Digital Permit-to-Work for Chemical Plants

By James C on October 15, 2026

permit-to-work-chemical-plant-digital

In a chemical plant, the most dangerous jobs are rarely the routine ones. They are the hot work on a pipe rack, the vessel entry and the line break, done while the rest of the unit keeps running. A permit-to-work system is what keeps those jobs controlled, but paper permits can't see each other, can't confirm a gas test is still valid and can't stop two conflicting jobs starting side by side. Digital permit-to-work fixes that, and you can see it in a short live demo.

SAFETY · DIGITAL PERMIT-TO-WORK · CHEMICAL

Mobile Permit-to-Work That Sees Every Job, Every Isolation and Every Conflict

iFactory's PTW Digital Suite runs hot work, confined space, excavation, LOTO and energization permits on mobile devices at the point of work. It links isolation certificates and gas tests, checks for conflicting jobs nearby, and keeps the whole system on your own site.

Permit HW-2291Held for review
Hot work · Unit 3 pipe rack · welding on a support bracket
Risk assessmentApproved
Isolation certificateLinked · ISO-0441
Gas test: LEL 0%, O₂ 20.9%Valid 2 h
Fire watchAssigned
Conflict checkConfined space entry CS-118 is live 12 m away on the same rack. A simultaneous operations review is needed before issue.
Issuer must confirm on site · geofence active
WHY PERMITS MATTER

A Permit Doesn't Make a Job Safe. The System Behind It Does.

The UK HSE makes the point plainly in its guidance on permit-to-work systems: issuing a permit does not, on its own, make a job safe. The permit is a communication and control tool. It defines exactly what work will be done, where, when and under what precautions, and coordinates it with everything else happening on the plant. HSE also links failures in isolating and reinstating process plant to many loss-of-containment incidents. Our safety specialists can help assess your current system.

Piper Alpha, 1988

The best-known permit failure. A pump was restarted while its relief valve was out for maintenance under a permit that hadn't been communicated at shift handover. 167 people died.

Isolation and reinstatement

Many loss-of-containment events happen when plant is isolated for work or returned to service, the two moments a permit system is meant to control.

Interacting jobs

Two individually safe jobs can become dangerous together, such as hot work beside a vessel being opened. Permits must be able to see each other.

PERMIT TYPES

The Permits a Chemical Plant Runs, and What Each Controls

Each permit type addresses a different hazard and draws on different regulations and site rules. A digital system holds a template for each, with the right fields, checks and sign-offs, so nothing depends on which form the requester happened to pick up. Many jobs need more than one permit, such as a hot work permit that relies on an isolation certificate, so the system links them and won't let the dependent permit stay live once its isolation is removed. We can load your existing permit templates in a setup session.

Permit
Main Hazards
Key Controls in the Permit
Common US Reference
Hot work
Ignition of flammable vapors, fire and explosion
Gas test, area clearance, fire watch, time limit, re-test interval
29 CFR 1910.119(k), 1910.252
Confined space entry
Toxic or oxygen-deficient atmosphere, engulfment
Isolation, atmospheric testing, attendant, rescue plan, entrant log
29 CFR 1910.146
Excavation
Buried services, collapse, toxic gas pooling
Service location, shoring or sloping, competent-person inspection
29 CFR 1926 Subpart P
LOTO / isolation
Release of hazardous energy or process fluid
Isolation certificate, locks, verification of zero energy, de-isolation sign-off
29 CFR 1910.147
Energization
Electric shock and arc flash during live work or restoring power
Justification for live work, arc-flash boundary, PPE, qualified person
NFPA 70E energized work permit
Line breaking
Release of residual chemicals or pressure
Drain, purge and depressurize, first-break PPE, verified isolation
Site procedure under PSM
THE PERMIT LIFECYCLE

Seven Stages From Request to Reinstatement

A permit is a process, not a single signature. Each stage has its own owner and its own checks, and the riskiest moments, isolation, shift handover and return to service, are where paper systems most often break down. A digital flow makes each stage explicit and impossible to skip, and it shows the permit coordinator exactly where every live permit stands at any moment. Our support team can map these stages to your current procedure.

1
RequestWork, location, equipment and dates
2
Plan and assessHazards, controls and linked permits
3
Isolate and testIsolations proven, gas test recorded
4
Issue and briefOn site, with the crew acknowledging
5
Work and monitorRe-tests, time limits, site checks
6
Suspend or hand overLeft safe, with a clear status for the next shift
7
Close and reinstateWork checked, isolations removed, plant returned
SIMULTANEOUS OPERATIONS

See Every Live Permit on the Plot Plan, and the Conflicts Between Them

On paper, permits sit in a rack in the control room, and nobody can see at a glance that a hot work permit is about to be issued 12 metres from a vessel entry. A digital system places every permit on the plot plan and checks it against defined conflict rules before issue. You can see the conflict checks running in a short demo.

