Every week, contractors walk onto small industrial and facility sites to do work the in-house team can’t: welding a bracket, servicing a boiler, cutting into pipework, working at height in a plant room. Most of the time it goes fine. But if it doesn’t. If someone gets hurt, the first question an HSE inspector asks is simple: who authorised that work, and can you prove it?
For a lot of smaller sites, the honest answer is “not really.” That’s the gap a permit to work closes. This is a plain-English guide to what a permit to work is, when your site needs one, and why permit to work for small businesses so often falls down in practice.
What is a permit to work?
A permit to work is a formal, written system that states exactly what work is being done, when, and which parts of the site are safe to work on. A responsible person assesses the job and confirms the precautions before it starts, and the people carrying it out sign to show they understand the risks and the controls.
At its core, it’s a communication tool — a documented handshake between whoever manages the site, whoever supervises the work, and whoever actually does it. The HSE’s HSG250 guidance is the recognised reference for how these systems should work. Worth being clear on one thing it stresses: issuing a permit does not, by itself, make a job safe. The permit is what makes sure the thinking has been done and everyone’s agreed on it.
When does your site actually need one?
You don’t need a permit for every visiting contractor. You need one for higher-risk work, where a lapse could seriously hurt someone. The HSE gives clear examples of jobs where a written permit is expected:
- Hot work — welding, cutting, grinding, anything with a flame or spark risk
- Confined space entry — tanks, vessels, pits, silos
- Cutting into pipework carrying hazardous substances
- Electrical or mechanical isolation — work on plant that has to be made safe first
- Working at height in and around your plant and machinery
If your site has a plant room, a boiler, machinery under maintenance, or contractors doing any of the above, permit-to-work isn’t a nice-to-have. It’s the control the HSE will expect to see.
A quick note on the law: following HSG250 isn’t compulsory in itself — the HSE says you’re free to take other action that achieves the same result. But if you follow it, you’ll normally be doing enough to meet your duties under the Health and Safety at Work Act. Ignoring it and having nothing in its place is the position you don’t want to be in.
Why permit to work for small businesses often falls down
Big industrial operators have dedicated safety teams and permit systems built in. Smaller sites, e.g a single factory, a leisure centre, a care home, a distribution unit — usually don’t. And that’s exactly where the cracks appear:
- It lives on paper. A pad of permits in a drawer, filled in when someone remembers, illegible six months later, and impossible to find when you actually need it.
- Nobody owns it. On a small team, the person who should authorise the work is often the same person who’s too busy to be there when the contractor arrives.
- The contractor’s paperwork never connects to yours. Their RAMS (risk assessment and method statement) sits in an email; your permit sits in a folder; nothing ties them together.
- There’s no trail. When you need to show who authorised what, and that the contractor read your rules, you’re relying on memory.
None of this means small sites are careless. It means the tools most of them use, paper and goodwill, don’t hold up when it matters.
What a good permit-to-work process looks like
Strip it back and a sound process has three clear stages, each owned by the right person:
- Authorise. The person accountable for the site approves the work up front, setting the scope and the conditions it can go ahead under.
- Issue. A supervisor issues the permit for the specific job, with the right controls attached. The permit type should match the hazard, not be copied from the last one.
- Sign on. The contractor confirms they’ve read the method statement and your site rules, and signs to accept the permit before starting.
Every stage should be recorded, with a name, a role and a time against it. Therefore, the whole thing is auditable after the fact, not reconstructed from memory. And it should sit alongside the contractor’s RAMS, not separate from it, so the risk assessment and the permission live in the same place.
You don’t need heavy software to do it well
The instinct is that “proper” permit-to-work means an expensive enterprise system. For a small site, that’s overkill, and the cost is usually why it never gets sorted. But paper isn’t the only alternative.
A simple digital permit-to-work process gives you the accountability and the audit trail without the enterprise price tag: the site manager authorises, the supervisor issues, the contractor signs on their own phone, and every step is logged automatically. If it runs on a device you already have at reception. The same kiosk handling your visitor sign-in and fire roll-call, there’s no new hardware and nothing extra for your team to learn.
That’s exactly the approach we’ve built at Noon Elite: a digital permit-to-work and RAMS add-on that runs on your existing check-in kiosk, so contractor sign-off and your fire roll-call live on one device.
Want to see how it would work on your site? Book a free 10-minute site assessment and we’ll show you the permit flow end to end.
