← Back to portfolio
Innovapptive / Environmental, health and safety

Connecting Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period., JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. and IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. so the next step is clear.

I designed iPermitsThe permit-to-work submodule within EHS. It records the work, required checks and approvals through to closure., JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. and IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. flows to show who acts next and what they need to check.

My role

UX design across web and mobile; later frontend contributions

Period shown

September 2024 onwards. Joined the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. work, then grew into ownership across the workflows.

Team

Product managers, design leadership and engineering

Status

Historical designs and frontend contributions

Two separate scenes: a reviewer checks a permit on a desktop in the plant office, while a field worker holds a phone displaying the mobile permit.
Review in the office. Act in the field. Illustrative AI-generated scenes using the project’s design screens.

How Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. connect to the work

In this Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job.-linked example, the Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job. describes the job and the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. records its safety requirements. Standalone Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. are also supported in the July 2026 release.

Start with the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period.Add JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. or IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. as the work requires
Work scope and safety requirements

Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period.

Records work scope, Job hazardsSources of potential harm associated with the job, such as moving equipment or hazardous substances. and Safety controlsMeasures chosen to reduce the risks identified for the job., then progresses through the required authorization and issuance checks.

Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job.-linked exampleDisplayed in the field
Job steps, Job hazardsSources of potential harm associated with the job, such as moving equipment or hazardous substances. and Safety controlsMeasures chosen to reduce the risks identified for the job.

JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow.

Assess job steps, Job hazardsSources of potential harm associated with the job, such as moving equipment or hazardous substances. and Safety controlsMeasures chosen to reduce the risks identified for the job. with the team, standalone or linked to a Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period..

JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow.
IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. of hazardous energy

IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. Certificate

Record the required IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. before work, then manage De-isolationThe controlled removal of isolation, with its own approvals, actions and review. through its own steps.

Separate owner · Status · Workflow

The Permit requesterThe person who prepares the permit request and describes the work that needs permission. prepares the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period.. The holder accepts it and performs or supervises the authorized work.

Follow the linked workflows

iPermitsThe permit-to-work submodule within EHS. It records the work, required checks and approvals through to closure. / From request to closure

  1. Raise

    Describe the work

  2. Review

    Check the request

  3. Authorize

    Authorize the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period.

  4. Issue

    Confirm site readiness

  5. Acknowledge

    Holder accepts

  6. Live

    Carry out the work

  7. Surrender a permitThe permit holder hands the permit back for closure. Surrender and final closure are separate actions.

    Holder returns Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period.

  8. Close

    Permit issuerThe role that issues the permit and handles closure according to the configured workflow. checks closure

June 2025 demo. Holder Surrender a permitThe permit holder hands the permit back for closure. Surrender and final closure are separate actions.; Permit issuerThe role that issues the permit and handles closure according to the configured workflow. checks closure.

JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. / From request to completed analysis

  1. Initiate

    Raise the analysis

  2. Assign

    Assign the assessment team

  3. In Progress

    Contribute steps, Job hazardsSources of potential harm associated with the job, such as moving equipment or hazardous substances. and Safety controlsMeasures chosen to reduce the risks identified for the job.

  4. Approve

    Complete the analysis, not the job

Historical design. June 2026 also supports Initiate → Approve. Analysis approval is not job completion.

IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. / From preparation to De-isolationThe controlled removal of isolation, with its own approvals, actions and review.

  1. Prepare ICC · Isolation Control CertificateThe record used to manage and review equipment isolation, followed by de-isolation and closure.

    Record the IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources.

  2. Isolate

    Review plan · Authorize · Execute · Verify

  3. Live

    Verify and maintain IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources.

  4. De-isolate

    Check dependencies · Authorize · Execute · Verify

  5. Closed

    Certificate complete

Intended process; release scope varies. Check all dependent Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. before De-isolationThe controlled removal of isolation, with its own approvals, actions and review..

JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. and IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. are separate requirements, determined by the work and site configuration.

Discover: Understand the people and their journey.

I mapped user roles with in-house industry experts and existing clients. Our experts also reviewed the design decisions.

The people I designed for

Selected roles across permits, JHA and isolation. Responsibilities vary by site and configuration.

Illustrative permit requester preparing a work request at a desk

Requester

Defines the work scope and prepares the permit with hazards, controls and linked assessments.

Illustrative reviewer checking the permit at a computer

Reviewer

Checks completeness and whether the hazards and controls suit the work; requests corrections.

Illustrative field worker with the mobile permit

Field validator

Performs assigned site or atmospheric checks within their authorization.

Illustrative field worker using the mobile interface

Permit holder

Accepts the permit, performs or supervises the work, communicates controls, monitors conditions and surrenders it.

Illustrative team discussing the JHA at a computer

JHA owner

Coordinates the assessment and team contributions, with approval responsibilities set by configuration.

Illustrative isolation team member at a computer

ICC owner

Develops the isolation plan and manages assigned implementation activities.

The permit authorizer assesses whether work may proceed. The issuer checks site readiness and issues the permit. Area authority coordinates nearby work; JHA teams and isolation reviewers, verifiers and authorizers have distinct checks. AI-generated scenes; not research participants.

Three connected workflows

Permits, JHA and Isolation each have their own stages. Linked records keep the work context connected.

Permit to Work

  1. Raise
  2. Review
  3. Authorize
  4. Issue
  5. Acknowledge
  6. Live work
  7. Surrender
  8. Close

June 2025 demo. Holder acknowledges and surrenders; issuer checks closure. Review levels and field checks vary by site.

