What this is
What is a permit linked work record?
What is a permit linked work record?
It is the record binding a maintenance job to the permits that authorise it: the work order reference, every permit issued against the job with its validity window and issuer, and evidence that work started after issue, stayed in scope and finished before expiry. It is not the permit — it is proof that job and permits stayed aligned.
Why keep a separate record instead of relying on the permits?
A permit proves authorisation existed; it does not prove the work matched it. Permits are filed by number and cancelled individually, so nothing in the permit file answers what an investigator asks: did this job ever run outside a live permit? A job-side record answers that in one place, including a job covered by three permits with different expiry times.
What does OSHA 1910.147 require beyond the permit itself?
It requires documented energy control procedures, controls applied in a defined sequence, isolation verified before work begins, and defined release steps including notifying affected employees and device removal by whoever applied them. Paragraph (c)(6) adds inspection at least annually. Recording cancellation times and handback makes those steps auditable per job.
Scope
When is a permit linked work record required?
This sits alongside a work order for the maintenance jobs that need permits. It is not a permit, a risk assessment or a method statement. Stretching it into those roles produces a document that duplicates the permit system and contradicts it at the edges.
Use this template when
- A job requires energy isolation that must be proven applied before work and released in sequence after
- Hot work, confined space entry or line breaking forms part of a planned or corrective job
- One job is covered by several permits, with different issuers or validity windows to reconcile
- Contractors work under your permit system and you need one record holding issuer and accepting party
- A permit was extended or reissued mid-job and the new reference must tie to the original work
Do not use it for
- Work Order, which holds job scope, labour and parts; this record references it rather than replacing it
- Emergency Work Order, which covers urgent unplanned work where the authorisation route differs
- Contractor Work Order, which governs the commercial and competence side of contracted work, not the permit conditions
- Job Plan, which sets out standard task steps and resources in advance and carries no live authorisation
- Production Access Agreement, which negotiates when maintenance may take an asset — scheduling, not authorisation
Compliance mapping
Which OSHA 1910.147 requirements does this satisfy?
The basis is OSHA 1910.147 and ISO 45001 cl.8.1, but a multi-permit job also engages the confined space standard. Each obligation below is evidenced by a specific section of the form.
| Clause | Requirement | Where it lands |
|---|---|---|
| OSHA 1910.147(c)(4) | Documented energy control procedures exist and are applied to the specific equipment being serviced | Permits held |
| OSHA 1910.147(d) | Controls applied in sequence and isolation verified before servicing begins | Compliance during work |
| OSHA 1910.147(e) | Release from lockout follows a defined procedure, devices removed and employees notified before re-energising | Closure |
| OSHA 1910.146(e) | An entry permit is issued before entry, available to entrants at entry, and cancelled when entry operations end | Permits held |
| ISO 45001 cl.8.1.4 | Coordination of the OH&S management system with contractors performing work on site | Closure |
| ISO 45001 cl.7.5.3 | Documented information is controlled so it is available and suitable for use when needed | Header |
What it does not cover
- One permit entry for a job that needed several, which shows only that the first was tracked and leaves the confined space or hot work authorisation unaccounted for
- Valid To recorded as a date with no time, which makes the central question — did work finish before expiry — unanswerable, since permits expire within a shift, not at midnight
- Minor extension recorded with no explanation, which admits scope creep while saying nothing about what was added or whether the hazard assessment still held
- Permit Extended Or Reissued answered Yes with New Permit ID empty, which breaks the chain of authorisation at the exact point where continuity of cover must be proven
- Closure signed only by the technician, whose own compliance is attested; without the issuer's signature the handback is unwitnessed and cancellation times unverified
Global
Permit Linked Work Record requirements by country
Permit-to-work is one of the few areas where the legal architecture differs sharply by territory, and that changes what this record must hold rather than merely how it is phrased.
OSHA 29 CFR 1910.147; 1910.146; 1910.252
Lockout, confined space and hot work are prescriptive standards with mandated procedural content, and 1910.147(c)(6) requires annual inspection of the energy control procedure by an authorised employee other than those using it.
The record must support sampling for that inspection, so keep Permit Type and Gates All Passed queryable — it is evidenced by reviewing actual applications, not the procedure document.
Confined Spaces Regulations 1997 reg.4; Electricity at Work Regulations 1989 reg.13; Management of Health and Safety at Work Regulations 1999 reg.3
There is no general statutory permit-to-work system. The duties are outcome-based — no confined space entry unless avoiding it is not reasonably practicable, and adequate precautions against equipment being made live during work.
Because the law prescribes no form, the record carries the whole evidential burden that precautions were adequate. Conditions Complied With and Any Breach Of Conditions do that work.
Directive 89/391/EEC art.6; Directive 2009/104/EC on work equipment
The framework directive imposes a duty to apply preventive measures in a defined hierarchy; the work equipment directive requires repair and maintenance by designated workers, with equipment shut down where appropriate.
Designation matters as much as authorisation. Issued By and Accepted By should resolve against a competence register, not free selection of any user.
