Hazards numbered, incidents owned.
Signed-off risk assessments and a full incident pipeline on one thread. Every hazard rated, every event investigated, every corrective action a real task someone owns.

The whole safety picture before the shift starts.
Health and safety software should show what needs attention first. The Safety home in Bulk counts live risk assessments, approvals waiting, open incidents and high-risk items, with the risk matrix, the approval queue and overdue pre-use checks beneath.
Four numbers at the top
Active assessments by status, approvals waiting, open incidents and assessments rated high or critical, each with a plain word such as Needs attention or All caught up.
One approval queue
Risk assessments and incident reports waiting for a decision sit in one list, each showing who submitted it and when, with a Review button that opens the record.
Machines not yet cleared
The pre-use panel leads with overdue checks, then machines with issues, checks in progress and checks completed today.
Score every hazard twice, before and after controls.
Risk assessment software should prove what your controls are worth. In Bulk each hazard is a control measure with who is at risk, the controls in place and two scores, and the assessment takes the score of its worst remaining risk.
Initial and residual
Each measure is scored for likelihood and severity from 1 to 5 before controls and again after them, so the reduction is on the record.
The worst residual leads
The assessment’s headline score out of 25 is its highest residual risk, not an average, so one weak control cannot hide behind good ones.
Extra controls become tasks
Anything entered under Additional Controls Required becomes a task in the plant’s Safety project, with its owner, due date and progress shown on the measure.
Numbered, and locked once approved
Assessments are numbered RA-001 onwards for each plant, or carry your own codes, and scores change only while an assessment is a draft or has been refused.
Every assessment on one 5x5 risk matrix.
A 5x5 risk matrix multiplies likelihood by severity into a score from 1 to 25. Bulk places each assessment in the cell of its worst residual risk, so the grid shows where risk still sits once the controls are in place.
Fixed scales
Likelihood runs from Rare to Almost Certain and severity from Insignificant to Catastrophic, the same for every assessor and every plant.
Five bands
Very Low (1 to 4) is acceptable, Low (5 to 9) is handled by routine procedures, Medium (10 to 14) is a management responsibility, High (15 to 19) needs senior attention and Critical (20 to 25) needs immediate action.
Assessments, not hazards
Each assessment counts once, in one cell. Select a cell to list the assessments sitting in it and open one.
Active by default
The matrix shows active assessments unless you switch the filter to drafts, pending approvals, refused or archived ones.
Draft from the manual, not from memory.
Attach a machine manual, a safety data sheet or a photo of the job, and the Draft Assistant proposes a task description and control measures from what the file actually says. Nothing reaches the assessment until someone adds it.
Only what the file says
The assistant leaves a field blank rather than guess, returns at most twelve measures and merges obvious duplicates. It reads PDFs and images.
Add, review or dismiss
A complete proposal is added in one click. One with gaps names what is missing and opens in the Add Control Measure form to finish.
Proposals, never decisions
It works on draft and refused revisions for people who can edit them, and it never submits, approves or reviews an assessment.
One version in force, signed by the people who use it.
A risk assessment governs the work once it is approved. Approving a revision makes it Active and archives the one before, sign-off requests stop named people until they sign or refuse, and scheduled reviews bring it back before it goes stale.
Submit, approve or refuse
A draft with at least one measure goes for approval and locks. A refusal needs a written reason and sends it back for changes.
Only one active revision
Approving a new revision archives the one before. Changes start a new revision that copies the measures, and the Versions tab keeps every one.
Sign-off that waits for an answer
Approvers request sign-off from named people. Each sees a snapshot of the assessment and draws a signature or refuses with a reason; Remind me later lasts only the session.
Reviews with reminders
Name a reviewer and a date, and a required review sends due-soon and overdue notifications. The result is Up to date or Revision required, which can start a new draft revision.
Report it in a minute, add the detail later.
Incident reporting software has to be quicker than the paper form it replaces. A Bulk report needs a title, a description, a date and a location, and saves a draft at every step, so near miss reporting happens before the shift moves on.
Four required fields
Title, description, date and location. The date cannot be in the future; department and incident type are optional.
