
Work permits and gate passes run through the same configurable approval engine. Approvers can be fixed people or dynamic roles, such as the manager of the area the work is in. Every approval stores a snapshot of the rules as they were at the time, so changing a rule tomorrow never rewrites yesterday’s record.

Two factor authentication is mandatory for every user. Your tenant is private, separated from every other customer at the database layer. If you ever want to leave, a full export of your data — every record and every uploaded document — is a built in feature, delivered as one downloadable package. Backups run automatically to a separate data centre region, with a tested restore procedure.