Job Hazard Analysis

  1. Initiate
  2. Assign
  3. In Progress
  4. Approve

Historical four-stage design. June 2026 also supports a two-stage Initiate → Approve configuration. Analysis approval is not job completion.

Isolation / ICC

  1. Plan
  2. Review
  3. Authorize isolation
  4. Isolate
  5. Verify
  6. Maintain isolation
  7. Check dependencies
  8. Authorize de-isolation
  9. De-isolate
  10. Verify and close

Intended process; substantial ICC scope remains roadmap. Check all linked permits before de-isolation. One surrender does not release a shared isolation.

Historical and intended workflows. Availability and actions vary by release and site.

My focus: show who acts next.

Define: Turn the gaps into design priorities.

  • Keep the job context visible

    Show the job details and, when linked, the Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job. and OperationsThe individual tasks within a work order. A permit may cover the whole work order or selected operations..

  • Show linked safety records

    Keep JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. and ICC · Isolation Control CertificateThe record used to manage and review equipment isolation, followed by de-isolation and closure. status available during review.

  • Make the next action clear

    Show what each role needs to check and complete.

How I organised the information

Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. detail

Work context

  • Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job. and OperationsThe individual tasks within a work order. A permit may cover the whole work order or selected operations., when linked
  • Equipment and location
  • Job details

Safety information

  • Required forms
  • Linked JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow.
  • Linked IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. / ICC · Isolation Control CertificateThe record used to manage and review equipment isolation, followed by de-isolation and closure.

Progress and actions

  • Stage and status
  • Responsible roles
  • Available actions
A content hierarchy reconstructed from the screens: job information, safety records and next actions stay distinct. This is not a lifecycle.

Prepare a permit for a work order

RequesterPreparation → review

Follow the connected paths. Swipe across to see the full flow.

Prepare the permit

Work order, operations & job details

JHA or ICC needed?
Select safety forms

Choose the records this job requires.

Submit permit

Creates any selected linked requests.

Permit in review

Work order stays linked.

Paths at a glance
  • Records needed: select JHA / ICC → submit → review.
  • No linked records: submit → review.
  1. Prepare the permit

    Select the Work Order and operations.

  2. Are JHA or ICC records required?
    Yes · select safety forms

    Choose JHA, ICC or both as required.

    No · submit without linked requests

  3. Submit the permit

    Creates the selected requests.

  4. Permit enters review
Work Order-linked example. Standalone permits are also supported in the July 2026 release. Review does not authorize work; JHA and ICC follow separate workflows.

Complete the checks before signing

Assigned person · MobileValidation → signature

Follow the connected paths. Swipe across to see the full flow.

Choose an action

Assigned person · Mobile

Information complete?
Complete missing fields

Correct the form and retry the action.

Open signature step

Only after validation passes.

Sign the action
Paths at a glance
  • Complete: open signature → sign.
  • Incomplete: correct fields → retry validation.
  1. Choose the assigned action
  2. Is the information complete?
    No · correct and retry

    Complete the missing fields.

    Return to the completeness check

    Yes · open signature

  3. Open the signature step

    Only after validation passes.

  4. Sign the action
Signing is available only after validation passes.

Design: Turn the design into screens.

Show the linked status where people review the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period..

I placed JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. status inside the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. review screen. Permit reviewerThe person who checks the submitted permit information before it moves to the next stage. can check it without leaving the Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period..

Permit review screen showing linked JHA and its current status
Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. review with linked JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow.. Historical design.

Make the JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. handoff a clear decision.

I kept job steps, Job hazardsSources of potential harm associated with the job, such as moving equipment or hazardous substances. and Safety controlsMeasures chosen to reduce the risks identified for the job. together. The JHA ownerThe person who coordinates the analysis and assigns the team that will review its job steps, hazards and controls. assigns the team in a focused dialog.

JHA design with job steps, hazards and controls behind an Assign Team dialog
Assign Team. AI assignment was a proposed enhancement.

Make IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. status visible at equipment level.

I grouped ICC · Isolation Control CertificateThe record used to manage and review equipment isolation, followed by de-isolation and closure. records by equipment, with each record’s status and owner visible.

Isolation register grouping certificates by equipment with statuses and ICC owners
Isolation registerA view of isolation certificates grouped by equipment, with their status and owners.. Historical design.

Develop: Build and review the interactions.

I implemented and checked interactions on web and mobile.

Web development
Angular
Mobile development
React Native

Choosing a Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job.

I helped build Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job. selection and aligned its fields on mobile.

Checking before signing

I moved required-field checks before signing and made expired forms read-only.

Checked in the working app

Checked in the browser and iOS simulator. Remaining work documented for engineering.

Deliver: Prepare the work for delivery.

  • Design

    Permit to workA record of permission to carry out specified work, subject to the required checks, approvals and validity period. journeys, JHA · Job Hazard AnalysisAn EHS submodule for Job Hazard Analysis: each operation’s hazards and controls, with its own review and approval workflow. flows, IsolationThe EHS submodule for equipment isolation. It records the approvals, actions and checks for separating equipment from energy or process sources. screens and prototypes.

  • Working interaction improvements

    Work orderThe record of a maintenance job, such as repairing a pump. A permit can link to that job. selection, validation before signing and Expired permitA permit whose validity period has ended. Available follow-up actions depend on the workflow and the person's permissions. actions.

  • A shared delivery reference

    Design decisions, exceptions and pending backend work for engineering.

Completion-time and safety outcomes were not measured.