Hot Work Permit Approval Workflow

Who has to approve a hot work permit, and how do we route it automatically?

A hot work permit is approved by the permit authorizing individual, the person management designates to inspect the work area and set the precautions before cutting, welding or grinding starts. Most sites also require the area owner to release the area, the contractor or crew supervisor to accept the conditions, and a named fire watch where a fire could develop. To route it automatically, build the permit as a digital form whose location and risk answers select the approvers, send each approval to a named role in order, block work until every signature is in, and start the fire watch timer the moment hot work stops.

The legal anchor is OSHA's general industry welding standard. Under 29 CFR 1910.252(a)(2)(iv), the individual responsible for authorizing cutting and welding must inspect the area before the work is permitted and designate the precautions to follow, preferably in the form of a written permit. Paragraph (a)(2)(xiii)(B) makes management responsible for designating that individual for areas not specifically designed for cutting and welding.

Who signs a hot work permit, and what is each signature for?

Four roles sign a typical hot work permit: the contractor or crew supervisor, the area owner, the permit authorizing individual and the fire watch. Only the authorizing signature comes from the OSHA rule; the others come from your site procedure, so keep them visibly separate on the record.

• Contractor or crew supervisor: Requests the permit, describes the job, names the workers and the fire watch, and signs to accept the precautions.
• Area owner: The operations lead for that location. Confirms the process is in a safe state and that no conflicting work is planned nearby.
• Permit authorizing individual: Walks the area, checks combustibles, fire protection and the listed precautions, then issues the permit.
• Fire watch: Someone other than the hot work crew, who accepts the duty by name, confirms the extinguisher and alarm point, and signs again when the watch ends.

Hard-code one rule: whoever requests a permit cannot authorize it. Self-approval removes the second pair of eyes the permit exists to provide.

What must a hot work permit capture?

A hot work permit must capture the job, the exact location, the time window, the hazards found, the precautions required and the person responsible for each. A field that is missing from the form cannot be used by the routing rules to choose approvers.

• Job details: The type of hot work (welding, cutting, brazing or grinding), the equipment and the work order.
• Location: Building, area and point of work, picked from a site register rather than typed, so rules can read it.
• Time window: Planned start, planned end and shift.
• Hazard checks: Combustibles near the work, wall or floor openings, combustibles behind metal partitions, flammable vapors or dust, and sprinkler and detection status.
• Precautions: Combustibles moved or shielded, gas test readings, fire blankets, extinguisher position, and any detector isolation with whoever restores it.
• Linked permits: Confined space, isolation or work at height permits for the same job, so cancelling one suspends this one.

Use yes or no answers wherever a rule depends on them. A free text note saying the area is mostly clear cannot drive routing.

How should routing rules work by location and risk?

Routing rules should read the location class and the hazard answers on the form, then choose the approvers and the order in which they sign. Keep those rules in a table the EHS team can edit, not buried in application code.

• Step 1, location class: The site register marks every area as a designated hot work area, a general area or a restricted area such as a tank farm or flammable store.
• Step 2, designated areas: Work in an area set aside for cutting and welding follows that area's standing procedure rather than a per-job permit.
• Step 3, general areas: Route to the area owner, then to the authorizing individual, who inspects and issues. Assign a fire watch whenever the hazard answers call for one.
• Step 4, restricted areas: Add a second approver, such as the fire protection lead, and require gas test readings before the permit can be issued.
• Step 5, blocking answers: If sprinklers are impaired or an explosive atmosphere is possible, stop routing and send the request to the EHS manager instead of asking an approver to override it.
• Step 6, escalation: If an approver has not acted within the time your site sets, notify their deputy. Never approve automatically on a timeout.

Resolve approvers by role and shift, never by a fixed person. A rule pointing at one person's inbox stalls the first week they are on leave.

How do fire watch and post-work monitoring fit into the workflow?

The fire watch is a workflow state of its own. It starts when hot work stops, runs for a set period, and the permit cannot close until the watcher signs that the area is clear.

