Products · Safety Studies

HAZOP, LOPA, SIL, FMEA and DSEAR, run against your P&ID

The actions are tracked on the asset afterwards, with an owner and a due date.

The five studies

HAZOPstudy report (PDF) · worksheet (CSV or XLSX)
LOPAstudy report (PDF)
SILassessment report (PDF)
FMEAworksheet report (PDF) · worksheet (CSV or XLSX)
DSEARassessment — held in the tool; no export yet

Raise actions with an owner and a due date, linked to the deviation and to the model component — then let the reminders do the chasing

Included from the Professional plan.

Book a demo

What this replaces

Day one of the workshop goes on rebuilding the node list, because last time it lived in someone’s spreadsheet

The study is filed as a PDF and the plant carries on changing without it

The actions end up in a second spreadsheet, and chasing them is somebody’s Friday

How it works

01Set up the study: nodes, design intention, process conditions, and the team around the table

02Work the guidewords — the standard IEC 61882 set, with a first pass proposed for common equipment and an engineer accepting or rejecting each deviation

03Score it on the risk matrix, and take it through LOPA, a SIL target, an FMEA worksheet or a DSEAR zone classification as the hazard demands

04Raise actions with an owner and a due date, linked to the deviation and to the model component — then let the reminders do the chasing

What you get out

HAZOP study report (PDF)
HAZOP worksheet (CSV or XLSX)
Action register (PDF, CSV or XLSX)
LOPA study report (PDF)
SIL assessment report (PDF)
FMEA worksheet report (PDF)
FMEA worksheet (CSV or XLSX)
DSEAR assessment — held in the tool; no export yet

These studies are facilitated, never certified. Deviations proposed by the tool are suggestions for the team to accept or reject, and every study requires a competent facilitator and a competent assessor to be worth anything.

What it is built to

IEC 61882 — the guideword set and the 5×5 risk matrix the HAZOP worksheet works to
IEC 61511 Annex F / CCPS — the LOPA frequency arithmetic, with an independence gate on each protection layer
IEC 61508-6 — SIL verification by the simplified low-demand PFDavg equations
IEC 60079-10-1 and DSEAR 2002 — zone classification, by a simplified scheme: a flashpoint flammability gate and a release-grade to zone-type mapping
AIAG-VDA — the FMEA worksheet carries an action priority alongside the risk priority number
Every study is facilitated by the tool and owned by you. Nothing here is a certification, and none of it replaces a competent facilitator or a functional-safety assessor.

Works with

P&ID Editor Documents AI Agents What is an intelligent P&ID?

Technical capabilities

Where the nodes come fromYou define them. A node carries a tag, a design intention and its process conditions, and can be pointed at an element in the drawing so the study and the model stay connected — but the tool does not read the P&ID and emit a node list, and we will not pretend otherwise. Node setup is the work the tool speeds up, not the work it removes.

Guideword analysisA per-node pass proposes deviations from the standard guidewords against the equipment family it recognises in the node — pumps, tanks, valves, chemical dosing and instruments. An engineer accepts, edits or rejects each one. A node outside those five families produces nothing to accept, and you write the deviations yourself.

LOPAInitiating-event frequency, conditional modifiers and independent protection layers, with each layer tested for independence before it may be credited, and the residual frequency compared against your tolerable target.

SILSafety instrumented functions built from subsystems and elements — voting, β, dangerous-undetected and dangerous-detected failure rates, diagnostic coverage — resolved to a PFDavg and a SIL band by the simplified low-demand equations.

FMEAFailure modes per item with severity, occurrence and detection, a risk priority number, an AIAG-VDA action priority, revised scores after the action, and an audit entry on every change to the worksheet.

DSEARSubstance properties from a reference set, a flammability decision by flashpoint, and a release grade mapped to a zone. Assessments are stored and editable in the tool; there is no report export yet.

ActionsAn action has an owner, a due date, a priority, a category, evidence, attachments and an optional link to the model component it applies to. A scheduled job sends reminders as due dates approach, and every action change is written to the study’s audit trail.

Questions people actually ask

Does it generate the HAZOP from my P&ID?

No, and that is the honest answer to the question this page gets asked most. You define the nodes; the tool proposes deviations against the guidewords for the equipment it recognises, keeps the worksheet, the risk scoring and the actions, and produces the report. The node list is yours.

Which of the five do I get on my plan?

All five — HAZOP, LOPA, SIL, FMEA and DSEAR — from the Professional plan upwards. Starter includes none of them.

Is the SIL calculation certified?

No. It implements the simplified low-demand PFDavg equations from IEC 61508-6, and it shows you the inputs it used. A SIL verification that carries weight is signed by a competent functional-safety assessor, and this is a tool they use, not a substitute for them.

What comes out of a DSEAR assessment?

A stored, editable assessment with the substance properties, the flammability decision and the zone classification. There is no PDF or spreadsheet export for DSEAR yet — the other four studies all have one.

What happens when the design changes?

The study does not re-run itself, and there is no revision-to-revision diff. What you get is the study, its actions and its audit trail in the same place as the model, so a re-validation starts from the last study rather than from a blank page.

Who chases the actions?

A scheduled job does, against the due date and the owner on each action. It emails, provided your organisation has notifications switched on and an email provider configured, and it does not close anything on your behalf.

Try it with a sample plant Compare all seven products — a 3-minute read