Drafts that wait
Every step saves. Your drafts and your team’s drafts are listed with the step they reached, ready to pick up.
Evidence and witnesses
Attach photos, videos or documents, and name the colleagues who saw what happened.
A number on submit
Submitting issues the next INC number for the plant, marks the incident Awaiting Approval and turns each listed action into a task.
Work back to the root cause.
Incident investigation software should keep the reasoning, not just the answer. Each incident in Bulk records its root cause and the lessons learned in words, backed by fishbone diagrams and a 5 Why chain, the same root cause analysis tools as Quality’s 8D reports.
The cause in plain words
Each incident records its root cause and the lessons learned as sentences a reviewer can read, and the Investigation tab says plainly when either was left blank.
The reasoning behind it
Fishbone diagrams sort causes into People, Processes, Materials, Equipment, Measurements and Environment with the root cause starred, and a 5 Why chain runs from five questions to ten.
One method with Quality
The same fishbone and 5 Why tools back Quality’s 8D reports, so an incident and a quality problem are worked the same way.
An incident closes when the fix is done.
Corrective actions should not end as a list. Every immediate action, preventive measure and system change becomes a task with an owner and a due date, and Bulk will not close an approved incident while any of them is still open.
Three kinds of action
Immediate Actions, Preventive Measures and System Changes each become a task in the plant’s Safety project, the immediate ones at high priority. See Tasks.
Approve, then close
A reviewer approves the report or refuses it with a reason. Approval locks the record, and closing is a separate step.
No close with open work
The close dialog counts open and missing tasks and lists each blocker. Only Done or Cancelled counts as finished, and a closed incident cannot be reopened.
Which machines are cleared to run.
Pre-use checks run in Audits, and Asset Readiness reads them for every machine in the plant. Each one is Ready, Blocked by a compulsory check that is due, or running under a supervisor override.
Three states, counted once
Ready, Blocked and Override always add up to the total, and any machine with an overdue or failed check sorts to the top.
Compulsory checks gate production
A due compulsory check shows Production blocked at the workstation. Recommended and optional checks never block on their own.
Overrides run through Audits
A machine on an active supervisor override shows as Override, not Ready, until the override ends. Overrides are requested and signed in Audits.
What safety incident management software should answer.
Safety incident management software keeps the record of what could go wrong, what did, why it happened and what was done about it. In Bulk every answer comes from records the plant creates: assessments, incidents, tasks and checks.
| The question | How Bulk records it | Where you read it |
|---|---|---|
| What could hurt someone here? | Each risk assessment names the task, its hazards and a control measure per hazard, with who is at risk and the controls in place. | Risk Assessments, on the Measures tab |
| How risky is it after our controls? | Every measure is scored likelihood times severity before and after controls; the assessment takes its worst residual score. | The Risk Summary card and the Risk Matrix |
| Which version is in force, and who signed it? | Approving a revision makes it Active and archives the one before; named people sign it with a drawn signature. | Versions tab, Approval History and Sign-offs |
| Is it still current? | Scheduled reviews record Up to date or Revision required, with reminders before the due date and when it passes. | Scheduled Reviews card and the Review Calendar on Dashboards |
| What happened, and where? | The report records title, description, date, location, type, department, evidence and witnesses under an INC number. | Incident Reporting list and the incident’s Overview tab |
| Why did it happen? | A problem statement, fishbone diagrams with a starred cause, a 5 Why chain and the root cause in words. | The incident’s Investigation tab |
| Is the fix done? | Every corrective action is a linked task; the incident closes only when each one is Done or Cancelled. | Actions tab and Tasks |
| Can this machine run? | A compulsory pre-use check that is due blocks the machine unless a supervisor override is active. | Asset Readiness, with checks run in Audits |
One safety record, read across the plant.
Corrective actions land in Tasks, investigations share Quality’s tools and readiness reads Audits, so nothing recorded in Safety ends at a dead end.
- Tasks & ProjectsCorrective actions and extra controls become tasks in the plant’s Safety project.
- AuditsPre-use checks are audits, and readiness reads their results.
- PeopleDepartments, witnesses, reviewers and signers are the plant’s own people.
