Best Confined Space + LOTO Permit Tracking Software 2026

Why Confined Space + LOTO Permit Tracking Matters in 2026

The two operative federal rules are 29 CFR §1910.146 (Permit-required confined spaces) and 29 CFR §1910.147 (The control of hazardous energy — lockout/tagout). For construction work the parallel rules are 29 CFR §1926.1200 (Confined spaces in construction — scope and applicability) and 29 CFR §1926.417 (Lockout and tagging of circuits). Lockout/tagout (29 CFR 1910.147) has appeared in the OSHA Top 10 most-cited standards every year for the last decade, and §1910.146 permit-required confined spaces is one of the most common citations against general-industry employers performing maintenance on tanks, vessels, vaults, sewers, and similar enclosed spaces.

The penalty math hits at 29 CFR §1903.15 (Proposed penalties) — currently $16,131 per serious violation and up to $161,323 per willful or repeat violation based on the 2024 inflation adjustment. Confined space and LOTO failures are not collapsed into a single citation. A missing written energy-control procedure under §1910.147(c)(4), a missing §1910.147(c)(7) training certification record, an unsigned §1910.146 permit, a missing §1910.146(d)(14) annual program review, and a missing §1926.1200 host-employer information exchange are separate exposures that stack on the same inspection.

What makes permit-tracking software valuable is not the permit form itself — OSHA appendices and most safety supply houses sell pre-printed §1910.146 permit pads — it is the workflow that prevents the documentation gaps inspectors actually cite. Most §1910.146 and §1910.147 citations are not about a permit being missing entirely. They are about:

• Energy-control procedure under §1910.147(c)(4) that is generic across all machines rather than machine-specific
• Authorized-employee training certifications under §1910.147(c)(7)(iv) that cannot be produced for the inspection date
• §1910.146 permit that was filled out but missing the §1910.146(f)(13) entry supervisor signature
• Cancelled permits not retained for the §1910.146(d)(14) annual review
• Atmospheric testing results recorded on the permit but not tied back to the calibrated instrument used
• §1926.1200 controlling-contractor information exchange that happened in conversation but was never written down
• Affected-employee training documentation missing for workers in the area when LOTO was applied

These are not form-design problems — they are workflow and evidence-layer problems. The right software closes the workflow gaps and keeps the supporting records (machine-specific written procedures, training certifications, atmospheric-tester calibration certificates, rescue-service contract) tied to the permit record, because that is the evidence inspectors review when a permit gets challenged.

What the Software Actually Has to Cover

Permit-tracking software splits into three layers. The form layer is the permit itself and the written energy-control procedure — every platform on this list handles that. The workflow layer is permit issuance, pre-entry checklist, entry-supervisor sign-off under §1910.146(f)(13), permit close-out, and the §1910.146(d)(14) annual program review — the platforms differ significantly here. The evidence layer is the underlying authorized-employee training records under §1910.147(c)(7)(iv), the affected-employee training records, the machine-specific written procedures, the atmospheric-tester calibration records, and the rescue-services contract — most EHS suites do not handle this evidence layer well.

A small employer running pre-printed permit books can be fully compliant on the form layer and still get cited because the evidence layer fell apart. A large employer running Intelex or Cority on the workflow layer can be fully covered on workflow and still get cited because the worker's required §1910.147(c)(7) training was never tied to the permit. FileFlo is built to handle the evidence layer alongside the permit and procedure records, which is why it sits at the top of this list for employers whose biggest exposure is not the permit itself but everything the permit points back to.

Permit-Required Confined Space Documentation (§1910.146)

Under 29 CFR §1910.146 (Permit-required confined spaces), employers with permit-required confined spaces must develop and implement a written permit-required confined space program that covers identification of permit-required spaces, the permit system, entry procedures, training, rescue and emergency services, and the annual program review under §1910.146(d)(14). The permit itself is specified by §1910.146(f) and must be signed by the entry supervisor before entry begins. After entry is complete, the permit is cancelled and retained for at least one year so that the §1910.146(d)(14) annual review can be performed against the documented entries.

Permit-tracking software replaces the paper permit pad with a structured workflow that prevents the supervisor from authorizing entry until each §1910.146(f) field is completed. The cancelled permit is automatically retained for the program review, and the trend data across permits feeds into the §1910.146(d)(14) review without requiring the safety manager to re-key data from binders. The training certifications under §1910.146(g) — authorized entrant, attendant, entry supervisor, rescue team member — are tied to each permit so that an inspection question about who was authorized to enter on a given date is answered by clicking the permit.

