Functional safety assessment software

Plan, conduct and report Functional Safety Assessments, from the first checklist response to a signed-off report.

IEC 61511IEC 61508

Built to support competent assessors. It does not replace them.

PlanProject, stage, independence, team

AssessClause-referenced checklist

Find & actFindings and actions, auto-raised

ReportPDF and DOCX house templates

Sign offFrozen record, full audit trail

Project setup

Every assessment starts from a defined project

Organization, project and assessments are set up once. The reporting identity and the assessor independence level travel read-only into every plan and report.

OrganizationNorthbay Chemicals Ltd

ProjectHydrogen Unit 4 · SIS upgrade

AssessmentFSA Stage 1signed_off

AssessmentFSA Stage 2in_review

AssessmentFSA Stage 3in_progress

Reporting identityRead-only in reports

Client companyNorthbay Chemicals Ltd

Assessor companyHalden Safety Consulting

FSLAA. Marsh, Functional Safety Lead Assessor

IndependenceIndependent organization Client-approved

The tool records and flags the declared independence level. It never approves it on anyone's behalf.

IEC 61511 lifecycle

Five FSA stages, one checklist set

The seeded IEC 61511 template covers Stages 1 to 5. Assessors add their own clause-referenced questions where a project needs them.

1

Stage 1

After hazard & risk assessment and the SRS

2

Stage 2

After SIS design

3

Stage 3

After installation, commissioning and validation

Before hazards are introduced

4

Stage 4

After operation and maintenance experience

5

Stage 5

After modification, prior to decommissioning

Starts with an impact analysis

Template pinned. Each assessment keeps the template version it started with. Template edits never change work in progress.

Custom questions. ADD-numbered questions carry their own standard and clause reference.

Import. Findings from an external study's CSV map onto items by clause.

Checklist execution

Built for long audit sessions

PWOFN set the result · ↑↓ move between items

FSAIntegrity/Hydrogen Unit 4/FSA Stage 1

All changes saved Saving… Saved 14:32

Sections

Management of FS100%

Hazard & risk assessment100%

Allocation to layers82%

Safety requirements spec.36% → 45%

Competence0%

Verification planning0%

Q4.3IEC 61511-1 §10.3Template rev 2.5

Does the SRS state the required SIL and the safe state for every SIF?

Result

PConforms WWarning OObservation FNonconformity NNot applicable

Assessor finding

Evidence (registers)

DOC-014Safety Requirements Specification · rev Csha-256 recorded

INT-03Interview · process safety engineer

Recommendation

Assigned to

ROR. Okafor · Process safety

Findings & actions

The checklist raises findings and actions for you

A warning, observation or nonconformity raises a finding automatically. Its recommendation raises an action under that finding. Both stay in sync with the checklist.

Checklist responseNonconformity

Q4.3 · SRS states SIL and safe state

SIF-104 and SIF-107 have no defined safe state in the SRS (rev C).

Clause: IEC 61511-1 §10.3
Evidence: DOC-014, INT-03

Finding F-012auto

Safe state not defined for two SIFs

Type, clause reference and evidence carried over. Description synced from the assessor finding.

Type: Nonconformity
Source: Response Q4.3

Action A-031auto

Define safe states and reissue the SRS

Title and description synced from the recommendation. Owner defaulted from the assignee.

Category: A · blocks start-up
Owner: R. Okafor

NonconformityCategory A

ObservationCategory B

WarningCategory C

Change the result and the auto-raised records are withdrawn: soft-deleted and audited, never erased.

Action tracking

Every action tracked to a verified close

Categories are configurable per organization and carry their own rules: whether they block start-up, and whether closure needs a verifier.

Open actions by category

A · required before start-up3

B · continued safe operation7

C · improvement opportunity5

Open15

Overdue2

Awaiting verification4

A-031 · Define safe states and reissue the SRSCategory A

Closure statement

Verifier

Verified by A. Marsh · closed

Review & sign-off

Guarded transitions, frozen results

Saving is never blocked. Completeness is checked when the assessment moves to review, and sign-off freezes the record.

draftPlan and team

in_progressChecklist and evidence

in_reviewLead assessor review

signed_offImmutable snapshot

closedArchived record

Review gate

Every assessed item has an assessor finding review_requires_assessor_findings_complete

Every warning, observation and nonconformity has a recommendation

Stage 3: no open start-up-blocking actions at sign-off

Signed off and frozen

Responses, findings and the report snapshot can no longer change. Any correction is a formal revision, and the previous revision is preserved.

Rev 0 signed off 02 Sep Rev 1 draft

Reporting

Sign-off-ready reports in your house template

FSA Report · Rev 0

Functional Safety Assessment
Stages 1, 2 & 3

Hydrogen Unit 4 · SIS upgrade · Northbay Chemicals Ltd

Assessed by

A. Marsh (FSLA)

Independence

Independent organization

Status

signed_off

Template

IEC 61511 rev 2.5

Tool version

FSAIntegrity 0.1.0

Generated

13 Oct 2026 14:40

1 Executive summary

2 Findings by type

One report, several assessmentsReports are project-scoped, so FSA 1, 2 & 3 can be issued together.

You write the summary. The tool compiles the rest.Findings, statistics and action status are pulled from the assessment.

PDF and DOCXDOCX fills the FSA00 plan and FSA01 report house templates. Preview in the browser first.

PDFDOCX

Anonymised outputIssue a report with client details anonymised on request.

Anonymised

Provenance on every pageTool version, template version, status, timestamp and the assessed-by and independence block are always embedded.

Under the hood

A record that holds up to scrutiny

Append-only audit trailEvery change records who, what, when, and the before and after values. Enforced in the database.

Tenant isolationRow-level security in PostgreSQL and per-organization evidence storage.

Five roles, checked server-sideAdmin, lead assessor, assessor, action owner, viewer.

Soft delete onlyDomain records are never hard-deleted through the API.

Hashed evidenceUploads are type-checked, size-capped and stored with a content hash.

Single sign-onOIDC through your identity provider. No local password store.

Audit eventsappend-only

14:31R. Okafor set Q4.3 result nonconformity

14:31system auto-raised finding F-012

14:31system auto-raised action A-031 · cat A

14:32R. Okafor attached evidence DOC-014

14:38viewer J. Ellis denied: update response

14:40A. Marsh signed off FSA Stage 1 rev 0

14:41A. Marsh exported report DOCX

FSAIntegrity

A structured record of a human assessment.

The assessor's judgement stays at the centre. The tool keeps it organised, traceable and ready to sign.

PlanStages 1–5, independence declared