Digital Permit-to-Work for High-Risk Construction

Digital Permit-to-Work for High-Risk Construction

A digital permit-to-work system is a controlled, electronic record that authorizes a specific high-risk task, on a specific site, for a specific window of time, by named and verified people after the hazards have been checked and the controls confirmed.

It replaces the paper permit clipped to a hot work cart or taped to a manhole cover, and exists because the paper version fails in predictable ways: the permit is signed by someone who never saw the space, it is filed by trade rather than location so nobody realizes two permits conflict, and it cannot be found when an inspector or an insurer asks for it. BiltOn's Safety Intelligence ties pre-task plans, hazard analyses, inspections, and orientation to a worker's verified identity at the gate, and this guide covers what the permit layer on top of that record has to do.

What does OSHA actually require for a permit-to-work?

OSHA asks for less than most people think for hot work, and more than most people think for confined spaces. Lockout falls somewhere in between.

Hot work (welding, cutting, grinding): The construction hot work rule says you need fire extinguishers nearby, you must move or cover anything that can burn, you need a fire watch when there's a risk, and you can't weld near flammable materials. It doesn't require a permit at all. The general industry rule comes closest. It says a supervisor should set safety steps, "preferably in the form of a written permit." So hot work permits on construction sites are a best practice. They come from factory rules, the NFPA 51B fire standard, and insurance companies, not from federal law.

Confined spaces (tanks, pits, manholes): This is the opposite. The construction rule at 1926.1206 lists 16 things every entry permit must include. Some of them are:

• What the space is and why workers are going in

• Who is allowed to enter, who stands watch, and who is in charge

• The hazards, and how they're blocked or controlled

• Air test results, with the initials of the person who tested

• Rescue plans, how workers will communicate, and what equipment they need

• Any other permits for the same space, such as a hot work permit

That last item matters. It means OSHA expects permits to point to each other. The rules also say the controlling contractor must share hazard information with every company sending workers into the space. The contractor must coordinate when more than one company is working in or near it, and meet with them afterward to review how it went. The general industry rule says closed-out permits must be kept for at least one year so the program can be reviewed.

Lockout (shutting off power before work): This one surprises safety teams who move from factories to job sites. In a letter dated November 16, 2000, OSHA said its main lockout rule, 1910.147, doesn't apply to construction. Construction falls under 1926.417 and rules for specific equipment instead. That doesn't make lockout optional. It means your permit program has to fill in the steps the construction rules leave out. It's also a common problem: according to the National Safety Council, lockout was OSHA's fourth most-cited violation in fiscal year 2025, with 2,177 citations.

Why do paper permits fail, and what does it cost?

The worst permit failure on record happened on an oil platform called Piper Alpha. On the night of July 6, 1988, workers took a safety valve off a pump to fix it and sealed the pump shut. One permit said the pump was down. A second permit covered starting it back up. The two permits were never linked.

According to the IChemE account of the disaster, permits in the safety office were sorted by type of job, not by where the work was happening. So the night crew never saw that the valve was missing, and they turned the pump back on. The platform exploded, and 167 people died. The problem wasn't a missing permit. The permits just couldn't "see" each other.

Construction sites have the same problem on a smaller scale, many times a year:

• Hot work deaths: The U.S. Chemical Safety Board's Seven Key Lessons came from 11 hot work accidents that killed 16 workers. The main lessons are to test the air, check the area, and make sure the person signing the permit has actually checked the conditions.

• Fire risk: Zurich's insurance data shows that hot work causes 15 percent of all business and factory fires.

• Cost of poor management: FM Global found that the average fire loss was about $123,000 with a well-run hot work program, compared with $5.1 million with a poorly run one. That's 41 times more. The difference comes from how the work was managed, not from the torch.

• Yearly fires: The NFPA counts an average of 3,396 building fires started by hot work each year from 2017 to 2021. Those fires caused 19 deaths, 120 injuries, and $292 million in damage each year. Welding torches were the top cause.

