The depth LOTO actually needs —
built in, not bolted on.
Most digital LOTO tools are a checklist with a logo. Setyr models how isolation really works: equipment with many energy sources, work that spans crews and shifts, locks that change hands, and a record that has to hold up long after the job is done.
What an inspector asks you to prove
A lockout program is not judged on whether it owns locks. It is judged on whether it can produce, for a specific machine on a specific day, the procedure that was used, the people who were trained to use it, the points they isolated, and the inspection that confirmed it still works. Every capability below exists because one of those proofs is the one that goes missing. See where citations actually come from →
Guided execution, step by step
Technicians work through equipment-specific procedures on any device — each isolation point confirmed as it is locked, tagged, and verified. The procedure enforces what must happen without forcing a rigid order where the field does not support one.
A tamper-evident record
Step status is never simply overwritten. Every confirmation, and every reversal, is recorded as a new entry in an append-only history — so the completed record shows exactly what happened, in what order, and by whom. That is the artifact an auditor actually wants.
Hierarchical work orders
Real shutdowns are not flat lists. Setyr models parent and child work orders, and every job in the tree carries its own isolation-point coverage — how many of its points are locked, out of how many it engages. A supervisor reads the whole shutdown in one view instead of opening each job in turn.
Group lockout
The question after an incident is which named person was protected at the moment the machine moved. Setyr answers it: each worker applies and accounts for their own lock, individually confirmed. No one is protected by someone else’s lock, and no one is missing from the record.
Person-in-charge governance
For programs that designate a person in charge of a lockout, Setyr makes the handoff explicit: the role can be assigned, accepted, declined, escalated, and signed off — each step confirmed by the individual and logged. It is opt-in per site, so programs that do not work this way never see it.
Two-person approval integrity
An approval chain where one person signed every box is an approval chain an inspector discounts. Where your program requires separation of duties, Setyr enforces it on the server — the same person cannot quietly fill more than one role. Per-site, because not every workforce is large enough to need it.
The phone in the field, not just the desk
Setyr has a dedicated mobile app for the people actually doing the isolation. It is deliberately lean — assigned work, the procedure walk, scan-verify, applying and removing your own lock — because a technician on a ladder or at a 480V cabinet does not need the procedure editor. Authoring stays on the web; the phone does execution.
Signal drops. The job does not.
Plant basements, tank farms and steel structures lose coverage. Field actions taken offline are queued on the device and synced when the signal returns, and the record keeps the time the operator actually acted — not the time the phone reconnected. Two-person verification is the deliberate exception: it never queues, because a second person confirming something is a live act or it is nothing.
Scan the point you are standing at
Scanning an isolation point’s QR or barcode checks it against the step in hand, so acting on the wrong valve or breaker is caught at the machine rather than in a review weeks later. The result is recorded on the step either way — a mis-scan is part of the permanent record, not a silent retry.
Training that gates the work
Qualification records track which roles a worker is trained for and when that training lapses. It is not a filing cabinet: an expired qualification is enforced at the point of work, so the system will not accept a lockout signature from someone whose authorization has run out.
Equipment and procedures, the way they really relate
A procedure can cover many pieces of equipment, and a piece of equipment can be served by many procedures. Setyr models that many-to-many reality directly instead of forcing an artificial one-procedure-one-machine simplification.
Periodic procedure review
OSHA requires procedures to be reviewed on a schedule. Setyr tracks review due-dates per procedure, ties each review to the specific version it covers, and surfaces what is coming due — so the annual inspection is something the system manages, not something you chase.
Permits that gate the lockout
Hot work, confined space, work at height, electrical, excavation, lifting — over fifty permit types, each with versioned templates you build from typed fields: gas readings, PPE, checklists, sign-offs. A gas reading can carry a safe range: an out-of-range value is always recorded — it is the evidence — and blocks the lockout until a new reading is in range, naming the reading in the refusal. A procedure can require a permit, and then the first isolation step is refused until that permit is issued. The work order cannot close while a permit is still open. When a permit expires mid-job, the work order goes on hold with the reason stated — never silently.
Proof you can hand to an inspector
Periodic-review attestation, a training and qualification matrix, and a date-ranged lock event log — each as an audit-ready PDF across every site you run. They report the whole population, not just exceptions, and every one states which sites it covers and names any it could not read. A clean report from Setyr means something specific.
One system for the whole LOTO lifecycle
Author
- Equipment-specific procedures with energy-source mapping
- Isolation-point sequencing with lock, tag, and verify steps
- Attach P&IDs, electrical drawings, and reference documents
- Procedure versioning and change control
Execute
- Guided execution on the web or the dedicated mobile app
- QR / barcode scan-verify at the isolation point
- Offline-tolerant field capture that syncs on reconnect
- Group and multi-technician lockouts
- Live isolation status for supervisors
- Permits that block lockout until issued and block close until closed
Prove
- Append-only record of every step and reversal
- Periodic-review tracking for annual inspection
- Training and qualification records enforced at the point of work
- Role-based access for operators, supervisors, and safety staff
- Audit-ready (c)(6), (c)(7) and event-log PDFs, coverage declared
- Scheduled report delivery to the people who need them
- Live cross-site lockout board that says when a site is not reporting
One organization. Many sites. Real separation.
Setyr is multi-tenant by design. Each customer’s sites are kept in separate data stores rather than sharing one pooled database filtered by a column — so one site’s data is never one query mistake away from another’s. It is separation built into the architecture, not a setting.
Above the sites, a customer portal rolls activity up across the whole organization: where lockouts are active, how work orders are trending, and where attention is needed — without losing the site-level detail each facility runs on day to day.
Site-level operations
Each facility runs its own equipment, procedures, work orders, and users.
Organization-level oversight
Cross-site reporting and work-order health rollups for safety leadership and admins.
Role-based access
Operators, supervisors, safety managers, and customer administrators each see what their role requires.
Tenant isolation by design
Customer data lives in separate stores — isolation is structural, not policy.
Deliberate design choices
Records reality — doesn’t pretend to be the lock
Setyr documents what was done; it does not hold your padlock hostage to a vendor’s connected hardware. The software is the system of record, not a gatekeeper on the physical lock — which keeps your program in your control.
Works with the locks you already own
Lock binding is hardware-agnostic. There is no proprietary connected padlock to buy for every isolation point — and none of the cost, battery replacement, cold-weather fragility, or hazardous-area certification upkeep that battery-powered electronic locks carry. Setyr is the software layer on top of the safety hardware you already trust.
Flexible where programs differ
Every operation runs LOTO a little differently. Setyr uses cascading site, work-order, and procedure settings so each customer can turn on the rigor they need and leave the rest quiet — without forking the product.
See it against your equipment
We will walk through how Setyr maps to your procedures, your isolation points, and your compliance requirements — using your environment, not a canned demo.