Architecture, security, and what we will not claim.
HazardIQ sits beside your EAM and GIS, not in front of them. It is additive-only, org-isolated and audit-logged end to end.
Reads your master. Writes only what you allow.
Integration & data model
Platform
Native SAP BTP: CAP (Node), XSUAA, HANA, single-tenant data isolation. Also runs off SAP on a container profile for evaluation. Reads your functional-location and equipment master over a BTP Destination; geometry is published as GeoJSON.
Ask for the reference architecture → Ask for the conformance mapping →
Fail-closed, org-scoped, traceable.
Access
XSUAA sign-in in production. Every record is scoped to an organisation unit; a user without one is refused.
Audit
Tamper-evident, field-level change log on every record, and hash-chained check evidence with 40-year retention.
Supply chain
Additive-only data model, correlation-ID tracing, audit-log emission and a software bill of materials (SBOM).
We flag, gate and measure. You remain responsible.
Every verdict and report carries the notice: evidence, not duty — the PCBU remains responsible for WHS compliance. HazardIQ flags, gates and evidences; it does not prevent incidents or guarantee compliance. Verify outputs against the current requirements before statutory use. CLEAR is returned only where the location sits inside a recorded survey, and low positional confidence never yields CLEAR.
We tell you the status of every claim.
| Claim | Status | Detail |
|---|---|---|
| Fail-safe verdicts, survey coverage, tamper-evident evidence, forms platform, offline sync, jurisdiction packs | Tested | Covered by automated tests (self-reported). |
| EAM adapters (SAP, Maximo, TechnologyOne) | Not yet verified live | Tested on recorded work-order data. A live check in your non-production system is part of every pilot; the TechnologyOne connection point is still to be confirmed. |
| HOLD / CAUTION / CLEAR wording and jurisdiction pack values | Awaiting sign-off | The wording is with legal review and pack values await primary-source verification. Until then we use the conservative label and advise only. |
| Independent penetration test, IRAP assessment, accessibility audit of the newest screens | Not yet done | Our own red team and Essential Eight mapping are self-assessed. |
| ISO 55001 · ISO 8000-8 | Aligned, not certified | Design is aligned to these standards. No certification is held or implied. |
| Customer references | None published | No customer logos, counts or quotes are shown. |
Want the evidence behind a row? Ask for the capability evidence pack →
See it on a sample of your data.
A 45-minute working session: bring one site and one work order. We load a sample of your data into the register, score its data quality, and run a real HOLD / CAUTION / CLEAR check on it. Loading a full register is a separate, scoped step.
Book a working session