What you will learn
- Why permit to work is a safety control, not paperwork
- What a permit contains: job, hazards, isolations and precautions
- How permits are issued, checked and closed
- How conflicting work in the same area is prevented
- Where permit control ends and operational responsibility begins
What this project is
Refineries contain flammable, toxic and high-pressure hazards. Maintenance, construction and inspection work in that environment can create new hazards: hot work near flammable material, entry into confined spaces, work on live electrical systems, or breaking into lines that may still contain product. A permit to work system controls that work: each job needs a permit that describes the work, identifies hazards, specifies isolations and precautions, and is authorised by a responsible person before work starts. Work without a permit, or outside the permit's scope, is stopped.
Isolation is the critical control. Before work on a line or vessel, it must be isolated from energy and product sources, drained, purged and proven safe, with isolations recorded and locked where required. The permit system should link the permit to its isolations, so a permit cannot be issued until isolations are confirmed, and isolations cannot be removed while a permit is still open. That link prevents the classic failure: work starting on equipment that was never properly isolated.
Core features
- Permit creation for hot work, confined space entry, electrical work, line breaking and other hazardous jobs
- Hazard identification and risk assessment linked to each permit
- Isolation management: isolations recorded, confirmed and linked to permits
- Authorisation workflow with competent authorisers and validity periods
- Conflict checking: overlapping permits in the same area flagged before issue
- Permit closure and handover, with work completion and isolation reinstatement recorded
How it is built
- Map the hazardous work types and isolation practices first, with safety teams
- Build permit creation and authorisation, then isolation management linked to permits
- Add conflict checking and validity control, then closure and handover
- Test with real maintenance jobs, checking that permits match field practice
- Pilot in one refinery unit, comparing permit compliance before and after, then widen
Technology considerations
Permit design must fit field work. A permit form that is too long or too complex will be completed after the work, not before it, defeating its purpose. The system should support fast, accurate permit creation from templates for common jobs, with hazard and precaution fields that reflect the actual job, not generic boilerplate. Offline capability matters where refinery areas have poor connectivity, but permit status must sync reliably, because a permit issued offline that nobody else can see creates conflict risk.
Conflict checking needs accurate location data. Permits must be linked to specific equipment and areas, using the refinery's own asset and area naming, so overlapping work in the same area is detected. Authorisation needs competent people: the system should check that authorisers hold the required competence, and that permits are not authorised by the person doing the work where separation is required. Audit trails matter for investigations: every permit, isolation and authorisation should be recorded with who, when and what.
Challenges to plan for
- Permits completed after work starts, because the system is too slow in the field
- Isolations removed while a permit is still open, exposing workers to hazard
- Conflicting permits issued for the same area, because location data was vague
- Permits that become generic paperwork, with hazards copied rather than assessed
Who it is for, and its limits
This suits a refinery operator, a petrochemical plant or any hazardous facility using permit to work. It fits operations where hazardous work is frequent and where isolation control is critical. It does not fit a small workshop with no hazardous processes, and it is not a substitute for competent supervision: it controls work authorisation, supervisors still own safety on the ground.
A permit system does not make work safe by itself. Safety comes from hazard assessment, isolation and supervision; the system makes those controls explicit and checkable. Costs vary with facility size and permit types, so confirm with a quote after the work types are mapped.
Frequently asked questions
What is a permit to work?
A written authorisation for hazardous work, describing the job, its hazards, required isolations and precautions, and the period it is valid for. Work outside the permit's scope is not authorised.
What is isolation?
Separating equipment from energy and product sources before work, by closing and locking valves, blanking lines, or electrical isolation, then proving the equipment is safe. Isolations are recorded and linked to permits.
Can two permits cover the same area?
Only where the system checks and allows it, such as compatible work types. Conflicting work, such as hot work near a confined space entry, is flagged before permits are issued.
How long is a permit valid?
For a defined period, typically a shift, after which it must be renewed or closed. Expired permits do not authorise work, and the system flags permits approaching expiry.
What happens at permit closure?
Work completion is recorded, the area is checked, and isolations are reinstated under control. A permit is not closed until those steps are complete.