Free Cold Work Permit Template (UK, HSE-Aligned)

Most people associate permits to work with hot work — welding, cutting, grinding. That makes sense: fire is dramatic, visible, and easy to understand as a hazard. But a significant proportion of serious injuries and fatalities on UK sites happen during "cold" work — maintenance, equipment removal, valve operations, and mechanical tasks that produce no sparks at all.

A cold work permit controls the risks that are easy to overlook precisely because there is no obvious ignition source. Residual pressure in a pipe. Stored energy in a spring-loaded mechanism. Chemical residue in a vessel that was "emptied" last week. These are the hazards that cold work permits exist to catch.

What Is Cold Work?

Cold work is any maintenance, repair, or installation task that does not involve sparks, flames, or significant heat generation. HSG250 does not use the term "cold work" directly — it describes permit types by the hazard they control, not by the absence of heat. In practice, "cold work permit" is the standard industry term for non-hot work activities that still require formal authorisation because of their risk profile.

Common cold work activities:

Mechanical stripping and dismantling — removing pumps, motors, actuators, or equipment components
Valve operations — opening, closing, or removing valves on pipework carrying hazardous substances
Chemical cleaning — flushing or cleaning vessels, tanks, or pipework
Equipment removal — unbolting flanged connections, breaking joints, removing sections of pipework
Instrument calibration in hazardous areas — working with instrumentation in zones where flammable atmospheres could be present
Non-sparking tool work — using brass or beryllium copper tools in DSEAR-classified areas

The common thread: the work itself does not produce heat, but the system being worked on contains hazards (pressure, chemicals, stored energy) that require formal control before anyone touches it.

When Do You Need a Cold Work Permit?

Not every piece of cold maintenance needs a permit. Changing a light fitting in a corridor does not warrant one. The threshold is the same as any PTW decision: does the risk assessment identify hazards that cannot be adequately controlled by standard method statements and toolbox talks alone?

A cold work permit is typically required when:

Breaking into any system that has contained hazardous substances — even if it has been "drained." Residual liquids, vapours, and sludge deposits are the hazard, not the substance in bulk.
Working on pressurised systems — hydraulic, pneumatic, steam, or process pressure. Residual pressure in a dead-leg or trapped section can release violently when a flange bolt is removed.
Isolating safety-critical equipment — fire suppression systems, emergency shutdown systems, pressure relief valves. Taking these out of service for maintenance creates a temporary vulnerability that must be formally managed.
Working in or adjacent to DSEAR-classified zones — DSEAR 2002 requires that all activities in explosive atmosphere zones are controlled. Even cold work with non-sparking tools needs a permit to confirm the atmosphere is safe and the area has been tested.
Any task where the isolation is complex — multiple energy sources, multiple isolation points, or where the isolation affects other systems or other workers on site.

If you are unsure whether a particular task needs a cold work permit, our PTW readiness checker can help you assess whether your current system covers the right scenarios.

What the Template Should Include

A cold work permit template follows the same core structure as other permit types — identification, hazards, controls, authorisation, close-out — but with sections specific to the "cold" hazard profile. Here is what each section needs.

Section 1: Permit Details

Permit number — for tracking and audit
Date and shift
Valid from / valid until — cold work permits should be time-limited. A typical duration is one shift.
Site and specific location — be precise. "Plant room" is not sufficient. "Plant room level 2, chilled water pump P3" is.
Description of work — what is being done, to which equipment, using what method

Section 2: Isolation Schedule

This is the section that makes cold work permits different from other types. Cold work typically involves isolating one or more energy sources before work begins.

For each isolation:

Energy source type — mechanical, electrical, pneumatic, hydraulic, chemical, process
Isolation point — specific valve, breaker, or lock-out location
Isolation method — valve closed and locked, breaker open and locked out, blank/spade inserted
Lock-out/tag-out details — who applied the lock, lock number, tag text
Confirmation that the system is de-energised — pressure gauge at zero, voltage test negative, drain valve opened

If multiple isolations are required, list each one separately. A cold work permit with "isolations complete" as a single tick box is not sufficient — the permit should record each isolation individually so that each can be confirmed removed at close-out.

