Smart LOTO for Safe Operations
Digital lockout-tagout safety
Only for iPhone
Free · Designed for iPhone. Not verified for macOS.
Smart LOTO brings lockout-tagout (LOTO) and permit-to-work safety to the field — on the device in every isolator's pocket.
Built for plants, factories, and industrial sites, Smart LOTO digitizes the full energy-isolation workflow — from permit issue through isolation, work verification, and controlled de-isolation — with a verifiable audit trail at every step.
KEY CAPABILITIES
- Permit-to-work, role-aware: initiators, issuers, custodians, isolators, technicians, and safety officers each see exactly what they need to action.
- Smart-lock isolation over Bluetooth: bind a BLE smart lock to an isolation point and apply or remove it with one tap.
- QR verification: scan each isolation point before binding, so the right lock goes on the right point every time.
- Photo evidence and audit trail: every lock-on and lock-off is logged with a timestamp, the operator, the lock ID, and a photo.
- Face-verified check-in: confirm the right worker checks in and out of the work party.
- SIMOPS-aware: when multiple permits share an isolation point, the lock stays in place until the last permit completes - automatically.
- Real-time sync: permits and isolation status stay current across the team and integrate with your permit-to-work system.
Smart LOTO requires an organization account. Contact your safety team or visit smartloto.innvendt.com to get set up.
more • Issuer view: your permits as Issuer in one place.
• Safety Officer: a Technicians tab with everyone on the plant's live permits by contractor, and the crew on every permit.
• QR audit and Face ID enrolment, now in the app for QR audit and Face ID logins.
• Tapping a notification opens its permit.
• LOTO Admin search finds any permit by number, even closed ones.
• Fixes: the Safety Officer sees every live permit, and a padlock passed to another permit stays linked to it.
2.14.1 Oct 27
• Job certificates: when assigning the crew, pick the certificate the job needs. Each contractor shows whether their certificate is valid, missing or expired, and assigning someone without one is recorded on the permit.
• Crew on the job: on permits with no isolation points, see who is working and how many are certified.
• The lock state stands out on every isolation point, with a small line showing whether the equipment's QR audit is done.
• Workmen whose face comes only from an imported photo are flagged, and the Initiator can enrol them live from the permit.
• Each de-isolated point is confirmed to PTW as soon as its padlock comes off.
• Yes, take photo now opens the camera straight away.
• A padlock taken out of service can no longer be used for isolation.
• Fixes: the right isolator named on the equipment lookup, sign-in on a shared phone, and a permit stepping backwards after de-isolation.
2.14.0 Oct 26
• De-isolation is saved the moment the padlock opens, with the photo of the panel taken afterwards.
• De-isolation works with no signal and syncs when the phone is back online.
• A clear next step when Face ID cannot check a technician out, including asking for approval.
• Contractor IDs are unique: an existing contractor's face is re-enrolled instead of being added again.
• An oval guide on the face enrolment camera.
• The emergency unlock request is offered during de-isolation.
• Machine trial points explain what they are waiting for.
• Fixes an error after leaving a padlock search.
2.13.4 Oct 21
• Isolation reporting. When the last padlock on a permit is applied, every isolation point is now reported to the work permit system, so no point is left showing as pending after it has been locked.
2.13.2 Oct 14
• Shared isolation points. Each isolation point now lists every other permit sharing it, and what each one is doing with the lock: holding the padlock, protected by it, released for a machine trial, or de-isolated.
• Also protecting. When a padlock is keeping other permits safe, the point says so and names them.
• Machine trials on shared points. While a machine trial is running, a point shared with another permit can no longer be released by hand. It is released automatically once every permit sharing it has approved the trial.
2.13.1 Oct 12
• Check out without Face ID. When Face ID can't be used, the permit holder can request a check out and a supervisor approves or rejects it. Approvers get a Requests screen with a waiting count and a history of who decided, when and why.
• Better Face ID check-out. Check-out now opens the back camera, which is usually the sharper one, so the permit holder can point the phone at the worker. Where your plant uses the head-turn check, a large on-screen guide shows each step: hold still, turn the head, look back at the camera, with a ring that fills as the head turns.
