Permit-to-work managed on paper forms that get lost, misread in the field, or signed off without confirming isolations were actually applied?
Incident reports filled in on paper at the end of a shift and sitting in a supervisor's tray for three days before anyone sees them and assigns a corrective action?
HSE Management Software for Oil & Gas
Custom HSE software for upstream E&P operators, midstream companies, and oilfield service businesses who need permit-to-work, incident management, and safety observation tools that meet the regulatory requirements and operational realities of the oil and gas industry.
Generic EHS platforms cover safety management for office-based and light industrial environments. They don't handle the permit-to-work complexity of a live production facility, the isolation management requirements of high-pressure and high-temperature equipment, or the specific regulatory reporting obligations of upstream operations. We build for the actual hazard profile of oil and gas.
Permit-to-work system with hazard assessment, isolation confirmation, and authorisation workflow for all permit types
Incident reporting with root cause analysis, corrective action tracking, and close-out confirmation
Near-miss and safety observation capture via mobile for field crews
Risk assessment management with hazard register, control tracking, and audit trail for regulatory inspection
RaftLabs builds custom HSE management software for oil and gas operators. An HSE platform covers permit-to-work with hazard assessment and isolation confirmation, incident reporting with root cause analysis and corrective action tracking, near-miss and safety observation capture, risk assessment management, and regulatory audit trails for OSHA and EPA compliance. Most HSE software projects deliver in 12 to 16 weeks at a fixed cost.
100+Products shipped
·24+Industries served
·FixedCost delivery
·12-16Week delivery cycles
When your safety records are scattered across paper forms and shared drives
HSE record-keeping in oil and gas operations carries real regulatory and legal consequence. A permit-to-work that cannot be produced for a regulatory inspection creates immediate compliance exposure. An incident investigation where the corrective actions were assigned by email and never formally closed leaves the operator unable to demonstrate that the root cause was addressed. A near-miss that was reported verbally but never captured in a system means the hazard information never reaches anyone who can act on it across the wider operation.
We build HSE software that works for field operations -- fast enough that crews use it instead of workarounds, specific enough to handle the hazard types and permit structures of oil and gas, and auditable enough to satisfy regulatory inspection. We have built compliance-tracking platforms for industrial operations. We understand what an HSE system needs to do in a live production environment, not just in an office safety context.
What we build
Permit-to-work management
Permit-to-work system covering the permit types specific to oil and gas: hot work, confined space entry, electrical isolation, high-pressure line breaking, excavation, and radiation work. Each permit type configured with its specific hazard assessment sections, required isolation categories, and authorisation levels based on the work scope and location risk classification. Permit requests raised by technicians or planners, routed through the correct approver chain, with the issuing authority confirming isolation completion before the permit is issued. Active permits visible on the operations centre dashboard with the asset, location, permit holder, and expiry time for each live permit. Permit close-out requiring the permit holder to confirm work is complete and the asset is safe before the isolation is released. Full permit history for every asset available for regulatory inspection or incident investigation.
Incident reporting and investigation
Incident notification filed within minutes via mobile by the person on scene -- initial notification captures the who, what, where, and immediate actions taken without requiring the full investigation to be complete. Incident classification by type (injury, illness, process safety event, property damage, environmental, near-miss) with severity rating that determines the investigation level required. Root cause analysis workflow structured around your chosen methodology -- Taproot, Bowtie, or a custom RCA framework -- with findings, contributing factors, and direct causes recorded against the incident record. Corrective actions assigned to named owners with due dates, with automatic reminders as deadlines approach and escalation when actions are overdue. Close-out requiring confirmation from the action owner and the supervising manager before the incident is formally closed. Lessons learned distributed to relevant teams and locations after close-out, with a searchable incident library for future reference.
Near-miss and safety observation capture
Near-miss and safety observation reporting via mobile for field crews -- low-friction capture designed to encourage reporting rather than discourage it through complexity. Observations categorised by hazard type: unsafe condition, unsafe act, positive observation, or near-miss. Location and asset tagged automatically where GPS is available, or selected manually from the asset register. Photos attached to the observation at the point of capture. Observations reviewed by the supervisor or HSE team within the platform, with the option to escalate to a full incident investigation or close with a documented response. Observation trends by hazard type, location, and reporting individual visible to the HSE team so patterns emerge before they become incidents.