How to complete it
How to complete a permit linked work record, step by step
The fields are binary and quick. These judgements decide whether the record proves anything.
The middle option on Work Stayed Within Permit Scope is the most consequential answer here: the honest technician's answer, and the one most likely to be discouraged. Define it in advance — same work type, same isolated system, same boundary — and rule that anything altering the hazard set needs a new permit. Without a written line it absorbs genuine breaches.
The tempting shortcut is closing at end of shift with a No because a permit carries over. That is a closed record over an open hazard. Either the record stays open across shifts with the permits it holds, or the carry-over permit generates its own. Mixing the two is how permits get lost at handover.
Permit Issuer takes a user and the second signature is theirs. If the supervisor running the job may also issue its permits, the two closure signatures are effectively one. Separate the roles by rule, and where nights make that impossible, record who provided the independent check.
Conditional handback is legitimate — a guard off pending a part, a line released for cleaning but not production. It is defensible only if the condition is written down and owned. Treat Conditionally as requiring a linked follow-up, or the condition lives in the memory of two people who then go home.
What auditors find
Most common permit linked work record findings
These recur across permit systems that look healthy on paper, with the clause each engages and the change that closes it.
| Finding | Clause | What fixes it |
|---|---|---|
| Work Finished Before Expiry is Yes on nearly every record, including jobs whose duration exceeds the permit window | OSHA 1910.147(d) | Validate against Valid To and the work order completion time rather than accepting the declaration, and review the exceptions. |
| Multi-permit jobs carry one Permits held entry, usually isolation, with hot work or entry permits missing | OSHA 1910.146(e) | Drive required permit types from the job type, and block closure until an entry exists for each expected type or an exception is recorded. |
| Permit Displayed At Work Point is routinely Yes but spot checks find permits in the office or a vehicle | ISO 45001 cl.8.1.1 | Require a photograph of the displayed permit, or a supervisor spot check recorded against the job rather than as a separate audit. |
| Cancellation Times Recorded is Yes but the times cluster at shift end rather than when work actually stopped | OSHA 1910.147(e) | Capture cancellation on the device at handback, not transcribed later, and compare against the labour log for the same job. |
| Any Breach Of Conditions is No on almost all records while Conditions Complied With shows Partly on a real minority | ISO 45001 cl.8.1.1 | The two contradict each other. Treat Partly as reportable with a Case ID, or remove the middle option so the record stops offering a soft landing. |
| Issued By and Accepted By are the same person on a small but persistent number of records, typically nights | ISO 45001 cl.8.1.4 | Block self-issue in the form and define an out-of-hours route with a named on-call issuer, rather than leaving the crew to resolve it. |
Case in point
Case in point: three permits, one clock
A dairy site replaced an agitator shaft inside a mixing vessel over a weekend shutdown. Three permits were correctly issued that Saturday: energy isolation valid twelve hours, confined space entry valid eight, hot work valid four for welding a bracket. The record was opened with the work order and the isolation permit entered. The other two were issued on paper by the shift safety officer and never entered, because the crew treated this as the isolation record.
The weld ran late. The hot work permit expired at midday; welding continued until about two, fire watch and extinguishers still in place, so nothing visibly went wrong. The gap surfaced eight weeks later when the insurer's risk survey sampled hot work records and found a weld with no live authorisation for its final two hours. The site had done the substantive things right and lost the argument on the record. The fix was structural: an entry per permit type expected by the job, and the earliest Valid To driving the expiry alert.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
4 sections
- Reference
- MNT-007
- Archetype
- Record
- Record ID
- PLW-2026-000
- Scoring
- Not scored
- Direction
- n/a
- Singleton
- No
- Basis
- OSHA 1910.147, ISO 45001 cl.8.1
- Links
- Links Work Order, Permit
- Tags
- Maintenance, Safety
- Sections
- 4
- Fields
- 36
- Follow up fields
- 2
- Repeating sections
- 1
- Links out
- 4
Header
13 fieldsRecord ID*
Auto sequence. Format PLW-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Raised By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Area
The area within the site.
Exact Location
Drop a pin for anything hard to find.
Asset*
Asset ID*
Format AST-0000.
Links to FDN-002 Asset ID
Work Order ID*
Links to MNT-002 Work Order ID
Work Description*
The Permit Governs The Work
Work does not start before the permit is live and does not continue after it expires. This record links the two so neither can drift.
Permits held
Repeats8 fieldsPermit Type*
Permit ID*
Links to SAF-048 Permit ID
Valid From*
Valid To*
Issued By*
Accepted By*
Gates All Passed*
- Yes3 pts
- No0 pts
Permit Displayed At Work Point*
- Yes3 pts
- No0 pts
Compliance during work
8 fieldsWork Started After Permit Issue*
- Yes3 pts
- No0 pts
Work Stayed Within Permit Scope*
Scope creep during the job is how work ends up done without a valid permit.