• Permits with no isolation points. Work orders that need no isolation are marked "No isolation required", skip the isolation steps, and close once the work is verified. The Group LOTO box shows who is still on the job.
• Machine trial status. A point lent for a machine trial now shows as cleared for the trial instead of "Not locked", and a point held for a trial no longer offers a release button.
• Clearer de-isolation steps. The app tells you to keep the shackle open until the de-isolation is saved, and explains what to do if it was closed too early.
• PTW user ID in the Group LOTO box. Every person in the box shows their PTW user ID.
• Points named the same everywhere. A point shows both its equipment name and its plant tag code on cards and in the audit trail.
• No network, no guessing. If the phone has no connection when the app opens, it says so and carries on by itself once the network is back.
• Faster and steadier. Sign in is quicker, the app downloads less data, and safety checks on shared locks hold firm on a weak signal. If permits can't load you see a Retry button instead of an empty list.
2.13.0 Oct 10
A photographic record of the maintenance job itself. A second tab on the permit holds photos in three phases, before the work starts, during the work, and after the machine is made good. Each machine the permit covers gets its own checklist, so a permit isolating one heater does not ask you to photograph another machine's coupling guard. Checks are listed against inspection intervals and the intervals build on each other, so choosing quarterly shows the quarterly, monthly and weekly checks together rather than only the ones somebody marked quarterly. Anyone on the permit can read the record, the Initiator adds to it, and it never blocks or changes a single step of the permit itself.
Continuing work with a new crew. When an Initiator continues a permit for another round, last round's technicians stay listed so you can see who was on the equipment, and any of them can be put back on with a single tap instead of being found again in the full list. The ones who are not returning can be taken off. Nobody still holding a lock can be removed this way, because a held lock means they are standing at the machine.
Lock battery, before you need it. The battery level of a smart lock is shown the moment it connects, again on the prompt to apply it, and on every point it is holding, so you can see a lock getting low while there is still time to swap it.
A lock below ten percent will not be accepted for isolation. Taking a lock off is never blocked, whatever its battery level, because a lock you cannot remove is worse than a lock that is flat.
Battery readings are now correct. Earlier versions read the level from the wrong part of the lock's reply and could show a figure that meant nothing. The app also now asks you to recharge a lock rather than replace a cell, which is what these locks actually need.
Evidence photos say what they are. Every isolation and de-isolation photo now carries the name of the isolation point, the time it was taken, who took it, and the machine trial cycle where one applies. Older photos have had this restored wherever the record allowed it.
Machine trial badges only mark what is really authorised. A point is badged for the trial cycle running now only if that cycle covers it and the release has actually been granted, instead of every point on the permit carrying the label.
Your role is your role. Signing in now links your account to your record properly, so the app shows the role you hold rather than defaulting to Isolator when it cannot tell. If that link cannot be made the app says so instead of failing quietly.
Face check out finds people who have enrolled. Workers whose identifier contains a full stop were told no face was enrolled even immediately after enrolling at the kiosk. Their record is now found correctly, and where a record genuinely cannot be matched the app says it is a setup problem rather than blaming the worker.
2.12.0 Sep 22
A photographic record of the maintenance job itself. A second tab on the permit holds photos in three phases, before the work starts, during the work, and after the machine is made good. Each machine the permit covers gets its own checklist, so a permit isolating one heater does not ask you to photograph another machine's coupling guard. Checks are listed against inspection intervals and the intervals build on each other, so choosing quarterly shows the quarterly, monthly and weekly checks together rather than only the ones somebody marked quarterly. Anyone on the permit can read the record, the Initiator adds to it, and it never blocks or changes a single step of the permit itself.
Lock battery, before you need it. The battery level of a smart lock is shown the moment it connects, again on the prompt to apply it, and on every point it is holding, so you can see a lock getting low while there is still time to swap it.
A lock below ten percent will not be accepted for isolation. Taking a lock off is never blocked, whatever its battery level, because a lock you cannot remove is worse than a lock that is flat.
