Skip to main content
Help Centre Contact
Partners
Create Free Account
Create Free Account Book a Demo

Contractor Compliance Software for Oil & Gas

Thousands of Permits. One Turnaround. Every Isolation Proved.

Offshore platforms, onshore plants, pipelines, and fuel terminals running one contractor record, from the first offshore credential check to the permit that closes the job.

Book a Demo See How It Works
  • Offshore platforms
  • LNG plants
  • Onshore gas fields
  • Pipelines
  • Fuel terminals & depots
  • Turnaround & shutdown contractors
A permit coordinator and a contractor in flame-resistant coveralls reviewing a hot work permit on a tablet beside a tagged isolation point at an onshore gas plant, gas detectors clipped to both belts The isolation permit is linked to the job it protects

ComplyFlow for Oil & Gas.

Contractor compliance software for oil and gas: offshore platforms, onshore plants, pipelines, and fuel terminals. One record follows every contractor from their first offshore credential check through permit, isolation, and turnaround close-out, so the safety case stands on evidence, not a folder of certificates chased by email.

  • The isolation permit sits beside the permit it protects. A related isolation permit is linked to the hot work or confined space permit that depends on it, so the approver and the area supervisor see both together.
  • Offshore credentials tracked to their own expiry. BOSIET, FOET, HUET, CA-EBS, T-BOSIET, and the offshore medical, each its own document, not squeezed into a generic licence field.
  • One record for a turnaround, not a portal per contractor. Every crew, credential, and permit for the shutdown window in one place before the compressed window opens.
  • Ready the day the regulator asks. The permit, isolation, and credential record a safety case or an incident investigation needs, not a scramble through email.
ISO 27001 certified, hosted on AWS in Australia
Microsoft and Okta single sign-on, so there are no new passwords for your HSE team
The first contractor compliance platform we can find with its own MCP server

What You Can Check Before You Book a Demo.

No cleared Client logo from oil and gas yet, so here are three things about ComplyFlow itself you can verify rather than take on trust.

The Numbers

Why Oil & Gas Contractor Compliance Cannot Run on a Spreadsheet.

The scale of the sector your contractors work in, from the industry’s own peak body, with the year each figure applies to.

How It Helps

Digitised. Automated. AI-Reviewed. The Whole Contractor Lifecycle for Oil & Gas.

Three things make ComplyFlow different for HSE and turnaround teams, and every job on a plant or a platform draws on all three.

  • 01

    The Whole Lifecycle, on One Record.

    First company check to permit close-out: every contractor, credential, and permit on one record. Nothing falls between systems.

  • 02

    Your Procedures, Digitised & Automated.

    Permit pad, sign-in book, and site folders become one system that chases, checks, and closes out on its own.

  • 03

    AI That Does the Reading.

    Certificates, permits, and inspections read against your standard in seconds, reasons shown. Your people make the call.

What you do Digitise Automate AI
Prequalify a contractor company Company registers once: insurances, licences, and safety management system documents uploaded online. Expiry reminders and re-approvals go out on their own. Insurance certificates and safety documents read against your requirements, gaps shown.
Check offshore credentials BOSIET, FOET, HUET, CA-EBS, T-BOSIET, and the offshore medical tracked to their own expiry, separate from onshore licences. A Worker whose BOSIET or medical has lapsed shows as not cleared before they reach the heliport. Certificates read on upload against the document type you set, whether standard BOSIET, CA-EBS, or T-BOSIET.
Induct a Worker on site Site induction and gas test or confined space tickets, such as RIIWHS202E and MSMWHS217, on the Worker’s phone before they arrive. An expired ticket or induction blocks sign-in until it is renewed. Tickets and verifications of competency checked as they are uploaded.
Sign in at the gate QR code or kiosk replaces the sign-in book at the plant gate or the platform muster point. Record checked at the gate: not cleared, not in. The live list updates itself. Ask your AI assistant who is on the plant right now, via MCP.
Raise a permit to work Hot work, confined space, and isolation permits raised on a phone or a tablet. A related isolation permit is linked to the permit that depends on it, and every permit closes with a time-stamped record. The gas test certificate and the SWMS behind the permit read against your standard before approval.
Coordinate a turnaround Every contractor crew, permit, and isolation for the shutdown window on one schedule. Your permit coordinator sees who is cleared, what is open, and where two crews are booked into the same area. Ask your assistant which permits and crews are active in one area right now.
Inspect and verify controls Critical control checks and plant inspections on a phone, with photos. Every failed item becomes an owned, dated corrective action. The photos and the failed items are on the record the moment the inspection syncs.
Report to the safety case One searchable record per facility, not a folder per contractor. Live completion rates and scheduled reports into Power BI. Ask in plain English through ChatGPT, Claude, or Copilot; the answer comes from the record.

