Health & Safety
EHS decisions that hold up when the inspector asks how you decided
Safety programs do not fail for lack of a form. They fail because the reasoning behind a recordability call, an accepted risk or a reopened permit lives in somebody's memory. Every model here reports what the record establishes and names what is missing. None of them makes the safety determination for you.
Challenges We Solve
Common pain points that structured decision models eliminate.
Recordability Decided By Instinct
Whether a case belongs on the OSHA 300 is a legal test, not a judgment call, and the answer is re-argued every time. Apply 29 CFR Part 1904 and keep the reasoning chain that produced the determination.
Accepted Risk Nobody Revisits
A hazard accepted two years ago by someone who has left is still accepted. Rank every accepted risk by how defensible it is today, worst first, with the acceptance and its owner on the record.
Near Misses Sorted By Likelihood
A likely sprain outranks an improbable fatality on any frequency-sorted list. Rank on expected harm with a floor for catastrophic potential, so the one that could have killed someone cannot sort to the bottom.
Corrective Actions That Disappear
The action item raised in a safety committee, an incident review and a hazard triage all live in different places. They arrive in one inbox, and the ones nobody owns are separated from the ones that are merely late.
Use Cases
How teams use DecisionLedger to make better decisions.
Runs recordability on every case as it is reported rather than reconstructing the log in January, so each determination carries the Part 1904 reasoning that produced it and the 300A is assembled from decisions already made.
A year-end log with a documented basis for every entry and omission
Reviews the accepted risk register quarterly, ranked by how defensible each acceptance is today rather than by when it was signed, and reopens the ones whose evidence has aged out.
Stale acceptances found before an inspector finds them
Checks permit preconditions before hot work rather than after, with an effective expiry computed from the earliest of the permit window and every precondition that decays on its own clock.
The governing constraint named, instead of assumed to be the permit date
Reads the reasoning chain behind a contested recordability determination two years after the fact, including what the model could not establish at the time.
A defensible answer to how the call was made, not just what it was
Measurable Impact
Based on platform benchmarks across early adopters.
Recordability
Argued case by case
Part 1904 with a reasoning chain
Accepted Risk
A signed form in a folder
Ranked by current defensibility
Near Misses
Sorted by frequency
Ranked on expected harm
Corrective Actions
Spread across four systems
One inbox, owner resolved
Training
One compliance percentage
Aged by requirement and criticality
Compliance on Autopilot
Every HR decision model includes built-in regulatory compliance checks. Always audit-ready, never scrambling before a review.
OSHA 29 CFR 1904
Recordability determination for injury and illness cases, with the reasoning chain retained and the 300 and 300A rendered from it.
OSHA 29 CFR 1910.147
Lockout/tagout return-to-service preconditions, including group lockout and removal of another employee's device. Reports what the isolation record shows, never that equipment is safe to energise.
OSHA 29 CFR 1910.38
Emergency action plan tested against each scenario it covers, reporting unmet requirements rather than scoring a plan adequate.
OSHA multi-employer worksite
Which employer held which category for a hazard over time, reporting gaps and conflicting control claims rather than resolving them.
ADA interactive process
Return-to-work records checked against the interactive process and direct-threat standard. Makes no fitness determination and accepts no diagnosis.
BLS industry rates
TRIR and DART compared against published industry rates, with a site below the minimum exposure reported as such rather than ranked.
A Safety Portal, Not A Reporting Form
Hazard intake through to a signed acceptance, with the parts an EHS lead actually spends the week on.
OSHA Log And Recordability
Apply 29 CFR Part 1904 case by case and keep the reasoning chain. The 300 and 300A are rendered from the determinations, so the log and the decisions behind it cannot diverge.
Risk Acceptance Register
Every accepted hazard risk with who accepted it, on what evidence, and how defensible that acceptance looks now. Ranked worst first rather than filed by date.
Routing Rules And Escalation
A reported hazard reaches an owner by rule rather than by whoever saw it. Unanswered items escalate on a clock, and the escalation is part of the record.
Training Compliance
Every requirement aged against its own expiry and reported by criticality, producing a work list rather than a single percentage that hides the expired ones.