Battery readings are now correct. Earlier versions read the level from the wrong part of the lock's reply and could show a figure that meant nothing. The app also now asks you to recharge a lock rather than replace a cell, which is what these locks actually need.
Evidence photos say what they are. Every isolation and de-isolation photo now carries the name of the isolation point, the time it was taken, who took it, and the machine trial cycle where one applies. Older photos have had this restored wherever the record allowed it.
Machine trial badges only mark what is really authorised. A point is badged for the trial cycle running now only if that cycle covers it and the release has actually been granted, instead of every point on the permit carrying the label.
Your role is your role. Signing in now links your account to your record properly, so the app shows the role you hold rather than defaulting to Isolator when it cannot tell. If that link cannot be made the app says so instead of failing quietly.
Face check out finds people who have enrolled. Workers whose identifier contains a full stop were told no face was enrolled even immediately after enrolling at the kiosk. Their record is now found correctly, and where a record genuinely cannot be matched the app says it is a setup problem rather than blaming the worker.
2.11.0 Sep 21
Adding technicians is almost instant. The technician list is kept on the phone and refreshed only when it has actually changed, instead of downloading the whole plant roster every time the screen opens. Photos load as you scroll and are kept for next time, and you can start typing a name straight away.
Safer de-isolation. A lock is only recorded as removed once the padlock itself confirms its shackle has opened. If the padlock cannot be reached, or does not answer, nothing is recorded and you are asked to try again standing next to it. The point stays locked until the padlock confirms.
Face ID enrolment that tells you what is wrong. Every photo is checked as it is taken. If the face is too far away, too dark, turned to one side, or the same as the last shot, it says so and asks for another. It guides you through three angles, and you can switch between the front and back camera at any time.
One face belongs to one worker. A face already registered to somebody else can no longer be saved against a second person. Where two workers genuinely look alike, both faces are kept and you are shown the two photographs side by side to confirm.
Face ID starts faster. Face recognition loads from inside the app rather than from the internet, so it starts quickly and keeps working where outside access is restricted.
Dual custody padlocks. A permit can require a second padlock from the area owner, with their own release step. No physical lock comes off while a custody padlock is still on the box, and an emergency unlock now cuts the custody padlocks rather than leaving them behind.
Clearer confirmations. Check out, work start and work verification each ask for confirmation on one clear screen, using your own organisation's names for each role. After an approval the app stays on the permit instead of returning to the list.
Isolation points that match no equipment are now marked, so it is obvious before work starts rather than after.
2.10.0 Sep 14
This release focuses on polish and performance.
- Clear milestone confirmations the moment every point is secured and the moment equipment is released.
- A more personal check-out: face-verified workers get a proper send-off, and supervisors can see when the whole crew is off the job.
- Substantially faster loading and reduced mobile data usage, especially on QR scans and at busy plants.
39 Aug 12
Refinements to machine-trial safety and shared equipment.
• The machine-trial safety check now recognises handed-over points — no false "energised" blocks when isolating shared equipment after a trial.
• If the permit system sends two machines under the same name, the permit card flags both points clearly so they are never mistaken for duplicates.
2.7.2 Aug 11
A new safety check, and two new capabilities for your permits.
Safety
• A point that is energised for a machine trial cannot be isolated by another permit — the scan is refused until the trial finishes and the point is re-isolated, and the permit then attaches automatically as a shared lock.
Continue work after checkout
• When everyone has checked out, the Initiator now chooses what happens next: verify the work and move to de-isolation, or continue work and assign technicians for another round. The isolation stays on either way.
Machine-trial approvals on shared equipment
• When another permit needs a shared isolation point energised for a machine trial, your permit's Initiator is asked first — and one tap approves every shared point together.
• The consent card names exactly who has approved and who is still pending, so you always know who the trial is waiting on.
• While equipment is live for a trial nobody can check in against it; check-in reopens by itself once the point is re-isolated.
2.7.1 Aug 8
Two new capabilities for your permits.
Continue work after checkout
• When everyone has checked out, the Initiator now chooses what happens next: verify the work and move to de-isolation, or continue work and assign technicians for another round. The isolation stays on either way.