Every AI cell names a check the product actually runs. Nothing here reads a safety case for you; your people still make the call.

Who It Is For

What ComplyFlow Means for Me, on an Oil & Gas Site.

Find your job. The three lines below are what changes for you.

  • Safety & HSE Manager

    • Every contractor cleared against your safety case requirements
    • Permit and isolation records kept searchable for audit
    • Corrective actions with an owner and a date
    See the role page

  • Turnaround Manager

    • Every crew, permit, and isolation on one schedule
    • Overlapping permits in one area flagged before clash
    • Onboarding hundreds of contractor Workers before the window

  • Permit Coordinator

    • A related isolation permit linked to its permit
    • Hot work and confined space raised and closed
    • Every permit kept with who signed and when

  • Contracts & Procurement Manager

    • Company approval and Worker clearance kept apart
    • Insurances and safety management documents kept current
    • Supplier standing by ABN, through the API

  • Offshore Installation Manager

    • Every person checked against BOSIET, HUET, and medical
    • A live sign-in list for the platform
    • One export for NOPSEMA or an incident investigation

  • Operations & Asset Manager

    • Compliance by facility, by contractor, and by permit
    • Inspection results against the critical controls you define
    • One record across offshore, onshore, and pipeline assets

  • EPC & Turnaround Contractor

    • Register once, for every operator and turnaround
    • Upload credentials once, with reminders before expiry
    • A profile that travels between every Client

  • Worker & Crew Member

    • One profile for every offshore and onshore credential
    • Gate and muster sign-in from your own phone
    • A reminder before anything runs out, not after

Features You’ll Use

The Features Oil & Gas Teams Use Every Week.

Four jobs an HSE or turnaround team does every week on a plant or a platform, and what changes when they all run off one record.

One Standard for Every Credential, Offshore and Onshore.

Set your requirements once: BOSIET, FOET, HUET, the offshore medical, onshore tickets such as confined space and gas testing, and your safety management system documents. Every contractor is measured against the same list, and the dashboard shows who is short before they are mobilised.

  • Offshore and onshore requirement sets, kept apart
  • Per-facility extras where a platform or plant needs them
  • Contractors upload once, for every operator on ComplyFlow

Sign-In at the Gate Decides Who Works Today.

A QR code at the plant gate or a kiosk at the muster point. The crew scans in, the record checks their credentials, tickets, and induction, and the HSE team sees who is on the plant right now. Not cleared, not in.

  • Works at unmanned gates and remote sites
  • A live list for the muster point in an emergency
  • Refused entries kept as a record, with the reason
A contractor in flame-resistant coveralls scanning a QR code at a gas plant gate, a portable gas detector clipped to his belt

Permits Linked to the Isolation They Depend On.

Hot work on the flare deck, confined space in the separator, isolation on the pipeline valve. The permit is raised on a phone, a related isolation permit is linked to it, the SWMS and the gas test certificate behind it are read against your standard, and it closes with a record of who signed what and when.

  • Hot work, confined space, and isolation permit types
  • SWMS and gas test certificates read against your rules
  • Every permit kept, searchable, for the safety case

Inspections and Critical Controls That Close Out, Not Pile Up.

Critical control checks and plant inspections done on a phone, with photos, whether it is a routine round or a turnaround walk-down. Every failed item becomes an action with an owner and a date, and the HSE team sees the close-out rate across the facility without chasing a spreadsheet.

An inspector in a hard hat and safety glasses photographing a valve manifold on a tablet during a plant turnaround, isolation tags visible on the valves

The Numbers You Run On

The KPIs an Oil & Gas Site Reports, and Where Each One Comes From.

What an HSE manager, a turnaround manager, or a regulator asks for, and where it’s from.

Reads from names the ComplyFlow record each measure is read from. The targets are yours.

  1. Permit and isolation close-out

    Whether every permit closed with its related isolation properly linked and signed off

    Reads fromEvery permit and its linked isolation, timestamped

  2. Offshore credential currency

    The share of your offshore workforce with BOSIET, FOET, HUET, and medical current

    Reads fromThe credential record, live, by Worker and installation

  3. Critical control verification rate

    Whether the controls that prevent a major accident are actually checked

    Reads fromInspection results against your controls, by facility

  4. Corrective action close-out rate

    The share of failed inspection or audit items closed by their due date

    Reads fromEvery failed item, as an owned, dated action

  5. Refused gate and muster entries

    How often a Worker or contractor turned up who should not have

    Reads fromEvery refusal at the gate, with reason

  6. Turnaround onboarding readiness

    How many contractor Workers booked for the shutdown are actually cleared

    Reads fromThe prequalification and induction record, against the roster

Fits Your Plant & Platform Stack

Slots Into the Systems Your Oil & Gas Site Already Runs.

