Best Permit to Work and LOTO Software for Data Centres (2026)

On a production line, a lockout error can injure someone. In a data hall, it can injure someone and cut power to live customer servers. Most permit to work and lockout/tagout (LOTO) software was designed for the first problem, not the second.

Outages are expensive. In Uptime Institute's 2025 survey, 57% of operators said their last major outage cost more than $100,000, and one in five said it cost over $1 million [1]. Outages caused by staff not following procedures rose by 10 percentage points in the same period [2]. How work is planned, permitted and isolated is a big part of that.

Below are the features worth looking for, five platforms compared, and a pilot you can run in a single maintenance window.

What to look for

Isolation order and group sign-on

Isolation in a data centre has to happen in the right order. Load is transferred before breakers open, and downstream points are isolated before upstream ones. The LOTO plan should set out that sequence and update live as each lock goes on, so everyone can see what is isolated and what comes next. Once the isolation is complete, everyone working on the equipment signs on to the plan. All of this should run from a phone or tablet on the floor.

Downstream impact before you isolate

The first question in a data hall is what goes down if this breaker opens. The software should show which PDUs and racks sit downstream of an isolation, and whether they still have a live alternate feed, before the plan is approved.

Contractor onboarding

Contractors and OEM engineers do much of the hands-on work. Your admins should be able to manage contractor companies, and contractors should be able to onboard themselves and upload their own competencies, insurance and training records. If a document lapses, they should not be issued a permit.

Enterprise features

Expect an IT review. Single sign-on, CMMS integration so permits and lockouts link to work orders, and a security setup your infosec team will accept should all be in place on day one.

A full audit trail

Every action should carry a name and a timestamp: who approved the permit, who applied each lock, who signed on and off, and when power was restored. Colocation customers ask for this, and so will any incident investigation.

Fits your process

Your permit types, approval steps and safety rules were written for your sites. The software should be configured to match them. You should not have to change a safety process to suit a product.

Five platforms compared

Zentri

Best for: teams that want permits and LOTO on one platform, built around power dependencies.

Zentri covers permit to work, lockout/tagout and safety observations in one browser-based platform. ImpactView maps the power chain as a single-line diagram and simulates the effect of a lockout before approval. Plans update live as locks go on and people sign on, contractors onboard themselves, and SSO and CMMS integration are included. Trade-off: there is no offline mode.

Fulcrum MCIM

Best for: operators already using MCIM as their CMMS.

MCIM is a maintenance and operations platform for critical facilities, covering work orders, equipment dependency mapping, digital MOPs and switching tags [3]. Permit to work was added as a module in September 2024 and links to MCIM's work order, asset and incident modules [4]. Trade-off: permitting is one module of a wider maintenance platform, and the public material focuses on permit approval rather than lockout execution. In a demo, ask to see group lockouts across shifts, temporary removals and contractor sign-on.

Sphera Control of Work

Best for: process plants with complex, multiphase isolations.

Sphera lets users build one isolation plan covering several work stages, with dependencies between isolation points [5]. Its mobile app works online and offline, and it has a long record in oil, gas and mining. Trade-off: enterprise pricing and a long implementation, which most data centre teams will not need.

VelocityEHS

Best for: organisations that want one broad EHS suite.

VelocityEHS added permit to work, contractor management and lockout/tagout when it bought OneLook Systems in 2021 [6]. Its Contractor Safety and Permit to Work solution combines permits, contractor vetting, inductions and visitor management [7]. Trade-off: Control of Work is one part of a large suite, and data centre needs such as power dependencies are not its focus.

autoLOTO

Best for: electrical teams that want isolation points worked out from their one-line drawings.

autoLOTO builds a digital twin of a site's single-line diagrams. From that it identifies the isolation points and live-dead-live test points for any piece of equipment, and shows live status on the diagram [8]. It also handles hazardous energy permits and electronic MOPs. Trade-off: it is focused on electrical isolation, their team builds the site model from your drawings, and it needs a connection to run [9].

Comparison

✓ on the vendor's public pages · ◐ partly · – not stated publicly · ✗ not available. Based on public vendor information, November 2026.

Where Zentri fits

Zentri was built for permits and lockout first. Permits, lockouts and safety observations sit in one record, and lockouts cover every energy source, including mechanical, hydraulic and pneumatic as well as electrical. ImpactView shows the single-line diagram and the loads downstream of an isolation, and simulates the impact before anyone approves the plan. Isolations can be reordered to match your switching sequence, plans run from a phone or tablet, and every lock and sign-on shows live. Contractors onboard themselves, SSO and CMMS integration fit your existing systems, and your own team sets up the platform to match your process.

How to run a pilot

Pick one data hall or one maintenance window and run a real job from start to finish. A UPS battery string replacement works well:

1. Link the method of procedure (MOP) to the electrical work permit and the LOTO plan.
2. Check the impact view to confirm every rack keeps a live B feed.
3. Put the UPS into bypass and apply the plan locks.
4. Have the vendor technicians sign on under the group lockout.
5. Verify zero energy with a live-dead-live test before work starts.

Then compare approval time, errors and the audit record against your current process.

See ImpactView on your own single-line diagram. Book a demo.

Sources

1. Uptime Institute, Annual Outage Analysis 2026 announcement. businesswire.com
2. Data Center Knowledge, "Data Center Outages Decline for Fourth Straight Year, But Issues Persist". datacenterknowledge.com
3. MCIM by Fulcrum Collaborations, company profile. linkedin.com
4. MCIM, "Fulcrum Collaborations Introduces New Permit to Work Solution". mcim.io
5. Sphera, Control of Work Software. sphera.com
6. VelocityEHS, "VelocityEHS Adds Innovative Permit to Work and Contractor Management Capabilities with Acquisition of OneLook Systems". ehs.com
7. VelocityEHS, Control of Work Software. ehs.com
8. autoLOTO, Lockout/Tagout Mobile Automation Software. autoloto.co
9. autoLOTO v3, Google Play listing. play.google.com