Machine-trial approvals on shared equipment
• When another permit needs a shared isolation point energised for a machine trial, your permit's Initiator is asked first — and one tap approves every shared point together.
• The consent card names exactly who has approved and who is still pending, so you always know who the trial is waiting on.
• While equipment is live for a trial nobody can check in against it; check-in reopens by itself once the point is re-isolated.
2.7.0 Aug 7
Machine trials on shared equipment now ask you first.
When two permits share the same isolation point, one padlock protects everyone on it. If another permit needs that equipment energised for a machine trial, your permit now tells you: which permit is asking, and which machines, listed one per line.
Once every one of your workers has checked out, the Initiator on your permit gets an Approve button, and a single tap answers every shared point at once. Only the Initiator can approve or withdraw — nobody else is offered the choice.
Lending your equipment is not the same as finishing your work. Your permit stays open and your crew checks back in once the point is re-isolated.
While the equipment is live for the trial nobody can check in against it, and work cannot be started on it. Both reopen by themselves once it is re-isolated.
The isolator running the trial is notified the moment every sharing permit has approved, and can then remove the lock.
Also in this release: scanning an asset QR code is far quicker and uses a small fraction of the mobile data it used to, and each site now sees its own wording throughout.
2.5.4 Aug 5
Machine trials on shared equipment now ask you first.
When two permits share the same isolation point, only one padlock is on the equipment and everyone is protected by it. If one permit needs that equipment energised for a machine trial, the trial can no longer simply stop with no way forward.
Your permit now tells you when someone needs your equipment. You see which permit is asking and which machine, along with any of your workers still checked in, by name.
Once every one of your workers has checked out, the Initiator on your permit gets an Approve button. Nobody else can approve on your behalf, and you can withdraw approval at any time before the trial starts.
Lending your equipment is not the same as finishing your work. Your permit stays open and your crew checks back in once the point is re-isolated.
While the equipment is live for the trial, check in is closed on every permit sharing it, with a message saying why. It reopens by itself once the point is re-isolated.
The isolator running the trial can now see exactly which permits they are waiting on, and what each one still has to do.
Also in this release: scanning an asset QR code is far quicker and uses a small fraction of the mobile data it used to, and each site now sees its own wording throughout.
2.5.2 Aug 4
Safety improvement to de-isolation.
The app now allows a lock to be removed only on the exact isolation points your permit system has authorised for de-isolation. If a point has not been authorised, its lock will not open and the point clearly shows that it is still awaiting authorisation.
This matters most during machine trials, where only some points of a permit are released at a time. Every other point stays isolated until your permit system authorises it.
2.5.1 Aug 1
• Machine trials on shared equipment now name every permit that still has to approve, and what each one is waiting on.
• Opens faster and uses far less mobile data. Your list loads current work only; tap "Show completed permits" for past jobs.
• Fixed: QR codes with stray spaces now match the right isolation point.
• Fixed: the in-app update prompt now opens the App Store.
2.5.0 Jul 25
Filter permits by stage — jump straight to what's ready to isolate, work on, or de-isolate.
Zero-Energy Certificate — shareable proof that a machine is fully locked out, with a QR code to verify it.
Clearer shared-lock status — after you release a shared lock, you now see the physical lock is still on and which permit it's protecting.
Back-camera option at Face-ID check-out — point the phone at the worker instead of taking a selfie.
Tapping a notification now reliably opens the right permit.
A rewarding "zero energy" confirmation when a machine is fully secured, plus a snappier, more tactile feel throughout.
2.4.11 Jul 21
• Issuer view: your permits as Issuer in one place.
• Safety Officer: a Technicians tab with everyone on the plant's live permits by contractor, and the crew on every permit.
• QR audit and Face ID enrolment, now in the app for QR audit and Face ID logins.
• Tapping a notification opens its permit.
• LOTO Admin search finds any permit by number, even closed ones.
• Fixes: the Safety Officer sees every live permit, and a padlock passed to another permit stays linked to it.
more Version 2.14.1 Oct 27
Data Linked to You The following data may be collected and linked to your identity:
Contact Info User Content Identifiers