Confined spaces, like tanks, pits, and manholes, cost lives. The Bureau of Labor Statistics reports that 1,030 workers died in confined space accidents from 2011 to 2018. In July 2025, OSHA proposed a $602,938 fine against Clean Harbors for confined space safety failures in Twinsburg, Ohio. That's the cost of a single program breakdown, before any lawsuit. Across all of construction, 1,034 workers died on the job in 2024, more than in any other private industry. Jobs that require permits make up a large share of those deaths.

What has to be in a digital permit-to-work system?

A digital permit is not a PDF of the paper form. The regulations and the failure history point to seven capabilities that separate a permit system from a form builder, and an enterprise GC should evaluate any platform, including ours when the module ships, against all seven.

The first row is the one that distinguishes a Safety Intelligence platform from a forms tool. Most permit software captures a signature; very little of it can prove who the signer was, whether that person was on site at the time, and whether their training was current. BiltOn's 3D facial verification at the turnstile creates that proof for every worker profile, and the permit workflow on our roadmap is being built on top of it rather than beside it, so a permit can only be signed by a person the gate already verified. The distinction matters because the same identity record is what turns a permit from a compliance artifact into a leading indicator, which is the premise of Predictive Safety Management.

How does a permit differ from a pre-task plan or a JHA?

They overlap, and teams conflate them. A job hazard analysis is a planning document that breaks a task into steps and assigns controls to each hazard; it is written once and reused. A pre-task plan is a daily, crew-level review of the work ahead and the controls for it; the Dodge and CPWR 2023 SmartMarket Report found 98 percent of contractors use one at least sometimes and 84 percent of advanced users report reduced recordable injury rates. A permit is neither. It is an authorization, issued by someone with the authority to say no, that a specific high-risk task may begin now because the pre-conditions have been verified. The JHA tells you what the hazards are, the pre-task plan tells the crew how today's work will address them, and the permit is the gate that confirms the controls are actually in place before the torch lights or the hatch opens.

The practical consequence is that a permit system should consume the other two rather than duplicate them. A hot work permit should pull the relevant JHA and the day's pre-task plan into its record, so that the authorizing supervisor sees the full picture, and so that the record, six months later, shows what the crew knew and when. That is how the pre-task plan every crew will actually use and a practical JHA guide connect to the permit layer, and it is why BiltOn treats them as one verified record rather than three forms.

What does the audit-ready permit record look like?

Insurers and OSHA compliance officers ask the same three questions after a hot work fire or a confined space incident: who authorized the work, what did they verify before authorizing it, and who was in the area. A paper permit answers the first with a signature that may or may not be legible, the second with checkboxes, and the third not at all. A digital permit tied to verified identity answers all three with timestamps, and it answers the fourth question that counsel will ask, which is whether the record was altered afterward. The Dodge and CPWR 2023 report found 47 percent of contractors either collect no safety data or do not use most of what they collect; permit records are the highest-value data most of them are leaving in a filing cabinet.

BiltOn's current platform captures the pieces of that record today: verified check-in and check-out for every worker, digital pre-task plans and JHAs, inspections, incident and near-miss reports, and a document management layer that holds them by site and worker. The permit module on our roadmap adds the authorization, cross-referencing, and expiry logic on top. Clients report a 37 percent increase in safety log and checklist completion within three months and a 50 percent decrease in observation time-to-resolve within six months, both client-reported, and those are the behaviors a permit program depends on. The claims-defensibility case for a site record that holds up applies with particular force to permit-controlled work, because the losses are large and the questions are specific.

Request a demo and we will show you how BiltOn puts this to work on your sites. Book a demo at bilton.tech/demo.