OSHA's rule at 29 CFR 1910.252(a)(2)(iii) requires fire watchers whenever more than a minor fire might develop, including where appreciable combustible material sits closer than 35 feet to the point of operation. The same paragraph requires the fire watch to be maintained for at least half an hour after welding or cutting is finished, to detect and put out smoldering fires.

Many sites also follow NFPA 51B, the NFPA standard for fire prevention during welding, cutting and other hot work. Its watch and monitoring periods can differ from the OSHA minimum, so set the timer from whichever document your procedure and insurer require, and store that value in the routing table.

• Work stopped: The crew marks hot work complete, which starts the watch timer and alerts the named fire watch.
• Watch period: The app shows the time remaining and, if your procedure asks for it, prompts for photo check-ins.
• Later monitoring: A follow-up check by the area owner or a patrol is scheduled as a separate task with its own sign-off.
• Area clear: The fire watch signs that no smoldering material remains, and only then does the permit move to closeout.

When should a hot work permit expire, and how is it closed out?

A hot work permit should expire at the end of the window it was issued for, often a single shift, and be closed out by a named person once the fire watch is cleared. The validity period is a site decision; enforcing it is the workflow's job.

• Expiry: At its end time the permit turns invalid and the start work action disappears.
• Extension: An extension goes back to the authorizing individual, who confirms nothing has changed. Long jobs are safer with a fresh permit each shift.
• Suspension: A fire alarm, gas alarm, process change or cancelled linked permit suspends the permit at once and notifies everyone named on it.
• Closeout: After the watch sign-off, the authorizing individual or area owner inspects the area and closes the permit, once any isolated detector is confirmed back in service.
• Overdue permits: A permit past its end time without closeout stays on the area owner's dashboard until it is closed.

How do you handle contractors in hot work permit routing?

Treat a contractor permit as a normal permit with extra gates in front of it. The contractor company, each worker and the host sponsor must all be cleared before the request reaches an approver.

The host site carries a duty here too. Under 29 CFR 1910.252(a)(2)(xiii)(D), management must advise all contractors about flammable materials or hazardous conditions of which they may not be aware, so the hazard briefing belongs inside the permit flow.

• Company status: The contractor is on the approved list, with current insurance and safety documents on file.
• Worker competence: Every named worker holds the training and induction your procedure requires, checked against expiry dates.
• Host sponsor: A named employee owns the contractor's job and receives the request before the area owner.
• Hazard briefing: The area owner's notes on local hazards are shown to the contractor supervisor, who acknowledges them when signing.

What should the audit trail record?

The audit trail should record every change of state on the permit, who made it, when, from which device and with what evidence, in a log nobody can edit afterwards.

• Events: Requested, approved, rejected, issued, work started and stopped, watch started and cleared, suspended, extended and closed.
• Identity: The signer, their role and the routing rule that selected them, so an auditor can see why that person approved.
• Evidence: Photos before work and after the watch, gas test readings, and the checklist answers as they stood at each signature.
• Rule version: The routing table and form version in force when the permit was issued.
• Overrides: Any manual reroute, with the reason and the person who made it.

Store permits as append-only records. A field changed after signing should void that signature and send the permit back for approval.

What are the best practices for automating hot work permit approval?

The best practices keep people accountable for the safety decisions and let the software do the chasing, checking and record keeping.

• Start from the paper form: Map every signature box and checkbox on your current permit to a field and a role before adding anything new.
• Keep the site visit: Tie the authorizing approval to a location check or a photo taken at the point of work, so issuing from a desk is not the easy path.
• Treat routing as data: EHS owners change approver rules in a table, and every change is reviewed and versioned.
• Design for dead zones: Plants and basements lose signal, so signatures captured offline should sync with their original timestamps.
• Pilot one area: Run one unit for a few weeks, compare approval times and missed steps against paper, then widen the rollout.

How Agnotic can help

Agnotic Technologies builds permit-to-work software for plant and site teams: digital hot work forms, role-based routing tables, fire watch timers, offline mobile signing and audit logs. The work starts from your existing permit and procedure, and connects to the EHS platform or CMMS you already run.

Sources

• OSHA: 29 CFR 1910.252, Welding, cutting and brazing general requirements
• 29 CFR 1910.252: General requirements (Legal Information Institute)