Critical risk management

See what is actually protecting your people.

Every business has a handful of activities that could seriously injure or kill someone. Working at height. Confined spaces. Excavations. Hot work. Bowtie One turns each one into a single picture — what could go wrong, what you are relying on to stop it, and where that protection is thinner than you think.

No account needed. Building is free.

A board in Bowtie One for working in an excavation. Causes on the left — sides left unsupported, spoil stacked at the edge, an excavator tracking too close, and heavy rain saturating the ground — each pass through a control into an excavation collapse in the middle, then out through further controls to the outcomes on the right: a worker buried, and a worker struck by falling spoil. Each outcome shows its severity, initial risk and residual risk. An escalation factor shows a condition that would defeat one of the controls.
A real board in Bowtie One: working in an excavation. The ways it could collapse on the left, the controls standing in the way of each one, and what happens to people on the right — with how bad it could get worked out for you.

The method

One picture, six parts

A bowtie reads left to right, like the job itself. It takes about an hour to map an activity, and the result is something a supervisor, a director and a new starter can all read without training. Here is the whole of it.

01

The activity

The job with the potential to hurt someone — working in an excavation, entering a tank, lifting over a live area. In bowtie language this is the hazard. It sits at the top of the picture.

02

What could go wrong

The realistic ways the job turns bad, each on its own line into the middle. Sides left unsupported. Spoil stacked at the edge. Plant working too close. These are called threats.

03

What stops it

Everything you are relying on to keep each of those from happening — the trench box, the permit, the exclusion zone, the pre-start check. These are your controls, and this is usually the first time people see them all written down in one place.

04

The moment it goes wrong

The point where you have lost control of the job. The excavation collapses. Not the injury yet — the event itself. It sits in the knot of the bowtie, and everything on the picture is arranged around it.

05

What limits the harm

The controls that only matter once it has already happened. The standby person. The rescue plan. Detection and alarms. They cannot prevent the event, but they decide how badly it ends.

06

What happens to people

The realistic outcomes if those last controls fail too — a worker buried, someone crushed by plant. Each one carries its own severity, so the picture ends with the thing that actually matters.

Capabilities

What you get

Building is free. The paid plan is about getting the work out of the browser, keeping it somewhere, and sharing it with the people who need it.

Map an activity in an afternoon

Add what could go wrong, the controls standing in the way, and the outcomes — straight onto the canvas. Undo, redo, and a neaten-up command that lays the board out for you.

See every control in one place

Record what each control is, what kind it is, and how strong it really is. Colour the board by strength and the thin spots stop hiding inside a procedure nobody has read.

Find what defeats your controls

A control can exist on paper and still not be there when it matters — ground conditions change, an inspection is deferred. Map those, and what you do about them.

Know how bad it could get

Every outcome carries a severity, an initial risk and a residual risk, recalculated as your controls change. Colour by either one to see where you still carry exposure.

Show the difference controls make

Give each cause a likelihood and the board totals it up for the event itself — so you can show, on one screen, what your controls are actually buying you.

Keep them and review them

Save boards to your account, organise them on a dashboard, set review dates so they do not quietly go stale, and invite colleagues to view or edit. Paid plan.

Pricing

What it costs

You can map a complete activity without paying anything, or even making an account. Paying is about getting it out of the browser and working on it with other people.

Free

£0

Map as much as you like.

  • Unlimited boards
  • Causes, controls, outcomes and what defeats them
  • Control strength and type
  • Severity, initial risk and residual risk
  • Automatic autosave in your browser
Map an activity

Pro

£12/month

or £120/year — 2 months free

Keep it, share it, review it.

Everything in Free, plus:

  • Save boards to the cloud
  • Import and export project files
  • Export as a PDF report
  • Dashboard with review dates
  • Invite colleagues to view or edit
  • Start from saved templates
Create an account

Questions

Common questions

What is a bowtie, in plain English?

It is one picture of one dangerous activity. The causes run in from the left, the moment you lose control sits in the middle, and the outcomes fan out to the right. Everything you rely on to stop it is drawn in between, exactly where it sits. The shape is where the name comes from. It is used heavily in oil and gas, mining, rail and construction because it makes a risk legible to people who are not risk specialists.

Do I need a safety specialist to use this?

No. If you know how the job is done, you know most of what goes on the board — the ways it can go wrong and the things you rely on to stop it. That is the point: the people who understand the activity are the ones who should be mapping it. A specialist is useful for reviewing it, not for producing it.

Which activities should we start with?

The ones that could kill someone rather than the ones that happen most often. Working at height, confined space entry, excavations, hot work, lifting operations, energy isolation, vehicle and pedestrian interaction. Most organisations find they have somewhere between eight and fifteen. Start with one and you will know within an hour whether the picture tells you something you did not already know.

How is this different from the risk assessment we already have?

A risk assessment usually tells you the risk is controlled. A bowtie shows you exactly what is doing the controlling, and lets you ask whether you would bet someone's life on it. They work together — the bowtie is the picture underneath the paperwork, and it is what people actually remember when they are standing at the edge of the hole.

Do I need an account to try it?

No. Open it and start — nothing is gated behind a signup, and your work saves automatically in your browser. You only need an account when you want to save to the cloud, export a file, or share a board with someone.

What happens to our data?

If you are not signed in, everything stays in your own browser and never reaches a server. If you save to the cloud, boards are stored against your account and are only visible to you and the people you explicitly invite.

Contact

Get in touch

Questions about whether this fits how you work, something you need it to do, or a problem you have run into — send it here and it comes straight to me. I read everything.