Safety Committee
Joint labour-management resolutions tracked through to completion, with the ones nobody owns or dated separated from the ones that are simply late.
Corrective Actions In One Inbox
Safety corrective actions appear in DecisionTasks alongside committee, board, bias and lineage work, linking back to the safety record that owns them.
Connects With
Part of 150+ native integrations across CRM, marketing, finance, HR, ecommerce, and analytics
Salesforce
HubSpot
Stripe
Shopify
Google Analytics 4
Workday
QuickBooks
Snowflake
Slack
Zendesk
GitHub
Meta Ads
Mailchimp
NetSuite
Jira
Power BISalesforceHubSpotStripeShopifyGoogle Analytics 4WorkdayQuickBooksSnowflakeSlackZendeskGitHubMeta AdsMailchimpNetSuiteJiraPower BIFeatured Models
Pre-built decision models ready to run with your data.
Contractor Safety Qualification
Screens contractor safety records against weighted criteria, refusing to score EMR and TRIR below a minimum exposure and checking expiry on every dated element. It produces no approve or reject decision.
Ergonomic Risk Scoring
Scores musculoskeletal exposure of a task across repetition, posture, force, vibration and contact stress, with duration as a multiplier, and flags tasks whose risk is cumulative rather than single-factor.
Hazard Risk Acceptance Register
Score how defensible each accepted hazard risk currently is, ranked worst-first.
Incident Root Cause Analysis
5 Whys over a fishbone categorisation, flagging analyses that stop at a person and ranking corrective actions by the hierarchy of controls.
JHA Drift Scorer
Compares logged task execution against the documented Job Hazard Analysis and separates a stale document from an isolated deviation.
LOTO Return to Service
Reports which 29 CFR 1910.147(e) return-to-service preconditions the isolation record shows as satisfied, including group lockout and removal of another employee's device. It never determines that equipment is safe to energise.
Near Miss Severity Classifier
Bayesian estimate of the probability a near miss would escalate, ranked on expected harm with a priority floor for catastrophic potential so an improbable fatality cannot sort below a likely sprain.
OSHA Recordability Determination
Apply 29 CFR Part 1904 to injury and illness cases and return a recordability determination with its reasoning chain.
Permit to Work Compliance
Reports whether a hot work, confined space, excavation or live electrical permit is in force, computing an effective expiry from the earliest of the permit window and every precondition that decays on a clock, and naming which one governs.
PPE Adequacy Assessment
Reports the protection workers actually get - the assigned factor degraded by usage and fit - against the required factor and the hierarchy of controls, with cost per unit of exposure reduction.
Safety Culture Signal
Reads reporting rate, first-response time, closure rate and participation as leading indicators of safety culture, scoring reporting so that higher is better and producing nothing keyed to an individual.
Safety Training Compliance Dashboard
Ages every training requirement against its own expiry and reports by criticality rather than as a single rate, producing a work list rather than a per-manager score.
How It Works
Three steps to structured, auditable decisions.
Report And Triage
A hazard is reported from the portal, a phone, or an assistant conversation. Routing rules put it in front of the right owner, and the clock starts on the record rather than in an inbox.
Determine And Document
Run recordability, severity, root cause or permit preconditions. Each returns its reasoning, its confidence and what it could not establish, and attaches to the case.
Close And Prove
Corrective actions land in one inbox across every module. The OSHA log, the risk acceptance register and the committee record are assembled from what actually happened, not rebuilt for the audit.
An inspector asks why a case was not recorded, and the honest answer is that somebody decided it was not. Where is the reasoning, who accepted the hazard that caused it, and can you show either of them two years later?
Spreadsheet OSHA logs
A list of entries with no record of why anything is on it, or off it
Signed risk acceptance forms
Acceptances that are never revisited and outlive the person who signed them
Incident rate dashboards
A single rate that improves when reporting drops, and says nothing about the tail
Standalone EHS suites
Safety work sealed off from the decisions, committees and evidence the rest of the organisation runs on
Training completion percentages
One number that hides which critical certifications expired last month