LOTO Energy Control Procedures (§1910.147)

Under 29 CFR §1910.147 (The control of hazardous energy), employers must develop, document, and use machine-specific energy-control procedures meeting the requirements of §1910.147(c)(4). One generic procedure for the whole facility does not satisfy the rule — each machine or piece of equipment with multiple energy sources, complex isolation steps, or unique stored-energy considerations needs its own documented procedure. The exception in §1910.147(c)(4)(i) for procedures that meet specific narrow criteria is interpreted narrowly during inspection.

The §1910.147(c)(6) periodic inspection requirement states that the employer must conduct a periodic inspection of the energy-control procedure at least annually to ensure that the procedure and the requirements of the standard are being followed. The inspection must be performed by an authorized employee other than the one(s) using the energy-control procedure being inspected. The employer must certify that the periodic inspections have been performed and the certification must identify the machine on which the procedure was used, the date of the inspection, the employees included in the inspection, and the person performing the inspection. Software that issues periodic-inspection records tied to each procedure makes the annual certification cycle straightforward.

Construction-Specific LOTO (§1926.417)

For construction work, the operative LOTO rule is 29 CFR §1926.417 (Lockout and tagging of circuits), found in Subpart K (Electrical) of the construction standards. §1926.417 requires that controls deactivated during repair or maintenance of equipment or circuits be tagged, that equipment and circuits which are deenergized be rendered inoperative and have tags attached at all points where such equipment or circuits can be energized, and that tags be placed to identify the equipment or circuits being worked on. Construction employers performing work that would fall under general-industry §1910.147 in a fixed setting often have to satisfy both rules depending on the scope of work.

The construction confined space rule at §1926.1200 (Subpart AA) interacts with §1926.417 on construction sites where a confined-space entry also requires LOTO of energy sources. The host-employer and controlling-contractor coordination required under §1926.1203(h) means that documentation of who is responsible for what energy-isolation step has to be exchanged before entry. Software that handles both the §1926.1200 information exchange and the §1926.417 LOTO documentation in one record keeps the multi-employer coordination defensible during inspection.

Authorized vs Affected Employee Training Records

Under §1910.147(c)(7), employers must provide training so that the purpose and function of the energy-control program are understood and the knowledge and skills required for the safe application, usage, and removal of energy controls are acquired. The training requirements differ by employee category. Authorized employees — those who actually perform the lockout or tagout — receive procedure-specific instruction including the recognition of hazardous energy sources, the type and magnitude of the energy available, and the methods and means necessary for energy isolation and control. Affected employees — those whose job requires them to operate or use a machine or equipment on which servicing or maintenance is being performed under lockout or tagout — receive instruction in the purpose and use of the energy-control procedure. Other employees whose work operations are or may be in an area where energy-control procedures may be utilized receive instruction about the procedure and the prohibition against attempting to restart or re-energize machines that are locked or tagged out.

Under §1910.147(c)(7)(iv), the employer must certify that employee training has been accomplished and is being kept up to date. The certification must contain each employee's name and dates of training. Retraining is required under §1910.147(c)(7)(iii) whenever there is a change in job assignments, a change in machines or processes that presents a new hazard, a change in energy-control procedures, or whenever a periodic inspection reveals deviations from or inadequacies in the employee's knowledge or use of the procedures. Software that tracks authorized vs affected designations separately — and triggers retraining alerts when a procedure changes — produces the §1910.147(c)(7)(iv) certification on demand and prevents the gap that most often gets cited: an employee performing LOTO on a machine whose procedure changed after the worker's last training.

Permit Program Annual Review (§1910.146(d)(14))

Under §1910.146(d)(14), the employer must review the permit-required confined space program using the cancelled permits retained under §1910.146(e)(6) within one year after each entry and revise the program as necessary to ensure that employees participating in entry operations are protected from permit-space hazards. The annual review is the synthesis step that turns operational entries into program improvements — atmospheric trends, near-misses on the permit, rescue-service performance, and entry-supervisor sign-off compliance all feed into the review. Software that issues a structured annual-review workflow against the cancelled-permit dataset makes the §1910.146(d)(14) review an output of the system rather than a manual exercise the safety manager does once a year against a binder of paper permits.