person as issuer and receiver, or approvals signed before the gas test was recorded.
- People working under this permit
- Why: HSG250 Figure 1 asks that the permit information is explained to all permit users. The roster shows who they are and when each was in the area, which also tells the fire watch and the issuer who is exposed.
- Common mistake: A roster not updated when people swap in, or one signature for the whole crew.
- Suspension, handover and re-validation
- Why: HSG250 paragraphs 19 and 20: a suspended permit stays live until cancelled, isolations may still be in place, and work restarts only after the issuing authority has verified it is safe and revalidated the permit or issued a new one. Gas can return during a break, so the form asks for the tests to be repeated.
- Common mistake: Restarting after a break on the readings taken before it, or treating a suspended permit as closed.
- Hand-back, removal of locks and blinds, and cancellation
- Why: HSG250 paragraph 24 sets the hand-back questions and Figure 1 asks for a cancellation certifying the work tested and the plant recommissioned. The US lockout standard asks that before devices are removed the area is inspected and people are clear, that each device is removed by the person who applied it, and that affected employees are told. HSG253 says the sequence of reinstatement is critical where permits share isolations, and to check the vent before a spade is removed. The six printed steps follow those sources; your procedure sets the order.
- Common mistake: Removing locks before the blind is out and recorded, or cancelling when the crew leaves, before anyone checks the plant.
Worked example
IllustrativeA hot work and energy isolation permit, filled (invented site, people and numbers)
| Section | Entry |
|---|---|
| 1 Permit and job | HW-0417, issued 14 May at 07:30, valid to 15:30 (8 h). Unit 3, drain line L-204 below valve V-301 (tag HC-3-204). Cut out and replace a 1.5 m spool by welding; cold cutting was considered and not practicable because of the flange alignment. Limits: this spool only, nothing on the separator. Welding. A crew of three from the maintenance team. |
| 2 Other permits and precedence | General permit PTW-0412 issued as well. No confined space entry. Sampling work next to the skid reviewed as adjacent work (reference S-88). The site's own hot work procedure applies and takes precedence. |
| 3 Hazards and precautions | Hydrocarbon residue in the line; trapped pressure between V-301 and V-302; sparks near the sump; heat on the cable tray. Line drained, flushed and vented through the bleed; sump drain covered; cable tray covered with a fire-resistant blanket. |
| 4 Isolation list | Three points: V-301 and V-302 closed and locked (locks 118 and 119, tags 118 and 119) with the bleed open; pump P-301 locked off at the motor control centre (lock 120, tag 120) and the start button tried. Applied by the operator at 07:05 to 07:15; verified by the issuer at 07:20, bleed checked for pressure at 07:22: none. |
| 5 Blinds and spades register | One spade at flange F-12 on L-204, rating as written in the line specification (not shown here). Installed by fitter KM at 07:10, proved tight by the bleed at 07:25. Entered on the blind list. |
| 6 Gas test record | Limit written by the site from its hot work procedure (value and date not shown in this example). Instrument serial GD-77, calibration due 30 June, bump test passed at 07:50. Readings at 08:10, 10:55 (retest after the suspension) and 12:00: oxygen 20.9 %, flammable gas 0 % LEL, hydrogen sulfide 0 ppm, benzene 0 ppm, within the limit each time. Tester RH. |
| 7 Fire watch and area | Fire watch S. Okoye, trained in the extinguisher and the alarm. Combustibles cleared, sump covered, cable tray blanketed, extinguisher at the work point. Rule used in this example (invented): the watch stays 60 minutes after the work. Hot work finished 12:30, watch ended 13:30, area inspected 13:30. |
| 10 Suspension and re-validation | Suspended 10:15 when the sampling work next door was about to start. Spade, locks and fire watch kept. Area re-inspected, gas retested at 10:55, issuer re-validated the permit and work restarted at 11:00. Suspended for 45 minutes. |
| 11 Hand-back, removal and cancellation | Weld inspected and spool pressure-tested at 13:40. Vent behind the spade checked and spade removed at 13:50, entered on the register and the blind list. Locks and tags removed at 14:00, each by the person who applied it. Operations accepted the line at 14:10. Recommissioned and permit cancelled at 14:25. |
Hot work ran from 08:20 to 12:30, which is 4 h 10 min; less the 45-minute suspension, 3 h 25 min of work. The fire watch ran for the 60 minutes the invented rule sets (12:30 to 13:30). The permit was cancelled at 14:25, which is 1 h 05 min before the validity ended at 15:30. The job, names, tags and times are invented to show how the form is used, and are not recommendations: your own procedure sets the limits, the distances, the fire watch time and who may issue.
When a spreadsheet stops being enough
A paper permit works for a site with few hot work jobs and one issuer. It stops working when an issuer has to see every live and suspended permit and the isolations they share before issuing another (HSG250 paragraphs 19 and 22), when hot work, lock and tag and blinds are controlled on different forms that must be matched by hand, and when the blind register has to be right across shifts and contractors.
HSG250 paragraph 51 lists what an electronic permit system must provide before it replaces paper: password-protected electronic signatures to prevent unauthorised issue or acceptance, no remote issue without a site visit, no alteration of an issued permit without telling everyone concerned, paper copies for display at the job, training so operators do not copy sections from other permits, and a back-up for software failure or power loss. Those are the questions to put to any vendor. Add two of your own: can it link a gas test and its instrument to the permit, and can it show the blinds still fitted on a line.
Whatever you choose, test it with one of your own permits: issue it, suspend it for a break, hand it over to another shift, remove the blind and cancel it, including at a work face where the connection is lost.
Same rule for every product: tagged “Permit to Work”, “Permits to Work (PTW)” or “Control of Work”, with a sourced hot work or fire watch capability in its record, or one the vendor stated to us, labelled as vendor-stated. Documented and conditional capabilities qualify; check the linked scope before treating a module as included.
Ordered by how closely our sources document this process, not by quality. Sponsored placements are labelled. How lists are ordered
Sitemate · Hot works permit system · Documented
Vendor source · Profile checked
Prometheus Group · Hot-work and confined-space permit configuration · Conditional
Vendor source · Profile checked
Rapid Global · Hot work permit issuing · Documented
Vendor source · Profile checked
EcoOnline · Hot work and specialist permit types · Conditional
Vendor source · Profile checked
All 4 matching profiles are shown. Documentation review, not hands-on testing or a claim of compliance.