Module · Core EHS

Incident management from first report to verified closure

Capture incidents on any device. Auto-generate titles with AI. Investigate using 5 Whys and PEEPO. Track every corrective action to verified closure.

Investigator at desk reviewing incident timeline on a laptop with photos and witness statements visible. Calm, focused composition.

Most incident investigations stop at the immediate cause and assign a corrective action that prevents nothing. Three months later the same incident happens again. The pattern is universal across industries and almost entirely avoidable.

Haloehs Incident Management is built around structured investigation methods (5 Whys and PEEPO), AI assistance for the repetitive parts, and recurrence detection that surfaces patterns across history. The investigator's judgment stays central; the administrative drag is removed.

What you get

Six capabilities that turn incident management from a paperwork burden into a working safety loop.

AI auto-titles

Incident titles, severity, location, and equipment extracted automatically from the initial report. No manual triage typing.

5 Whys + PEEPO

Built-in templates for both frameworks. Use them independently or in sequence for thorough and deep investigations.

CAPA generation

Investigation findings convert to corrective and preventive actions with owners, deadlines, and verification steps.

Recurrence detection

AI flags when a new incident's root cause matches a previously closed one, pointing at a corrective action that failed.

Multi-evidence support

Photos, videos, witness statements, equipment logs, and external documents attach to the incident record.

Investigation collaboration

Multiple investigators, reviewers, and external auditors collaborate on the same record with role-based access control.

From first report to verified closure

An incident begins as a report, often originating from an observation that crossed the severity threshold. The system auto-titles the incident, captures evidence (photos, witness statements, equipment state), and routes it to the appropriate investigator based on type and location.

The investigator runs PEEPO first to identify contributing factors across People, Equipment, Environment, Process, and Organization. Each significant factor then gets a 5 Whys chain to drive to root cause. The combination produces both thorough and deep investigations.

Every root cause maps to a corrective or preventive action. Each action has a named owner, a deadline, and a required verification step. Closure requires evidence; signatures alone do not close a CAPA.

How AI accelerates investigation

AI handles the repetitive work that slows investigators down. Auto-classification removes triage typing. Similar past incidents surface automatically from the historical record, giving investigators relevant context from the start. Suggested PEEPO focus areas reflect which categories most often contribute for similar incident types.

Once an investigation is complete, AI helps generate a draft CAPA plan that the investigator reviews and refines. The investigator still owns every decision; the system removes the empty-page problem.

Recurrence detection across history

When the same root cause shows up across multiple incidents, the original corrective action failed. Most operations never see this pattern because their investigation records sit in separate spreadsheets.

Haloehs runs recurrence detection continuously. When a new incident's root cause matches one previously closed, both the investigator and the safety manager are flagged. The previous CAPA is surfaced for review. The next corrective action is informed by the failure of the last one.

Incident Management FAQ

Related reading

5 WHYS · ROOT CAUSE CASCADEINCIDENTWorker slippedWHY 1Water on floorWHY 2Pipe leakingWHY 3Fitting corrodedWHY 4Missed maintenanceWHY 5Schedule gapROOT CAUSEMaintenance schedule gapPEEPO · 5 FACTOR CATEGORIESPPeopleEEquipmentEEnvironmentPProcessOOrganizationCombine both: PEEPO finds where to look, 5 Whys finds the root cause
EHS Operations·9 min read

Incident Investigation: 5 Whys & PEEPO Field Guide

How to run incident investigations that prevent recurrence. The 5 Whys finds root cause, PEEPO finds blind spots, and BLS data shows 2.8M reasons it matters.

21 Apr 2026
CAPA · CLOSED LOOP1Findingany source2Ownerassigned + deadline3ActionC + P actions4Closureevidence required5Recheck30 · 60 · 90 daysIF RECURRENCE DETECTEDoriginal CAPA failed · re-openLogging alone is theatre. Verified closure plus effectiveness re-check is the loop.
EHS Operations·10 min read

CAPA Effectiveness: Closing the Loop on Every Action

ISO 45001 requires CAPA. Most operations log them; few close them effectively. Here is how to track corrective actions to verified closure and prove the loop.

11 May 2026
BEFORESpreadsheets & paperincidents.xlsxaudit-Q3.xlsxPTW-march.pdfUnderreportingData trapped in silosAudits take weeksNo pattern detectionWITH HALOEHSOne unified platformAI · LIVEObserveconnectedInvestigateconnectedAuditconnectedTrackconnected30-second reportingPattern detectionOne-click auditsClosed-loop CAPA
Safety Leadership·7 min read

Why EHS Software Matters: The Real Cost of Paper

Spreadsheet-driven EHS programs miss patterns and fail audits. With US workplace injuries costing $58.5B/yr, the upgrade case is data-driven.

25 Apr 2026

Other modules

See Incident Management in action

Book a 30-minute demo with an EHS specialist. We will walk through the workflow on your actual operations.