Lockout/Tagout vs Permit to Work: Which Control Applies, and When You Need Both

Lockout/tagout (LOTO) isolates hazardous energy; a permit to work authorizes a hazardous job and its conditions. They are not competitors and not interchangeable: LOTO is a physical control that makes a machine safe to touch, while a permit is an administrative control that confirms a specific task is planned, authorized, and safe to start. The confusion costs people, because a job protected by one when it needed both is a job with a gap nobody sees until it bites.

What each one actually does

• Lockout/tagout: physically isolates and locks energy sources, electrical, hydraulic, pneumatic, stored mechanical, so a machine cannot start or release energy while someone works on it. It is verified by trying to start (zero-energy check) and secured with each worker’s own lock.
• Permit to work: a documented authorization that a defined job may proceed under stated conditions, hazards assessed, controls in place, competent people, time-bounded, and formally handed back on completion.

The shorthand: LOTO makes the equipment safe; the permit makes the job safe. One protects against the machine; the other protects against the plan.

Where they overlap and where they differ

LOTO is often a control specified inside a permit: a permit for work on a conveyor will require LOTO as one of its conditions and verify it before authorizing. But many LOTO jobs need no permit (routine, well-understood, low complexity), and many permits govern jobs with no hazardous energy to lock out at all, working at height on a static structure, entering a space, hot work on an empty frame. They intersect constantly without being the same thing.

A worked example: the job that needs both

A technician must enter a large mixing vessel to replace paddle seals. Walk the controls: the agitator drive holds hazardous mechanical and electrical energy, so LOTO is mandatory, isolate, lock, verify zero energy by attempting start. But the vessel is also a confined space with atmosphere and access hazards LOTO does nothing about, so a permit to work is equally mandatory: atmosphere tested, attendant posted, rescue arranged, entry authorized in writing. Apply only LOTO and the technician is safe from the agitator and unprotected from the atmosphere. Apply only the permit and the paperwork is perfect while the drive can still turn. The job is safe only when both controls are live, and the permit is precisely the mechanism that ensures the LOTO was actually done and verified.

The failure modes of getting it wrong

• Treating them as either/or: "we did LOTO, we don’t need a permit", the classic gap on confined-space and multi-hazard jobs.
• Permit without verified isolation: a permit that credits LOTO as a control but never confirms the locks are on and verified, paper protection over a live machine.
• LOTO on complex jobs with no coordinating permit: multiple crews, multiple energy sources, and no single authorization tying it together (group lockout needs a permit-grade coordination).
• No hand-back: the permit closes but LOTO removal is uncontrolled, guards and energy restored while someone is still inside.

Both controls also depend on the wider safe-work system: the task-level thinking of a job safety analysis and the ranking logic of the hierarchy of controls sit around them.

Deciding which you need

A simple test: Is there hazardous energy to isolate? If yes, LOTO. Is the job non-routine, multi-hazard, high-consequence, or does it involve other people and systems? If yes, a permit. Many serious jobs answer yes to both, and the correct answer is never to pick one. When in doubt, the permit is the umbrella that forces the LOTO question to be answered explicitly.

Where Fabrico fits

Fabrico carries both controls in the flow of work: LOTO procedures and permit templates attached to the work order types that require them, so the right control opens with the job; isolation steps and permit authorizations captured and time-stamped; and the hand-back sequence recorded so energy restoration and permit closure happen in the right order. Fabrico does not authorize permits or apply locks, competent people do; it makes sure neither control is silently skipped and both are evidenced when the audit asks. EU-built, with EU data residency.

Frequently Asked Questions

Can a permit to work replace lockout/tagout?

No. A permit authorizes a job; it does not physically isolate energy. Where hazardous energy exists, LOTO is the required physical control, and the permit should verify it, not substitute for it. Paper cannot stop a motor.

Does every LOTO job need a permit?

No. Routine, single-hazard, well-understood LOTO tasks often proceed under standard procedures without a formal permit. Permits are for non-routine, multi-hazard, or high-consequence work, which frequently includes LOTO as one of several controls.

Who controls the hand-back?

The permit issuer confirms the job is complete and safe before authorizing return to service, and LOTO removal follows its own strict sequence: each worker removes their own lock, guards and energy are restored, and the machine is confirmed clear of people. The two closures must be coordinated, which is exactly what the permit is for.

Want LOTO and permits riding on the same work order, evidenced and impossible to skip? Book a Fabrico demo to see safe-work controls run through a field-ready CMMS.