Read it left to right: where people and work turn up, the one record that checks them, and where the proof goes.

Where people and work arrive

QR kiosks & muster point tabletsContractors and crew scan in at the plant gate or the installation muster point built in
Turnstiles, gates & access controlPhysical access control at the plant boundary or the platform
Permit & safety systemsHot work, confined space, and isolation permits raised in ComplyFlow itself native
Work orders & maintenanceSAP and IBM Maximo raise the work order; the record clears the contractor API
Microsoft & Okta sign-onYour people log in the way they already do SSO
PrequalificationWorkforce ComplianceTraining & InductionSite AccessVisitor Sign-InSite DocumentsDigital PermitsInspections & AuditsPlant & EquipmentIncident ManagementRisk Management ComplyFlow. One Record.

Where the proof goes

Power BI dashboardsCompliance by facility, by contractor, and by permit native
Safety case & incident reportingThe record NOPSEMA, RSHQ, DEMIRS, or an internal investigation asks for, exported
Permit & isolation audit trailEvery permit, isolation link, and sign-off, with a name and a time
AI assistants via MCPAsk ChatGPT, Claude, or Copilot who is on the plant right now and what is overdue MCP
Legislation MonitorWhen an Australian WHS Act, Regulation, or Code changes, you hear about it first

Sign-on, kiosks, permits, and the Legislation Monitor are ComplyFlow’s own. Everything else connects through the open API and MCP, so if a system in your stack has an API, it belongs on this drawing.

Free From ComplyFlow. No Account Needed.

Know When an Oil & Gas Rule Changes, Before Your Auditor Does.

Free for anyone. It reads every Australian WHS Act, Regulation, and Code of Practice, including confined space and isolation rules, turns each change into plain English, and rates how much it matters.

Sign Up Free No credit card. No sales call.

monitor.complyflow.com
The Legislation Monitor home page: Australian WHS legislation monitoring, completely free
  • 390 instruments across all nine Australian jurisdictions
  • A plain-English summary and a severity rating for every change
  • AI reads the change, a person checks it, a Tuesday digest tells you

Why Oil & Gas Teams Use It

What Oil & Gas Teams Get, in Plain Words.

Fewer chased credentials, permits that will not slip through a gap, and proof you can put in front of the regulator the day they ask.

A turnaround contractor and an HSE manager checking a tablet against a bank of tagged isolation points at a gas plant during a shutdown

Stop Chasing Offshore Credentials

Contractors upload BOSIET, FOET, HUET, and their offshore medical once, each tracked to its own expiry rather than a generic licence field. ComplyFlow reminds them before anything runs out.

Know Who Is Cleared to Mobilise, Right Now

Every Worker and contractor crew checked at the gate or the muster point. If they are not cleared, you see it before they reach the plant, and the live list is your muster record in an emergency.

Permits Linked to the Isolation They Depend On

A hot work or confined space permit carries a related isolation permit on the same record, so your approver signs off both together, not two separate pieces of paper.

Pass the Regulator’s Audit Without the Scramble

Every credential, permit, isolation link, and inspection is kept and searchable by facility. When NOPSEMA, RSHQ, DEMIRS, or an investigation asks, you show them in minutes.

One Onboarding for the Whole Turnaround

Hundreds of contractor Workers checked and inducted before the shutdown window opens, against the same standard across every crew and every contractor company.

Let AI Read the Permit and the SWMS

Upload a permit, a SWMS, or a gas test certificate and AI checks it against your standard in seconds, then tells you what is missing. Your people make the final call.
A gas plant flare stack and pipework seen from the perimeter road, the kind of site an oil and gas operator runs

Why ComplyFlow

Why Oil & Gas Teams Choose ComplyFlow, Not Another Point Solution.

Most oil and gas sites run a prequalification network, a permit-to-work tool, and a spreadsheet. Each does one job. The gaps between them are where a safety case fails.