- Yes3 pts
- Minor extension1 pt
- No0 pts
Work Finished Before Expiry*
- Yes3 pts
- No0 pts
Permit Extended Or Reissued
New Permit ID
Conditions Complied With*
- Yes3 pts
- Partly1 pt
- No0 pts
Any Breach Of Conditions*
- No3 pts
- Yes0 pts
Case ID
Thread key
Closure
7 fieldsAll Permits Cancelled*
- Yes3 pts
- No0 pts
Cancellation Times Recorded*
- Yes3 pts
- No0 pts
Area Handed Back*
- Yes3 pts
- Conditionally1 pt
- No0 pts
Technician*
Signature*
Permit Issuer*
Second Signature*
MNT-007 · record IDs look like PLW-2026-000 · Links Work Order, Permit
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The form is quick. What slips is noticing a permit expiring while the job runs, and getting the issuer to the handback rather than signing the record next morning.
Holds the record against the work order and asset, drives expected permit types from the job type, and keeps expiry visible against the job rather than each permit separately.
Owns the permit register the Permit ID resolves against, checks issuer and acceptor against competence records, and treats any breach as a safety case, not a maintenance note.
Applies the same record to contracted work, confirming the accepting party is inducted and authorised for the permit type before the job is scheduled.
Warns before the earliest permit on a live job expires, chases records left open with permits uncancelled, and holds every write for approval before it lands.
This template lives in KnowMaintain — asset maintenance. Work orders, planned maintenance, calibration, reliability and shutdowns.
Meet KnowMaintain→Glossary
Permit Linked Work Record definitions and key terms
- Permit to work
- A written authorisation to carry out defined work in a defined place for a defined period under stated conditions. It transfers control of an area from operations to the work party and back.
- Energy isolation
- Placing a machine in a verified zero-energy state — electrical, mechanical, hydraulic, pneumatic, thermal or stored — before servicing. Called lockout tagout in the United States.
- Gates
- The pre-start checks a permit specifies: isolation verified, atmosphere tested, fire watch set, boundary marked. Gates All Passed records that every applicable one was done.
- Handback
- The formal return of the area from the work party to operations, permit cancelled and residual conditions stated. Conditional handback releases it with a named restriction in force.
- Reissue
- Issuing a fresh permit to continue work when the original expires or conditions change. Distinct from an extension, and always a new number — hence New Permit ID.
FAQ
Frequently asked questions about permit linked work record
Does this record replace the permit?+
No. Permits are issued, displayed and cancelled through your permit system and remain the authorising documents. This record links them to the job, holds their validity windows in one place and evidences that work stayed inside them. Keeping only this record would leave a description of authorisation, not authorisation.
Why does Permits held repeat?+
Because most permit-controlled maintenance needs more than one permit, with different issuers and expiry times. Each permit then carries its own Valid From, Valid To, issuer, acceptor and gate check, and the job's real constraint is the earliest expiry across them.
Is this template scored?+
There is no aggregate band, but individual fields carry scores — Gates All Passed, the compliance answers, the closure checks. Use them as exception filters, not a percentage; a permit record ninety per cent compliant is not a meaningful statement.
What happens if a permit expires mid-job?+
Work stops. Permit Extended Or Reissued is answered Yes and New Permit ID captures the fresh reference, so the record shows continuous cover with a documented break point. Continuing under an expired permit is the failure this template exists to make visible.
Who signs the record?+
The technician who did the work and the permit issuer, in Closure. Two independent signatures are the point — the issuer attests the area is handed back and every permit cancelled, which the working party cannot attest about itself.
Can the template be changed?+
Yes. Permit types, gate questions, conditional rules and scores are editable, and the links to Work Order and the permit register come with it. Most sites match the Permit Type list to their own permit suite and leave the compliance and closure structure alone.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Planned Maintenance
Asset Register
Holds every piece of equipment, machine, vehicle and tool you track
Tool and Equipment Register
Holds portable tools, gauges, lifting accessories and small equipment that sit below asset level but still need control
Maintenance Request
Asks maintenance to look at a problem or carry out a job
Work Order
The main record for a planned maintenance job, covering what, where, who and when
Corrective Work Order
Covers a repair to fix something that has already failed or degraded
Emergency Work Order
Covers urgent work where equipment has stopped or become unsafe
More in Work Orders
Maintenance Request
Asks maintenance to look at a problem or carry out a job
Work Order
The main record for a planned maintenance job, covering what, where, who and when
Corrective Work Order
Covers a repair to fix something that has already failed or degraded
Emergency Work Order
Covers urgent work where equipment has stopped or become unsafe
Work Order Closeout
Confirms the job is finished, the area is safe and the equipment is fit to run
Job Plan
Sets out the steps, parts, tools, permits and time needed for a repeatable job
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- OSHA 29 CFR 1910.147, paragraphs (c), (d) and (e) — Control of hazardous energy
- OSHA 29 CFR 1910.146(e) — Permit-required confined spaces, permit system
- OSHA 29 CFR 1910.252(a) — Welding and cutting, fire prevention
- ISO 45001:2018, cl.7.5.3, 8.1.1 and 8.1.4 — OH&S management systems
- Confined Spaces Regulations 1997 reg.4; Electricity at Work Regs 1989 reg.13
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.