HSE management platform · built for SMK3

Nobody starts work until it's safe to.

HESSA puts permits to work, incidents, risk assessments, SMK3 audits and training in one system. Approvals follow your org chart. Every record ends in a PDF an auditor will accept.

Dari laporan insiden sampai audit SMK3, dalam satu platform.

51modules in one system
166SMK3 criteria built in
292permissions you can assign
2–4 wkto go live on cloud
PTW-2026-0147 DRAFT
Hot work · Welding
Area
Pipe rack B2, Utility Building
Applicant
Contractor crew of 4, via portal link
PPE
Welding shield, FR coverall, gloves
  1. Draftapplicant
  2. Project owner reviewMaintenance
  3. HSE reviewHSE
  4. Applicant signaturecontractor
  5. Security reviewSecurity
  6. Approved—
Required course: Hot Work SafetyIN PROGRESS
Example permit. The steps are the real approval flow.
Where most sites are today

Spreadsheets, paper and WhatsApp

Near-miss reports sit in a chat group. The permit binder is in the site office. The audit evidence lives in someone's laptop. HESSA gives each one a single record with an owner, a status and a history.

Permit_Hot_Work_FINAL(3).xlsxSigned? column blank for rows 14–22
Paper form · InspectionPhoto evidence: "see Budi's phone"
INC-2026-0318Accident · Minor
  • Reported byWorkshop technician
  • Photos3 captioned
  • Stop activityLOCAL
  • InvestigationDRAFT
  • Next approverHead of Maintenance
  • Counts towardTRIFR · Sep 2026
Permit to work · Training

Untrained workers can't get a permit approved

You attach required courses to a permit. Until every applicant's enrolment is complete, the approval is refused by the server. The system won't let anyone click past it. Try it.

Contractor view · Hot Work Safety

Required course for PTW-2026-0147

Tap each chapter to complete it. The last one is a quiz.

Enrolment statusIN_PROGRESS
HSE officer view

Approve permit

HSE review step · Hot work, pipe rack B2

…/permit-portal/PTW-2026-0147?t=9f3c…e21a
23:59:59
link expires · one permit, one applicant

Contractors use a signed link. No account needed.

Staff send a link that works for about 24 hours and only for one permit. On it, the contractor fills in the draft, signs the safety guideline and completes the required courses and quizzes.

  • No account
  • No password
  • No licence seat
Incidents · Investigation

One slip, followed to the end

An incident is more than a form. It opens an investigation, points to a root cause, sets corrective actions, goes through approval and feeds the frequency rate. Here is one accident, start to finish.

  1. Tue 09:12

    Technician slips on hydraulic oil

    Reported from the workshop floor with three captioned photos, the area and room, the injured person's body part and injury type, and one witness.

    AccidentMinorWorkshop B
  2. Tue 09:20

    Work stopped in the bay

    The reporter raises a local stop-activity flag. An organisation-wide stop is also available when one bay isn't enough.

    Stop activity · Local
  3. Wed

    Investigation report opened

    The investigator marks the injury on a body diagram, estimates the cost and walks the HFACS cause tree down to the root cause.

    Preconditions›Environmental factors›Physical environment
  4. Thu

    Corrective actions set and signed

    Drip trays under the press, a daily housekeeping check added to the area inspection, and a toolbox talk. The investigators sign and the report locks as COMPLETE.

  5. Mon

    Approved by the right people

    The approval line resolves to this department's head and the HSE manager. No one typed their names in. The full timeline stays on the record.

    Approved
  6. Month end

    Counted in the frequency rate

    Recordable accidents feed TRIFR, severity feeds TRSR, and more than three days off counts as a lost-time case. The incident and investigation reports export as branded PDFs.

SMK3 · PP No. 50/2012

The whole SMK3 audit, already loaded

All 12 elements, 44 clauses and 166 criteria ship with the product, in English and Bahasa. Each criterion cites its source regulation. Start an audit period and you get one schedule per element. A criterion marked Comply closes itself. Not Comply opens a corrective action that goes through approval.

0Comply, closed
0Corrective actions
166Not yet audited

The criterion counts per element are real. The Comply and Not Comply results are simulated.

Risk assessment · Hierarchy of controls

Record the risk that's left after controls

Every mitigation records which kind of control it is and rates the risk before and after. That makes the hierarchy of controls visible: PPE barely moves the risk, elimination removes it. Pick a control for working at height on a 6 m pipe rack.

Consequence →1 Insignificant … 5 Extreme
Approval workflows

Reorganise without breaking approvals

Approval lines are defined by department and job position, never by a person's name. Placeholders fill in when a record is created, then stay fixed. So a reorg changes future records and leaves the history as it was. Your admin makes the change, not a developer.

Admin · Approval line for Incidents
    INC-2026-0318 · created Tue 09:12

      Resolved from the incident's department when it was created.

      Man hours · KPI

      Frequency rates calculated from real hours

      Man hours are logged by worker group and month. HESSA calculates TRIFR, TRSR and LTICR per million hours for your fiscal year, and leaves security incidents out. Change the inputs and watch the rates.

      TRIFR · Total recordable injury frequency rate
      2.40
      TRSR · Severity rate
      —
      LTICR
      —
      Deployment

      Your own instance and database

      No customer shares a database with another. We can run your instance for you, or you can run it in your own data centre, air-gapped if you need to. It's the same product either way.

      Default

      Dedicated cloud

      2–4weeks to live
      Hosting
      We operate it, in an Indonesian data centre
      Upgrades
      Managed by us, in scheduled windows
      Backups
      Daily, included
      Your IT
      Close to zero effort
      Enterprise

      On-premise

      6–12weeks to live
      Hosting
      Your data centre or private cloud
      Upgrades
      On your schedule, with our help
      Network
      Can run fully air-gapped
      Best for
      State-owned companies, mining, strict data residency
      PostgreSQLDocker ComposeTraefik + Let's EncryptYour branding, logos and coloursLight and dark modeGoogle sign-in
      Next step

      Plan your rollout

      Fill in the basics and copy the summary into an email to us. We'll run the walkthrough on your own sites and permit types.

      Start with

      Opens WhatsApp with this summary ready to send. Already have an account? Sign in to the app.