US-built prequalification networksThe contractor pays to be listed; the operator chooses which network, not the contractorPermit-to-work & CMMS-adjacent toolsHandle the permit or the maintenance record, often apart from the credential sideSpreadsheets & email-based vettingFree, and relies on an office manager keeping every crew’s paperwork current ComplyFlowOne record, your standard
One record from the contractor company to the crew to the permit PartlyNot thereNot there Company, Worker, credential, and permit on the same record
Your safety case requirements, not a network standard Not thereBuilt inBuilt in Set once for the site, extras per facility or operator
Offshore credentials tracked to their own expiry Not thereNot thereNot there BOSIET, FOET, HUET, and the medical, each with its own renewal cycle
A permit linked to the isolation it depends on Not therePartlyNot there Related isolation permits linked on the same record
Visibility across multiple contractor crews during a turnaround Not therePartlyNot there Every crew, permit, and isolation for the window on one schedule
The contractor registers once, for every operator Not thereNot thereNot there One profile, every ComplyFlow Client, no separate portal per operator
AI that reads permits, credentials, and gas test certificates Not thereNot thereNot there Permits, credentials, and inspections, with the reasons shown
Open API and MCP into your work-order, BI, and AI tools PartlyPartlyNot there SAP, IBM Maximo, Power BI, and ChatGPT, Claude, or Copilot

This compares kinds of product, by how they are sold, not named vendors. Named comparisons, with dates and sources, live on the comparison pages.

Getting Started

We Map Your Sites. We Stay With You.

You are not handed a login and left to it. Our onboarding team builds your facilities and your contractor panel with you, and stays on hand once the first permit is live.

  • Mitch Bourne, ComplyFlow
  • Jessica Morgan, ComplyFlow
  • Sam Bourne, ComplyFlow
  • Phil Wallach, ComplyFlow
  • John McCann, ComplyFlow
  1. 1 We Map Your Facilities & Requirements

    Every platform, plant, pipeline section, or terminal, and what you need from a contractor before they can work: credentials, insurances, permits, and offshore requirements.

  2. 2 We Load Your Contractor Panel

    We invite your operators, EPCs, and turnaround crews, help them register and upload their credentials, and answer their questions so your HSE team does not have to.

  3. 3 We Put Sign-In at Every Gate

    QR codes and kiosks at the plant gate, the muster point, or the site office, tested before anyone relies on them.

  4. 4 You Go Live, We Stay Close

    Training for your team, written guides for every contractor, and a support team that picks up the phone.

  • ISO 27001 certified ISO 27001Certified 2019
  • AWS Qualified Software Certified 2023
  • GDPR, General Data Protection Regulation Compliant 2020
  • Microsoft Okta Single sign-on

Security & Data

Certified, Audited & Hosted in Australia.

Your compliance record is the evidence you rely on when somebody asks, so where it lives and who can reach it matters. ComplyFlow is ISO 27001 certified, runs on AWS in Australia, and your people sign in with the accounts they already have.

Questions

Questions Oil & Gas Teams Ask Before They Book a Demo.

Does it track offshore credentials like BOSIET, HUET, and the offshore medical?

Yes. Each is set up as its own document or training requirement, with its own expiry, separate from onshore licences and tickets. A Worker whose BOSIET or medical has lapsed shows as not cleared before they reach the heliport, not after.

Can a permit be linked to the isolation it depends on?

Yes. A hot work or confined space permit can carry a related isolation permit linked to it, so the approver and the area supervisor see both together, not two separate pieces of paper.

How does it help during a turnaround, with multiple contractor crews on site at once?

Every crew, credential, and permit for the shutdown window sits on one record, so your permit coordinator can see who is cleared, what is open, and where two crews are booked into the same area, instead of checking a separate spreadsheet per contractor.

Does it integrate with our SAP or Maximo work order system?

Through the open API. Your maintenance system raises the work order and reads the contractor’s compliance from ComplyFlow before it releases the job, so the record is not duplicated.

Can requirements differ by facility, an offshore platform, an onshore plant, or a terminal?

Yes. Requirements sit at the company level with extras per site, so an offshore platform can ask for BOSIET and a medical while an onshore terminal asks for a different set, and a contractor uploads once against whichever sites they are cleared for.

Does it handle a New Zealand facility as well as an Australian one?

Yes. Site and account requirements are yours to configure, so a New Zealand facility and an Australian facility can each carry their own requirement list on the same account.

Is our data held in Australia?

Yes. ComplyFlow runs on AWS in Australia and is ISO 27001 certified. Your people log in with Microsoft or Okta single sign-on, so there are no new passwords to manage.

Can it produce the audit trail a regulator or an internal investigation needs after a high-potential incident?

Yes. Every permit, isolation link, credential, and inspection is kept and searchable by facility, with who signed off and when, exported when NOPSEMA, RSHQ, DEMIRS, or an investigator asks.

See It Against Your Own Sites and Contractors.

Book a 30-minute demo. We will show you ComplyFlow working with your kind of facility, your contractor panel, and your permit types. No slides, no hard sell.

Book a Demo Speak to Us
  • ISO 27001
  • Hosted on AWS
  • Microsoft & Okta SSO
  • API & MCP
  • Data in Australia

Compliance you can prove, instantly.