Safety Data Management System (SDMS)
DataScience9 SDMS is a production-ready, cloud-native safety management platform covering 8 fully integrated modules — from enterprise risk and JHA management to incident tracking, compliance, and field hazard observations — built for regulated state and enterprise environments.
See SDMS in action — 79 recorded test cases, end to end
Watch a recorded walkthrough of the Safety Data Management Portal, run live against the working application rather than described on paper — hazard observations, incident management, job hazard analysis, safety inspections, training and certification tracking, the configurable workflow engine, automated notifications, and compliance/audit reporting are all demonstrated end to end.
Watch the demo on YouTube8 fully integrated safety modules
Enterprise Risk Register, Job Hazard Analysis, Training, Safety Inspections, Incident Management, Compliance Tracking, Hazard Observations, and Reporting — all sharing one data model and one configurable workflow engine.
Configurable workflow engine
Table-driven, multi-step approval workflows configurable per module through an admin screen without writing code. All five workflow-enabled modules share the same engine — no hard-coded approval chains.
Role-based KPI dashboards
The home screen renders differently for each role — Safety Manager, Risk Owner, Inspector, Compliance Officer, Training Manager, and Admin — showing only the metrics most relevant to their function.
Phased implementation timeline
Discovery & configuration
Configure Azure AD SSO; import org structure, locations, and employees from Workday or HR system; configure email delivery; define workflow approval chains per module.
Data migration
Migrate legacy incidents from JIRA or CSV; import paper training records and compliance history; seed inspection templates; configure compliance obligation registry.
Validation & testing
Validate migrated data; execute functional and integration testing; WCAG accessibility audit; configure AppScheduler reminder thresholds; calibrate KPI dashboard views.
Pilot launch
Parallel operation with existing processes; user acceptance testing by Safety Managers, Compliance Officers, and Field Inspectors; training delivery for all roles.
Full go-live
All employees onboarded; legacy process decommissioning; full monitoring and alerting active; OSHA reporting views validated; ongoing HR system sync activated.
Platform modules
8 integrated safety modules mapped to regulated-environment requirements
A centralized register for identifying, scoring, assigning, mitigating, and monitoring enterprise-wide safety risks — aligned with COSO ERM and ISO 31000.
- Separate inherent and residual risk scoring on a 5×5 likelihood × impact matrix; ratings: Low / Medium / High / Critical.
- 7-step workflow: Submit → Register → Assess → Control Review → Mitigate → Monitor Review → Close / Archive.
risk_reviewstable auto-created on workflow transitions;next_review_ondate tracked per risk.- Response strategies: Avoid / Mitigate / Transfer / Accept / Monitor; corrective actions linked via junction table.
- Enterprise risk hotspot detection: flags clusters of high-risk items in the same org unit within a rolling 90-day window.
Built for regulated environments
SDMS replaces disconnected ticketing systems, paper records, and spreadsheets with a single, mobile-first, audit-ready safety management platform — deployable on GCP, Azure, or on-premise via Docker/Kubernetes.
Talk to our teamTechnology stack
- React 18 + Tailwind CSS — mobile-first, WCAG 2.2 AA compliant
- Spring Boot 4.x REST API with Spring Security and JPA
- PostgreSQL 16 — 50+ tables, 30+ views, materialized views
- Configurable workflow engine (no-code admin configuration)
- AppScheduler — compliance deadline scanning and notifications
- Polymorphic document attachment via record_documents
- KPI materialized views for sub-second dashboard rendering
- Integration staging layer (Workday, LMS, JIRA migration)
- Azure AD SSO (OIDC), JWT, BCrypt, TOTP MFA
- Apache PDFBox / OpenPDF — server-side PDF generation
Safety capabilities
- Submit hazard observations and incident reports from any mobile device without app installation.
- Execute safety inspections with reusable checklists linked directly to compliance obligations.
- Identify and score enterprise risks with dual inherent / residual 5×5 matrices.
- Manage Job Hazard Analyses with 4-level hierarchy and hierarchy-of-controls enforcement.
- Track training assignments, completions, and certifications with 90-day expiry alerts.
- Generate OSHA 300 / 300A / 301 logs directly from the incident module without custom SQL.
- Export any list page or report tab to CSV and PDF with filters preserved.
- Receive automated email and SMS reminders for overdue corrective actions and compliance deadlines.
Security and compliance
- JWT + TOTP MFA; Azure AD SSO (OIDC); BCrypt password hashing; endpoint-level RBAC.
- Append-only audit_logs for every create/update/delete with old and new data snapshots.
- US-based data storage in GCP us-west2; FedRAMP Medium pathway via GCP authorization.
- 8 distinct roles with org-unit data scoping; non-Admin users see only their department's records.
- Cloud Armor WAF/DDoS at the edge; VPC isolation; AES-256 encryption at rest and in transit.