Permit to Work Books vs a Digital System

A pad of permit-to-work forms costs a few pounds and works from the moment it arrives. A digital system costs more per month and takes a week or two to set up. For most small sites the honest answer is that paper is fine — right up until the point where you cannot find a permit from four months ago, or you discover that a third of last quarter's permits were never closed out.

This guide compares the two on the things that actually decide it: what each costs, what each does when an inspector asks for records, and the specific signals that mean a site has outgrown the pad.

This guide covers UK practice and references HSE guidance. Legislation and standards may differ in other jurisdictions.

What you are actually buying

Permit books are pre-printed carbonless pads, usually in packs of 10 or 50, sold by safety suppliers and general stationers. You get a triplicate form — one copy displayed at the job, one for the issuer, one for the file — and often a rigid backing board or a weatherproof holder. Most suppliers sell them by permit type: hot work, confined space, electrical isolation, excavation, lifting, general.

They work because they are self-contained. No login, no signal, no training beyond "fill this in." On a site with three permits a month and one person issuing them, that is genuinely hard to beat.

A digital permit system replaces the pad with a structured form on a phone or tablet, plus a register that updates itself. The permit still gets displayed at the job — HSE guidance is explicit that this must remain possible, which is worth knowing before you assume digital means paperless.

What the law and guidance actually require

Neither format is mandated. The duty is on the system, not the stationery.

Section 2(2)(a) of the Health and Safety at Work etc. Act 1974 requires employers to ensure, so far as is reasonably practicable, "the provision and maintenance of plant and systems of work that are, so far as is reasonably practicable, safe and without risks to health." A permit-to-work system is one way of discharging that duty for high-risk work. The Act says nothing about how you record it.

HSE's HSG250 — Guidance on permit-to-work systems, first published 2005 — defines the system as "a formal recorded process used to control work which is identified as potentially hazardous." Recorded is the operative word. It is also guidance rather than law: HSG250 states that "following the guidance is not compulsory and you are free to take other action. But if you do follow the guidance you will normally be doing enough to comply with the law."

So the choice is genuinely yours. What HSG250 does do is set conditions on the digital option, which is the part most comparisons skip.

The six conditions HSG250 puts on electronic permits

This is the most useful passage in the document if you are evaluating a system, because it gives you a ready-made checklist. HSG250 says that "before introducing an electronic permit system operators must be sure that":

• a suitable system (for example password-protected electronic signatures) is in place to prevent unauthorised issue or acceptance
• permits cannot be issued remotely without a site visit
• systems are in place to prevent permits already issued from being altered without the alterations being communicated to all concerned
• the facility exists for paper permits to be produced for display at the job site
• training is provided to ensure that operators assess the specific job and do not rely on "cutting and pasting" existing sections from other permits
• suitable back-up systems are available in the event of a software failure or power outage

Two of these are worth pausing on, because they cut against the usual sales pitch.

"Permits cannot be issued remotely without a site visit." The convenience of authorising from an office is precisely the thing HSG250 warns against. If a system makes remote issue easy and does nothing to discourage it, that is a defect, not a feature.

"Do not rely on cutting and pasting existing sections from other permits." Templating is the main efficiency gain digital offers, and it is also the main way digital degrades permit quality. A system that pre-fills last week's hazards into this week's permit has automated the rubber-stamping problem rather than solving it.

Ask about both before you buy anything. They are HSE's questions, not ours.

Where paper genuinely wins

• Very low volume. Under about five permits a month, the admin overhead of any system exceeds the benefit. Buy the pad.
• No connectivity. Basements, tank interiors, rural sites and plant rooms. Digital systems that assume signal fail exactly where permits matter most. Offline capture is a real requirement, not a nice-to-have.
• A single issuer who is always on site. The register lives in one person's head and that works, until they are on leave.
• Occasional contractors who will never adopt your tooling. A visiting welder is not installing your app for one afternoon's work.

If three of those four describe your site, this is a short conversation. Keep the pad.

Where paper starts costing more than it saves

The cost of paper is not the pad. It is four things that only show up later.

Retrieval. HSG250 says permits "should be retained at site by the issuing authority for at least 30 days after completion, and then archived for a specified period to enable an effective monitoring and audit process." A filing cabinet satisfies that literally. It does not satisfy it usefully — the test is whether you can produce a specific permit from last March inside five minutes when an investigator asks.

Close-out rate you cannot see. Missing close-outs are one of the most common permit failings, and a paper register hides them by design. Nobody notices the gap because nothing counts the gaps. You find out at audit.

Interacting permits. HSG250 requires that "permits for work activities that may interact or affect other site activity are adequately controlled" and that "sufficient information is given to oncoming shifts about work for which there is a permit and which has not been completed." Both are oversight problems. With three live permits on one site, a whiteboard handles it. With nine live permits across three sites and two shifts, it stops being a memory task.

Re-issue effort. Every permit is written from scratch, including the fifteen fields that are identical every time. That is the cost that compounds quietly — and the one worth modelling before you decide.

Our free permit cost calculator puts numbers against the admin time those problems consume, using your own permit volume and admin time rather than a generic benchmark. The output is usually less dramatic than vendors suggest and more dramatic than site managers expect.

The four signals a site has outgrown the pad

In rough order of how strongly they predict it:

1. You cannot answer "how many permits are live right now?" without walking the site. This is the oversight failure, and it is the one that precedes incidents.
2. Close-outs are missing and you do not know the rate. If you cannot state your close-out percentage for last month, you do not have a register — you have a drawer. Our permit to work register guide covers what a functioning one holds.
3. More than one site, or more than one shift. Handover is where paper permits are most often lost, and HSG250 treats oncoming-shift information as a specific duty.
4. An audit has already found gaps. The permit to work audit guide lists what inspectors ask for first; if a previous audit flagged documentation, paper is now costing you more than it saves.

One signal is not enough. Three of the four usually is.

Making the decision

Run it in this order, and do not skip the first step:

1. Fix the system before changing the format. A digital version of a badly designed permit is still a badly designed permit — it is just faster to issue. Get the permit to work checklist right on paper first.
2. Count your real volume. Permits per month, issuers, sites, shifts. Most people overestimate.
3. Score the six HSG250 conditions against anything you are considering. Remote issue and cut-and-paste are the two that separate a serious system from a form builder.
4. Check the offline story honestly. Where do your permits actually get issued? If the answer includes places with no signal, that constraint outranks every feature comparison.
5. Keep the pad regardless. HSG250 wants paper permits producible for display at the job. A drawer of blank forms is your back-up for the power outage the guidance tells you to plan for.

If you are further along and want the mechanics of the switch itself rather than the decision, our guides on paper vs digital permits and the benefits of electronic permit to work systems go into what changes day to day.

PermitPad is building a digital permit-to-work system designed around the HSG250 conditions above — structured fields, enforced close-out, a register that counts itself, and permits that print for display at the job. Join the waitlist to see it when it launches.

Key references

• HSG250: Guidance on permit-to-work systems — HSE, first edition 2005. Paragraph 9 (definition), paragraph 51 (electronic permit conditions), paragraph 58 (retention). Written for the petroleum, chemical and allied industries "and other industries"; guidance, not law
• Health and Safety at Work etc. Act 1974, section 2 — general duties of employers, including safe systems of work at s.2(2)(a)

Disclaimer

This guide is for general information only. Whether a permit-to-work system is required, and what form it should take, depends on your specific work activities, site conditions and sector. Always consult a competent H&S professional and the applicable legislation and sector guidance for your circumstances.