Section 3: Residual Hazard Assessment

Even after isolation, the system may contain residual hazards:

Residual pressure — trapped in dead-legs, behind closed valves, in accumulators
Residual chemicals — sludge, scale, deposits, vapours in an "empty" vessel
Stored mechanical energy — springs, counterweights, elevated loads
Temperature — recently drained hot water or steam systems
Atmospheric hazards — in adjacent DSEAR zones or from disturbed residues

For each residual hazard identified, the permit should record the specific control measure applied (e.g., "dead-leg vented to atmosphere via drain valve DV-07").

Section 4: Precautions Checklist

Risk assessment reviewed and specific to this task
All isolations confirmed in place (cross-reference isolation schedule)
System confirmed de-energised / depressurised / drained
PPE requirements specified and available (gloves, goggles, face shield, chemical suit as needed)
Spill containment in place if system contains liquids
Adjacent operations notified (other trades, plant operators)
Area barriers and signage installed
Atmospheric monitoring in place if working in or near DSEAR zones
Emergency response equipment accessible (eyewash, spill kit)

Each item should be individually ticked and initialled by the person who verified it — not bulk-completed after the work has started.

Section 5: Authorisation

Two signatures:

Permit applicant — the person carrying out the work, confirming precautions are in place and they understand the conditions
Permit authoriser — the person who has inspected the area, verified the isolations, and confirmed the work can proceed safely

This dual-signature requirement is the backbone of any permit-to-work system. For cold work, the authoriser should physically verify at least one isolation point — not just review the paperwork.

Section 6: Close-Out and De-Isolation

When the work is complete:

Work area inspected and left clean
All tools and equipment removed from the system
System integrity restored (flanges re-bolted, connections re-made)
Each isolation removed in reverse order (referencing the isolation schedule)
System tested and returned to service
Any incidents or issues noted for follow-up
Signed off by permit holder and authoriser

The de-isolation sequence matters. Removing isolations in the wrong order — re-energising before reconnecting — can create hazards. The close-out should follow the isolation schedule in reverse.

Common Mistakes

Treating cold work as low risk. The absence of sparks does not mean the absence of danger. A pressurised hydraulic line releases stored energy explosively. Residual chlorine gas in a "flushed" pipe can be lethal. The permit exists because these hazards are invisible until they are released.

Single-line isolation. Closing a valve is not always sufficient isolation. Valves leak. Double-block-and-bleed isolation, spade insertion, or physical disconnection may be needed depending on the substance and pressure involved.

Copying yesterday's permit. Conditions change. Yesterday's isolation may have been disturbed, equipment may have been re-energised, or adjacent work may have introduced new hazards. Every cold work permit should be assessed fresh.

Skipping the residual hazard check. "The pipe was drained last week" is not a confirmation that it is empty now. Condensation, groundwater ingress, or upstream leakage past a closed valve can re-introduce hazards into a supposedly empty system.

Paper vs Digital

Cold work permits require more documentation than most other types — the isolation schedule alone can run to multiple entries. On paper, this means cramped handwriting on a form that was not designed for complex isolations. Missed entries, illegible lock numbers, and incomplete de-isolation records are common.

A digital permit system with structured isolation fields — where each isolation point is entered, confirmed, and then individually signed off during close-out — eliminates these problems. The record is clear, complete, and auditable.

Our guide to digital permits covers how the digital workflow compares to paper across all permit types.

PermitPad is building digital permit templates including cold work, with guided isolation schedules and mandatory de-isolation close-out. Join the waitlist to try it when it launches.

Key References

HSG250 — Guidance on permit-to-work systems (HSE)
DSEAR 2002 — Dangerous Substances and Explosive Atmospheres Regulations
Pressure Systems Safety Regulations 2000 — for work on pressurised systems
L101 — Safe work in confined spaces (relevant where cold work overlaps with confined space entry)

For a complete overview of all permit types and when each is needed, see our types of permit to work guide.