Replace Frozen Safety Cases
with Living Assurance
Upgrade from multiple shelfware PDFs and fragmented spreadsheets to real-time bowtie modelling, automated change impact analysis, and tamper-evident audit trails. Built for mission-critical engineering.
Use it yourself, or have it done for you — our SQEP safety engineers can migrate your legacy hazard logs, populate the models, or write the safety case. How the service works.
One Connected Platform. Total Traceability.
Across Your Whole Estate.
One safety case tells you whether a process is safe. SAFOPS rolls every case across a site, a unit or a plant into one live risk picture — initiating events, barriers and consequences connected in real time.
Northfield Site
Those 214 open deficiencies are not a line in a report. Each one sits on a barrier plate, inside a fault sequence like this one.
Risk that actually adds up
Residual risk from every case beneath the parent, summed by exposure group and scored against the site's own tolerability limits — not a folder of PDFs someone has to read end to end and total by hand.
What closing the backlog buys you
A projected site risk profile modelling every open deficiency as closed, shown beside today's actual position. That is the business case for the safety spend, not just the list of gaps.
Drivers ranked across the estate
The fault sequences genuinely driving site risk, ranked across every case at once — so effort goes where the risk is, rather than wherever the last review happened to look.
Shared barriers, counted once
A barrier claimed by three processes is resolved once rather than triple-counted. Degrade it or take it out of service and you can see every case across the site that was depending on it.
One report, every figure traceable
The Facility Report exports the whole picture to Word, PDF or HTML with each number traceable back to the case it came from — and states plainly when a case is excluded from the totals, rather than quietly understating site risk.
Still isolated where it matters
Rolling up does not merge anything. Each case keeps its own risk matrix, templates, permissions and audit chain, so a change in one process can never bleed into another.
Everything a Defensible Safety Case Needs
Build, assess, and audit living safety cases — rigorous, traceable, and defensible from initiating event to ALARP justification.
AI-Augmented Safety Engineering
Draft fault group assessments and barrier recommendations with optional AI. Choose convenient online models or a secure, air-gapped local engine so sensitive data never leaves your environment — and every suggestion is still reviewed, and logged, by an engineer.
Interactive Fault Sequence Diagrams
Pan, zoom, and test live bowtie pathways in real time. Hover any barrier to see its zone of influence, spot single points of failure and common cause failures, and open deficiencies right on the diagram — not buried in a separate tracker.
Fully Configurable Risk Matrices
Qualitative severity grids or quantitative dose thresholds: SAFOPS conforms to your methodology, not the other way round. Each project starts from a template built to its own standard — ONR SAPs, EN 50126, Def Stan 00-056, ARP 4761 — and adjusts from there.
Tamper-Evident Verification
Every change, by an engineer or by AI, is cryptographically sealed into a SHA-256 hash chain. Alter any past entry and the break is instantly detectable at audit — a record you can hand to a regulator, not just a log you hope nobody edited.
Open, Portable & Zero Lock-In
File-based persistence by design, not by limitation. Each project is an open, inspectable Excel schema rather than a proprietary database you cannot read without us — deployable on a workstation or a server you control, with nothing to provision and no cloud tenancy in the path. Every edit is hash-chained, so the file cannot drift silently the way a shared spreadsheet does.
Unified End-to-End Platform
Stop stitching together disparate tools. SAFOPS connects initiating events, engineered barriers, substantiation evidence, ALARP justification, and the audit log in one continuous workflow — no fragmented modules, no add-ons, no re-keying between systems.
Automated Reporting
Generate formatted Word and PDF safety case chapters directly from the live fault models, so the document is always a snapshot of the current case — not a copy someone last updated months ago. Regenerate in seconds after any change.
Import Your Existing Data
Bring in Excel hazard registers, Cassandra legacy exports, or plain free text via AI-assisted extraction. Every import runs as a dry run first, showing exactly what will be created before anything is written — so nothing is duplicated or silently overwritten.
Automated Scheduling
Generate schedules of safety measures straight from your models — protection, engineering, and LAC schedules linked to their Safety Functions, with proof-test intervals defined once and kept in step as the case evolves.
Change Impact Analysis
Simulate removing a safety measure and see instantly which fault sequences would no longer meet requirements — deterministic, no AI involved. Know the full consequence of a modification before it is approved, not after it is found on site.
The Golden Thread
Click any fault, barrier, or exposure group to see everything it is connected to — the shared equipment a flat document would hide. Trace one safety measure to every fault it protects, and one fault to every measure protecting it.
Enterprise & Estate Rollup
A site over its facilities, a unit over its platforms, a plant over its processes — every case beneath a parent rolled into one live risk picture: summed residual risk, the projected position if the backlog were closed, ranked drivers, and shared barriers resolved once. Each case still keeps its own matrix, templates and audit chain.
Branch, Diff & Merge
Work up a modification or a regulator's challenge in an isolated, fully editable copy of the live case. Diff it against the original as a readable change set, then fast-forward merge when it is agreed — with the audit trail intact.
Time Machine & Formal Issue
Scrub through the full edit history, diff any fault against any past date, and restore any save point — not just the last. Freeze formally issued versions as permanent records of exactly what was approved, and when.
Security & Deployment
Hosted, on-premise, or fully air-gapped from one identical image. Per-project access control, login lockout, CSRF protection, HMAC-anchored audit logs, and frictionless JSON export so nothing is locked in.
Frequently Asked Questions
Is SAFOPS available for on-premise or air-gapped deployment?
Yes. SAFOPS can run fully on-premise or fully air-gapped, including the AI Copilot, which offers a secure local engine so your proprietary data never leaves your network. It's also available as a web-based deployment for teams who prefer that.
Does SAFOPS require an internet connection or complex infrastructure?
No. SAFOPS is lightweight and portable: each project lives in an open, inspectable open Excel schema rather than a proprietary database, so it deploys on a workstation or a server you control with no database to provision and no cloud tenancy required.
Is AI use in SAFOPS optional, and how is my data handled?
AI is opt-in throughout SAFOPS, used to draft fault group assessments and suggest barriers. You choose between convenient online models or a secure, air-gapped local engine, and every AI suggestion is logged in the same tamper-evident audit trail as manual edits.
How does SAFOPS keep an auditable record of changes?
Every edit, whether made by an engineer or suggested by AI, is logged in a SHA-256 hash chain. Altering any past entry is immediately detectable, giving you a tamper-evident record for regulator and auditor review.
What industries and safety standards does SAFOPS support?
SAFOPS ships with configurable risk matrices for multiple sectors, including nuclear, aviation, rail, defence, automotive, cyber, and oil & gas, each with its own risk methodology and switchable per project.
Can I import my existing hazard register or safety case data?
Yes. SAFOPS imports Excel hazard registers, legacy Cassandra exports, or free text via AI-assisted extraction, always running as a dry run first so nothing is duplicated.
Ready to build your first Living Safety Case?
Experience real-time barrier verification, dynamic bowtie modelling, and tamper-evident audit trails.