Unit 1 · ReactorsLOTO-0439
Unit 2 · DistillationEXC-0077
Unit 3 · Pipe rackHW-2291CS-118Conflict: hot work near entry
Tank farmLB-0215
UtilitiesEN-0032
Loading bayNo live permits
Hot work near confined space or line breakHeld for a simultaneous operations review within a set distance.
Excavation near live servicesBlocked until services are located and isolated.
Two permits on one isolationShared isolations are cross-referenced so neither job can de-isolate the other.
Energization near open workHeld until all work on that circuit is closed or suspended.

Know Exactly What's Live on the Plant, Right Now

The permit coordinator can ask what's open, what's isolated and what conflicts, and get answers from the live permit system instead of walking the plant or searching the permit rack.

PTW Digital Suite · Coordinator Assist
Permit CoordinatorWhat's live on Unit 3 before I issue HW-2291?
AssistantTwo permits: confined space entry CS-118 at the condenser, 12 m away and active since 07:40, and isolation ISO-0441, which HW-2291 relies on. The hot work rule needs a simultaneous operations review because of CS-118.
Permit CoordinatorWhen does CS-118 finish?
AssistantPlanned to close at 11:30. Starting HW-2291 after that avoids the conflict, or the area authority can approve both with extra controls.
AT THE POINT OF WORK

Mobile Permits, Geofences and Live Gas Tests

The best permit decisions are made standing at the job, not at a desk in the control room. Mobile permits move the key steps to where the work is and capture evidence as it happens rather than afterwards. Crews see the same permit the issuer signed, on site, before they start. Our support team can help choose devices for your hazardous areas.

Geofenced issue

The permit can only be issued or accepted when the issuer's device is at the work location, which confirms that a site visit actually happened.

Equipment QR tags

Scanning the tag on the equipment pulls up its isolation points, live permits and history, so the right asset is always on the permit.

Gas test capture

Readings are recorded with time, location and instrument, and the system prompts for a re-test when the validity period runs out.

Photo evidence

Photos of isolations, barriers and the work area are attached to the permit at issue and at close-out.

Devices for hazardous areas

In classified areas, mobile devices must be rated for the zone. Many sites use intrinsically safe handhelds for work inside classified zones and standard devices at the boundary. The permit system runs the same on either.

PAPER VS DIGITAL

What Changes When Permits Go Digital

Paper permits have worked for decades, and the discipline behind them is what really matters. Digital doesn't replace that discipline. It removes the blind spots that paper can't avoid, and makes the system easier to audit. You can compare both approaches on your own permits in a working session.

Paper permits
  • Permits in a rack, invisible to each other
  • Gas test validity tracked by memory
  • Isolations cross-referenced by hand
  • Shift handover depends on conversation
  • Audits mean searching through filed forms
Digital permit-to-work
  • Every live permit shown on the plot plan
  • Re-tests prompted when validity runs out
  • Isolations linked automatically to permits
  • Handover status recorded and acknowledged
  • Complete audit trail, searchable in seconds
SHIFT HANDOVER

Handover and Suspension: The Moments That Matter Most

Jobs that run across shifts are where permit systems are most vulnerable, as Piper Alpha showed. A digital system makes handover an explicit step with a recorded status and an acknowledgement from the incoming team, rather than a conversation that may or may not happen. Our safety specialists can help define your handover rules.

SuspendThe work is left safe and the permit is suspended with its current state recorded: what is isolated, what is open and what is outstanding.
Hand overThe incoming area authority reviews and acknowledges every live and suspended permit before taking control.
RevalidateBefore work resumes, conditions are re-checked, gas is re-tested and the permit is re-issued at the job.
ReinstateAt close-out, the equipment's return to service is controlled and signed off, so no isolation is removed while related work is still open.
PERMIT SYSTEM HEALTH

Four Measures That Show Whether the System Is Working

A permit system can look fine on paper and still be drifting in practice. Tracking a few simple measures shows where discipline is slipping before it shows up as an incident. Because every step is recorded digitally, these numbers come straight from the system instead of a manual audit. Our safety specialists can help set targets for each.