Executive takeaway

OSHA does not require a hot work permit in construction under 1926.352, but 1926.1206 requires sixteen specific items on every confined space entry permit, including cross-references to other permits, and 1926.1203(h) makes the controlling contractor responsible for coordinating entries across employers. Lockout in construction falls outside 1910.147, so the permit program has to supply that structure. Paper permits fail because they are signed without verification, filed by trade instead of location, and unrecoverable when asked for, which is the pattern behind Piper Alpha and behind the 15 percent of commercial fires Zurich attributes to hot work. FM Global's data puts the average managed hot work loss at $123,000 against $5.1 million unmanaged. A digital permit-to-work system needs verified identity on every signature, task and location scope, cross-referenced permits, evidence-backed pre-conditions, live expiry, closeout, and searchable retention. BiltOn provides the verified identity and field record today; the permit module is on the roadmap and will be built on that record.

Frequently Asked Questions

1. Does OSHA require a hot work permit on construction sites?

No, it does not. The construction standard at 29 CFR 1926.352 requires fire prevention measures such as extinguishers, combustible removal, and a fire watch where needed, but it does not mention a permit. The general industry rule at 1910.252(a)(2)(iv) says precautions should be designated “preferably in the form of a written permit.” Hot work permits in construction come from NFPA 51B, insurer requirements, and owner specifications rather than a federal mandate.

2. What must a confined space entry permit contain in construction?

29 CFR 1926.1206 lists sixteen required items: the permit space, purpose of entry, date and duration, authorized entrants, attendants, entry supervisor, hazards, isolation and control measures, acceptable entry conditions, atmospheric test results with tester initials, rescue and emergency services, communication procedures, required equipment, other information needed for safety, and any additional permits such as hot work issued for the space.

3. What is the difference between a permit-to-work and a pre-task plan?

A pre-task plan is a daily, crew-level review of the work ahead and its controls. A permit-to-work is a formal authorization, issued by someone with authority to refuse, that a specific high-risk task may begin because the pre-conditions have been verified. A permit should reference the pre-task plan and the job hazard analysis rather than repeat them.

4. Does BiltOn have a permit-to-work module?

BiltOn's Permit & Hazard Management module is on the product roadmap. Today the platform provides the foundation a permit program depends on: 3D facial verification of every worker at the gate, digital pre-task plans and JHAs, inspections, incident and near-miss reporting, and searchable document management by site and worker.

References

• Occupational Safety and Health Administration. 29 CFR 1926.352, Fire Prevention; 29 CFR 1910.252, Welding, Cutting, and Brazing

• Occupational Safety and Health Administration. 29 CFR 1926.1206, Entry Permits; 29 CFR 1926.1203, General Requirements; 29 CFR 1910.146, Permit-Required Confined Spaces

• Occupational Safety and Health Administration. (2000). Standard Interpretation, November 16, 2000: Applicability of 1910.147 to Construction

• National Safety Council. (2025). OSHA Top 10 Safety Violations Show Persistent Risk

• Institution of Chemical Engineers. Piper Alpha: The Disaster in Detail

• U.S. Chemical Safety and Hazard Investigation Board. (2010). Seven Key Lessons to Prevent Worker Deaths During Hot Work In and Around Tanks

• Zurich Resilience Solutions. Hot Works: A Rising Concern for Fire Risks

• FM Global. (2015). New FM Global Hot Work Permit App Helps Businesses Manage Fire Risk

• National Fire Protection Association. Structure Fires Started by Hot Work

• U.S. Bureau of Labor Statistics. Fatal Occupational Injuries Involving Confined Spaces, 2011–2019; (2026). Fatal Work Injuries Declined in 2024

• U.S. Department of Labor. (2025). OSHA Proposes $602,938 in Penalties Against Clean Harbors

• Dodge Construction Network and CPWR. (2023). Safety Management in the Construction Industry 2023 SmartMarket Report

• BiltOn. (2026). What Is Predictive Safety Management?; The Pre-Task Plan Template Every Crew Will Actually Use; Job Hazard Analysis (JHA): A Practical Guide and Template; Claims Defensibility: Building a Site Record That Holds Up