Risk assessment management
Risk assessment register for all operational activities with hazard identification, consequence assessment, likelihood rating, and control measures documented for each risk. Risk matrix configurable to your company's risk tolerance matrix -- 3x3, 4x4, or 5x5 -- with residual risk calculated after controls are applied. Bow-tie analysis for major accident hazards with threat and consequence barriers, barrier owners, and performance standards recorded. Control effectiveness review on a scheduled basis so risk assessments reflect current conditions, not the conditions at the time they were written. Job safety analysis templates linked to work order types so field technicians complete the relevant JSA for each task type rather than starting from a blank template. Risk assessment approval workflow with the approving authority recorded and the review date set at time of approval.
Regulatory compliance tracking
Compliance calendar with all regulatory reporting deadlines, permit renewal dates, and mandatory inspection schedules for your operating jurisdiction -- OSHA recordkeeping deadlines, EPA emission reporting windows, state environmental agency requirements, and operator licence conditions. Mandatory safety training records for all personnel with certification expiry tracking and alerts when certificates are approaching renewal. Regulatory inspection readiness -- permit-to-work logs, incident records, and training records all accessible from a single compliance dashboard rather than assembled from multiple systems when an inspector arrives. OSHA 300 log and 300A summary generated automatically from the incident data recorded in the system. Incident rates calculated and tracked against your TRIR and LTIFR targets.
Audit and management reporting
HSE performance dashboard with leading and lagging indicators: near-miss and observation count by location and period, open corrective actions by age, permit compliance rate, and incident rates against targets. Safety audit scheduling and results recording -- audit findings raised as corrective actions within the same workflow as incident corrective actions so nothing falls through a separate tracking gap. Management report generated automatically at the configured frequency -- weekly, monthly, or for board reporting -- from live data in the system. Trend charts showing incident frequency, hazard type distribution, and corrective action close-out rate over time. Data export for corporate HSE reporting and benchmarking against industry statistics.
Frequently asked questions
Yes. The permit-to-work module is built around your existing procedure, not a generic template. During discovery, we map your current permit types, isolation categories, hazard assessment structure, and authorisation hierarchy into the system configuration. If your safety management system specifies a particular JSA format, isolation certificate format, or signing authority matrix, the software implements that format exactly. The goal is a system that enforces your existing procedure rather than replacing it with a different one that your workforce has to relearn. If your procedure has gaps that the software design process exposes, we flag them for your HSE team to address -- we don't design around them.
Yes. OSHA 300 log entries are generated from the incident records in the system, applying the recordability criteria to classify each incident correctly. The 300A annual summary is generated at year end from the same data. For state-level requirements that differ from federal OSHA -- California, Michigan, and several other states have their own recordkeeping additions -- we configure the system for your specific jurisdiction during discovery. EPA incident reporting for process safety events, spills, and releases is formatted for the required submission method for your regulatory region. Where regulations change, we update the report format as part of ongoing support.
Near-miss and safety observation capture works offline. The mobile app stores the observation locally when there is no connectivity and syncs automatically when the device reconnects. Field crews complete the observation form the same way whether they are connected or not -- there is no difference in the user experience. For operations where devices are not practical in certain areas (high-voltage zones, confined spaces with atmospheric hazards), we support a near-miss station model where a web-based kiosk at the entry point to the work area allows rapid observation entry when the crew exits. The offline-first approach means no near-miss is lost because of a connectivity gap.
An HSE platform covering incident reporting, near-miss capture, corrective action tracking, and management reporting typically runs $40,000 to $70,000. Adding a permit-to-work module with the full hazard assessment, isolation, and authorisation workflow typically adds $25,000 to $45,000 depending on the number of permit types and the complexity of your authorisation hierarchy. A full HSE platform including permit-to-work, incident management, risk assessment management, regulatory compliance tracking, and audit management typically runs $90,000 to $160,000. We scope and price every project at a fixed cost agreed before development starts.