- QualityInvestigations use the same fishbone and 5 Why tools as 8D reports.
- ProductionA due compulsory check holds the workstation as Production blocked.
- TeamboardsIncident counts feed a teamboard KPI, which can be shown as a safety cross.
- DashboardsRisk matrix, incident, review calendar and days-without-incident widgets.
- Hub & HomeThe Safety tile on Home shows 30 days of reviews recorded, due and overdue.
Questions, answered.
What is safety incident management software?
Safety incident management software records the hazards in your work, the incidents that happen, why they happened and the actions that follow, and keeps each one moving to a close. In Bulk that covers risk assessments scored on a 5x5 risk matrix, incident reports with root cause analysis, corrective actions tracked as tasks, and pre-use checks that decide whether a machine can start.
How does Bulk score risk?
Each hazard is scored for likelihood (Rare to Almost Certain) and severity (Insignificant to Catastrophic), each from 1 to 5, and the two are multiplied into a score from 1 to 25: Very Low 1 to 4, Low 5 to 9, Medium 10 to 14, High 15 to 19 and Critical 20 to 25. Every measure is scored before and after controls, and the assessment takes the score of its worst residual measure.
Who can report an incident or a near miss?
Anyone whose role includes the Create incidents permission. The Safety, Manager, Entity admin and Super user roles have it by default, and an administrator can add it to other roles. Near Miss is one of the preset incident types, and a report needs only a title, a description, a date and a location to be saved.
How is an incident investigated?
The report’s Root Cause step holds a problem statement, fishbone diagrams sorting causes into People, Processes, Materials, Equipment, Measurements and Environment with the root cause starred, a 5 Why chain and a written root cause. Lessons learned and corrective actions follow, and the incident’s Investigation tab shows it all for review.
When can an incident be closed?
Only once it has been approved and every linked corrective task is Done or Cancelled, with no action left without a task. Until then the close dialog lists the blocking tasks and the Close Incident button stays disabled. Closing is final: a closed incident cannot be reopened.
How are risk assessments approved and kept up to date?
A draft with at least one control measure is submitted for approval and locked. An approver makes it Active or refuses it with a reason; approving a new revision archives the previous one. Scheduled reviews name a reviewer and a date, send reminders 7 days ahead by default, and record Up to date or Revision required.
Can we make people sign a risk assessment?
Yes. An approver can request sign-off on an active assessment from named people. Each one sees a blocking prompt with a snapshot of the assessment and either draws a signature or refuses with a reason, and the downloadable PDF includes a sign-off register.
Can AI write our risk assessments?
It can draft them. The Draft Assistant reads an uploaded PDF or image and proposes a task description and up to twelve control measures, leaving blank anything the file does not state. Nothing is added until someone chooses Add or reviews it, and the assistant never submits or approves an assessment.
How do pre-use checks stop an unsafe machine being started?
When a compulsory pre-use check is due or overdue, the machine is Blocked and the workstation shows Production blocked until a passing check is recorded. A supervisor can grant an override with a reason, a signature and an expiry of 1, 2, 4, 8 or 24 hours. Asset Readiness shows every machine as Ready, Blocked or Override.
Can we use our own incident types?
Yes. Each plant keeps its own list in Safety Settings. You can import presets, eight general types such as Near Miss, First Aid Case and Lost Time Injury plus a pack for your industry, then rename, add or remove types. A removed type can no longer be chosen on new reports, and past incidents still show it.
Is Safety its own app?
Yes. Safety installs as one app of Bulk, the system that runs the plant from the customer order to the invoice, installed one app at a time. It works on Bulk’s shared records: corrective actions become tasks, people and departments come from People, and pre-use checks run on Audits.
Can I prepare safety checks with a printable form?
Our forklift inspection checklist, chemical inventory and confined-space permit template and job hazard analysis (JSA) template are starting records to adapt to your site, equipment and approved procedures. A template does not replace a competent risk assessment or authorisation. For recording the assessment in Bulk, follow the risk assessment guide.
Run one real incident end to end.
Start a free trial and take one event from your floor the whole way, from the report to the root cause, the corrective tasks and a clean close. No card needed.
