- Draftapplicant
- Project owner reviewMaintenance
- HSE reviewHSE
- Applicant signaturecontractor
- Security reviewSecurity
- Approved—
Nobody starts work until it's safe to.
HESSA puts permits to work, incidents, risk assessments, SMK3 audits and training in one system. Approvals follow your org chart. Every record ends in a PDF an auditor will accept.
Dari laporan insiden sampai audit SMK3, dalam satu platform.
Spreadsheets, paper and WhatsApp
Near-miss reports sit in a chat group. The permit binder is in the site office. The audit evidence lives in someone's laptop. HESSA gives each one a single record with an owner, a status and a history.
- Reported byWorkshop technician
- Photos3 captioned
- Stop activityLOCAL
- InvestigationDRAFT
- Next approverHead of Maintenance
- Counts towardTRIFR · Sep 2026
Untrained workers can't get a permit approved
You attach required courses to a permit. Until every applicant's enrolment is complete, the approval is refused by the server. The system won't let anyone click past it. Try it.
Required course for PTW-2026-0147
Tap each chapter to complete it. The last one is a quiz.
Approve permit
HSE review step · Hot work, pipe rack B2
Contractors use a signed link. No account needed.
Staff send a link that works for about 24 hours and only for one permit. On it, the contractor fills in the draft, signs the safety guideline and completes the required courses and quizzes.
- No account
- No password
- No licence seat
One slip, followed to the end
An incident is more than a form. It opens an investigation, points to a root cause, sets corrective actions, goes through approval and feeds the frequency rate. Here is one accident, start to finish.
- Tue 09:12
Technician slips on hydraulic oil
Reported from the workshop floor with three captioned photos, the area and room, the injured person's body part and injury type, and one witness.
AccidentMinorWorkshop B - Tue 09:20
Work stopped in the bay
The reporter raises a local stop-activity flag. An organisation-wide stop is also available when one bay isn't enough.
Stop activity · Local - Wed
Investigation report opened
The investigator marks the injury on a body diagram, estimates the cost and walks the HFACS cause tree down to the root cause.
Preconditions›Environmental factors›Physical environment - Thu
Corrective actions set and signed
Drip trays under the press, a daily housekeeping check added to the area inspection, and a toolbox talk. The investigators sign and the report locks as COMPLETE.
- Mon
Approved by the right people
The approval line resolves to this department's head and the HSE manager. No one typed their names in. The full timeline stays on the record.
Approved - Month end
Counted in the frequency rate
Recordable accidents feed TRIFR, severity feeds TRSR, and more than three days off counts as a lost-time case. The incident and investigation reports export as branded PDFs.
The whole SMK3 audit, already loaded
All 12 elements, 44 clauses and 166 criteria ship with the product, in English and Bahasa. Each criterion cites its source regulation. Start an audit period and you get one schedule per element. A criterion marked Comply closes itself. Not Comply opens a corrective action that goes through approval.
The criterion counts per element are real. The Comply and Not Comply results are simulated.
Record the risk that's left after controls
Every mitigation records which kind of control it is and rates the risk before and after. That makes the hierarchy of controls visible: PPE barely moves the risk, elimination removes it. Pick a control for working at height on a 6 m pipe rack.
Reorganise without breaking approvals
Approval lines are defined by department and job position, never by a person's name. Placeholders fill in when a record is created, then stay fixed. So a reorg changes future records and leaves the history as it was. Your admin makes the change, not a developer.
Resolved from the incident's department when it was created.
Frequency rates calculated from real hours
Man hours are logged by worker group and month. HESSA calculates TRIFR, TRSR and LTICR per million hours for your fiscal year, and leaves security incidents out. Change the inputs and watch the rates.
Your own instance and database
No customer shares a database with another. We can run your instance for you, or you can run it in your own data centre, air-gapped if you need to. It's the same product either way.
Dedicated cloud
- Hosting
- We operate it, in an Indonesian data centre
- Upgrades
- Managed by us, in scheduled windows
- Backups
- Daily, included
- Your IT
- Close to zero effort
On-premise
- Hosting
- Your data centre or private cloud
- Upgrades
- On your schedule, with our help
- Network
- Can run fully air-gapped
- Best for
- State-owned companies, mining, strict data residency
Plan your rollout
Fill in the basics and copy the summary into an email to us. We'll run the walkthrough on your own sites and permit types.
Opens WhatsApp with this summary ready to send. Already have an account? Sign in to the app.