Site-visit rateThe share of permits issued with the issuer confirmed at the work location.
Re-test complianceGas re-tests completed before validity ran out, for every live hot work and entry permit.
Overdue closuresPermits still open after the work ended, which is often a sign of weak reinstatement.
Conflicts caughtSimultaneous operations conflicts held for review, and how they were resolved.
ON-PREMISE TURNKEY DEPLOYMENT

PTW Suite, Mobile Devices and Server on Your Own Site

Permit systems must keep working when the internet doesn't. iFactory delivers the PTW Digital Suite on-premise as a turnkey bundle. A pre-configured NVIDIA AI server ships racked and ready with the software pre-loaded. You rack it, plug in power and Ethernet, and the AI is live. To scope it for your plant, request a turnkey quote.

What's Included
  • Pre-configured NVIDIA AI edge server, racked and ready
  • Permit templates for hot work, confined space, excavation, LOTO and energization
  • Plot plan with geofences and conflict rules
  • Cabling, plant Wi-Fi and network setup
  • CMMS and gas detector integration
  • Training for permit issuers, area authorities and crews
  • 24×7 remote monitoring
Live in 6–12 weeks
Wk 1–4
Ship, Network, Data

Server installed, plot plan and equipment loaded, permit templates configured.

Wk 5–8
Train and Pilot

One unit runs digital permits alongside paper while conflict rules are tuned.

Wk 9–12
Go-Live and Training

Plant-wide rollout, paper retired unit by unit, crews trained.

HOW iFACTORY FITS

A PTW Digital Suite Built for Process Plants

iFactory brings permits, isolations, gas tests and conflict checks into one live picture of the plant. Our support team can review your current permit procedure before a pilot.

1
All permit types in one system. Hot work, confined space, excavation, LOTO, energization and line breaking, each with its own template and sign-offs.
2
Conflict checks before issue. Every permit is checked against live work nearby and shared isolations.
3
Mobile at the point of work. Geofenced issue, QR equipment tags, gas test capture and photo evidence.
4
Handover built in. Suspension, acknowledgement and revalidation are explicit, recorded steps.
1000+
Industrial clients running iFactory
99.9%
Platform uptime for round-the-clock permits
6-12 wks
From racked server to digital permits
FREQUENTLY ASKED QUESTIONS

What Permit Coordinators Ask About Digital PTW

What is a permit-to-work system?
It is a formal system for controlling higher-risk work. It defines exactly what will be done, where, when and with which precautions, and it coordinates that work with everything else happening on the plant. As UK HSE guidance stresses, a permit doesn't make a job safe by itself. It is the tool that makes sure the risk assessment, isolations and controls are actually in place at the job.
Which permits does a chemical plant typically need?
Most chemical plants run permits for hot work, confined space entry, excavation, isolation or LOTO, energized electrical work and line breaking. Some also use permits for work at height, radiography and crane lifts. Each draws on different regulations, such as OSHA's PSM hot work requirement, its confined space and LOTO standards, and NFPA 70E for energized work, as well as site procedures.
How does digital PTW detect simultaneous operations conflicts?
Each permit is placed on the plot plan with its location, equipment and isolations. Before a permit is issued, the system checks it against live permits using rules you define, such as hot work within a set distance of a confined space entry or line break, or two jobs relying on the same isolation. Conflicts are held for review rather than silently allowed.
What does geofencing add?
It confirms that key steps, such as issuing, accepting and closing a permit, happen at the actual work location. The issuer's device must be within the geofence for those steps, which puts the site visit that good practice requires on record. It doesn't replace the issuer's judgment. It makes sure that judgment is exercised on site.
What happens if the network goes down?
The system runs on-premise, so it doesn't depend on internet connectivity. If the local network or server is unavailable, sites fall back to a documented paper procedure, and permits are reconciled into the system when it is restored. The fallback is part of the configured procedure, not an improvisation.
Can we keep our existing permit forms?
Yes. Your current permit templates, fields, checklists and sign-off roles are configured in the system, so issuers and crews see familiar content in a digital format. Most sites take the opportunity to tidy up inconsistencies between forms during setup. Our support team can review your forms before configuration.

Control Every High-Risk Job From One Live View

Run all permit types on mobile devices, link isolations and gas tests, catch conflicting work before it starts and make shift handover a recorded step, all on your own site. The full system is delivered turnkey and goes live in 6 to 12 weeks.

Example live permit board · Unit 3
Live permits4
Gas re-tests due1 in 20 min
Conflicts held1 for review
Suspended for handover2 acknowledged
Every action recorded for audit

Share This Story, Choose Your Platform!