Safety Data Management System (SDMS)
DataScience9 SDMS is a production-ready, cloud-native safety management platform covering 8 fully integrated modules — from enterprise risk and JHA management to incident tracking, compliance, and field hazard observations — built for regulated state and enterprise environments.
8 fully integrated safety modules
Enterprise Risk Register, Job Hazard Analysis, Training, Safety Inspections, Incident Management, Compliance Tracking, Hazard Observations, and Reporting — all sharing one data model and one configurable workflow engine.
Configurable workflow engine
Table-driven, multi-step approval workflows configurable per module through an admin screen without writing code. All five workflow-enabled modules share the same engine — no hard-coded approval chains.
Role-based KPI dashboards
The home screen renders differently for each role — Safety Manager, Risk Owner, Inspector, Compliance Officer, Training Manager, and Admin — showing only the metrics most relevant to their function.
Phased implementation timeline
Discovery & configuration
Configure Azure AD SSO; import org structure, locations, and employees from Workday or HR system; configure email delivery; define workflow approval chains per module.
Data migration
Migrate legacy incidents from JIRA or CSV; import paper training records and compliance history; seed inspection templates; configure compliance obligation registry.
Validation & testing
Validate migrated data; execute functional and integration testing; WCAG accessibility audit; configure AppScheduler reminder thresholds; calibrate KPI dashboard views.
Pilot launch
Parallel operation with existing processes; user acceptance testing by Safety Managers, Compliance Officers, and Field Inspectors; training delivery for all roles.
Full go-live
All employees onboarded; legacy process decommissioning; full monitoring and alerting active; OSHA reporting views validated; ongoing HR system sync activated.
Platform modules
8 integrated safety modules mapped to regulated-environment requirements
A centralized register for identifying, scoring, assigning, mitigating, and monitoring enterprise-wide safety risks — aligned with COSO ERM and ISO 31000.
- Separate inherent and residual risk scoring on a 5×5 likelihood × impact matrix; ratings: Low / Medium / High / Critical.
- 7-step workflow: Submit → Register → Assess → Control Review → Mitigate → Monitor Review → Close / Archive.
risk_reviewstable auto-created on workflow transitions;next_review_ondate tracked per risk.- Response strategies: Avoid / Mitigate / Transfer / Accept / Monitor; corrective actions linked via junction table.
- Enterprise risk hotspot detection: flags clusters of high-risk items in the same org unit within a rolling 90-day window.
Built for regulated environments
SDMS replaces disconnected ticketing systems, paper records, and spreadsheets with a single, mobile-first, audit-ready safety management platform — deployable on GCP, Azure, or on-premise via Docker/Kubernetes.
Talk to our teamTechnology stack
- React 18 + Tailwind CSS — mobile-first, WCAG 2.2 AA compliant
- Spring Boot 4.x REST API with Spring Security and JPA
- PostgreSQL 16 — 50+ tables, 30+ views, materialized views
- Configurable workflow engine (no-code admin configuration)
- AppScheduler — compliance deadline scanning and notifications
- Polymorphic document attachment via record_documents
- KPI materialized views for sub-second dashboard rendering
- Integration staging layer (Workday, LMS, JIRA migration)
- Azure AD SSO (OIDC), JWT, BCrypt, TOTP MFA
- Apache PDFBox / OpenPDF — server-side PDF generation
Safety capabilities
- Submit hazard observations and incident reports from any mobile device without app installation.
- Execute safety inspections with reusable checklists linked directly to compliance obligations.
- Identify and score enterprise risks with dual inherent / residual 5×5 matrices.
- Manage Job Hazard Analyses with 4-level hierarchy and hierarchy-of-controls enforcement.
- Track training assignments, completions, and certifications with 90-day expiry alerts.
- Generate OSHA 300 / 300A / 301 logs directly from the incident module without custom SQL.
- Export any list page or report tab to CSV and PDF with filters preserved.
- Receive automated email and SMS reminders for overdue corrective actions and compliance deadlines.
Security and compliance
- JWT + TOTP MFA; Azure AD SSO (OIDC); BCrypt password hashing; endpoint-level RBAC.
- Append-only audit_logs for every create/update/delete with old and new data snapshots.
- US-based data storage in GCP us-west2; FedRAMP Medium pathway via GCP authorization.
- 8 distinct roles with org-unit data scoping; non-Admin users see only their department's records.
- Cloud Armor WAF/DDoS at the edge; VPC isolation; AES-256 encryption at rest and in transit.