Skip to main content

TELLUS USER FLOW (v2.1)

(Aligned with OSHA 3695 / 3696 six-step program)

1. Signup & Account Creation Flow

(Foundation for all subsequent modules — supports multi-tenant company onboarding and secure user provisioning.)

1.1 Purpose

• Facilitate secure and streamlined signup for both new companies and invited users.

 • Establish authentication via Supabase (or similar) with plan selection, verification, and onboarding handoff.  • Collect metadata for referral analytics, trial management, and compliance tracking.  🟢 Outcome: Companies and users are verified, authenticated, and linked to the correct organization structure before entering onboarding (Step #3).

1.2 Company Signup

1.2.1 Plan Selection

• Display Starter / Standard / Pro plans with side-by-side comparison.

 • Include trial option (7 or 15 days) for Standard plan.  • Record selected plan and any coupon/referral codes.  • On trial expiry → disable PDF exports/downloads until paid activation.  🟢 Notes:   – Prevent “trial abuse” by disabling HazCom plan export during trial.   – Record marketing source (web, partner, consultant).

1.2.2 Company Details & Credentials

• Form fields: Company Name, Email (Admin), Password.

 • Optional: License Number / D-U-N-S / EIN for validation.  • Add CAPTCHA for bot prevention.  • Validate email uniqueness.  🟢 Compliance: Capture minimal PII, store hashed credentials.

1.2.3 Email Verification

 • Once verified → activate account and generate default company_id and admin_user_id.  • Redirect to onboarding wizard (Step #3).  🟢 Integration: Adds entry to companies, users, and subscriptions tables in AdminHQ (#14).

1.2.4 Onboarding Wizard Launch

• Trigger Onboarding Sequence (Step #3) immediately after verification.

 • Progress indicator (Company → Sites → Roles → Users).  • Allow partial completion (save state).  🟢 Analytics: Store signup origin (landing page, referral, or consultant invite).

1.3 User Signup (By Invitation)

• Sent by Admin or Manager from within platform.

 • Encodes invite_token, role, site_id, company_id.  • Redirects user to signup form.

1.3.2 Credential Setup

• Email prefilled and locked (used as username).

 • User enters password + confirm password.  • Password strength validation.  • Auto-link user to company and assigned role.

1.3.3 Verification

 • On success, mark invite as accepted and token as used.  🟢 Security: Invite token expires in 7 days; log all invite acceptances for audit.

1.3.4 Sign-In & Dashboard Access

• Redirect to assigned company dashboard post-verification.

 • If user has multiple company associations (consultant role), prompt company selection.  • Load default module dashboard (Insights or HazCom Plan list).  🟢 Integration: Links with AdminHQ (#14) and Insights (#8) for first-login analytics.

1.4 Tier Applicability

1.5 Notifications & Alerts

1.6 Implementation Notes

• Auth: Supabase Auth (JWT) with Postgres user sync.

 • Tables: companies, users, user_roles, invites, subscriptions.  • Onboarding sequence triggered via webhook or event bus (signup.completed).  • Trial logic handled by background job — marks expired trials → changes subscription state.  • Integrate with Stripe (Step #14) for plan selection payment.  • Store referral metadata for marketing analytics.

✅ Compliance & Business Alignment Summary

2. Sign-In & Authentication Flow

(Core access control layer connecting users to their assigned company, site, and modules.)

It extends your Supabase authentication layer into a secure, auditable, and role-aware entry point for Tellus users.

2.1 Purpose

 • Support multi-company access (consultants, EHS partners) while maintaining per-tenant data isolation.  • Maintain login logs for security, compliance, and auditability.  🟢 Outcome: Streamlined and secure sign-in experience with full compliance tracking and traceability.

2.2 Sign-In Methods

2.2.1 Username + Password

• Standard email (username) and password authentication via Supabase Auth.

 • Password complexity validation:   – Min 8 chars, 1 upper, 1 lower, 1 number, 1 symbol.  • Login attempts limited (3 failed → cooldown).  • On success: issue JWT and refresh token.  🟢 Security: Session expiration after configurable inactivity (default 12 hours).

2.2.2 OTP Login (Optional MFA)

• One-Time Password (email or SMS).

 • Optional per company or user role.  • Enforced for Admins, Coordinators, and external Consultants (Pro).  • User can enable “Remember Device” (token valid 30 days).  🟢 Integration: MFA setup managed under AdminHQ > Settings (Step #14).

 • Link valid for 15 minutes; single-use.  • Auto-verifies email if not yet confirmed.  • Recommended for Employees in Starter/Standard plans to simplify onboarding.  🟢 Use Case: Ideal for mobile access and non-technical field workers.

2.3 Post-Login Experience

2.3.1 Multi-Company Selection

• If user belongs to multiple companies (e.g., consultant), prompt:

  – “Select Company Dashboard” → lists company name + plan + last active site.  • User preference stored (last_company_id) for next login.  🟢 Context Preservation: Maintains session context across modules.

2.3.2 Role-Based Landing Page

• Redirect user to landing page based on role:

  – Admin: Dashboard → Insights overview (#8).   – Manager: Site Dashboard → Training, Inventory, HazCom shortcuts.   – Employee: “My Tasks” → assigned trainings, pending reviews.  • Landing page shows shortcuts to frequent actions (Find SDS, Add Chemical, View HazCom Plan, My Trainings).  🟢 Enhancement: Customizable shortcuts per company (Pro).

2.4 Audit Logging

• Every login event logs:

  – User ID, IP address, browser/OS, device type, timestamp.   – Method used (Password / OTP / Magic Link / SSO).   – Success / Failure status.  • Data stored in audit_logins table, viewable under Administration → Settings → Audit Logs (Step #14).  • Optional geolocation resolution (Pro): detect new regions for security alerts.  🟢 Purpose: Enables SOC2-grade auditability and security analytics.

2.5 Tiering Summary

2.6 Notifications & Alerts

2.7 Implementation Notes

• Authentication managed by Supabase Auth using JWT tokens.

 • MFA handled via TOTP (Google Authenticator / SMS / Email).  • Database: users, sessions, audit_logins, user_settings.  • Backend service triggers login webhooks for Sentinel (#9).  • Integrations:   – AdminHQ (#14): role enforcement and MFA policy.   – Insights (#8): track active users & login frequency analytics.   – SupportIQ (#18): prefill context for support requests.  • Single Sign-On (Pro): via Google Workspace / Microsoft Azure AD.

✅ Compliance & Security Alignment Summary

3. Company Onboarding Flow

(Covers OSHA HazCom Step 1 – Assign Program Coordinator and prepare site-specific structure for written program development.)

This step defines how a company transitions from signup to an operational, OSHA-ready Tellus workspace with tailored modules, sites, and roles.

3.1 Purpose

• Guide newly registered companies through structured onboarding — selecting industry type, configuring sites, roles, and users.

 • Automatically tailor Tellus modules, plan templates, and dashboards based on company type.  • Establish Program Coordinator and baseline organizational hierarchy for compliance readiness.  🟢 Outcome: Converts a newly signed-up company into a fully initialized Tellus account, ready for SDS, plan, and training setup.

3.2 Industry & Company Type Selection

3.2.1 Select Industry

• Options include:

  – Auto Repair / Auto Shop   – Pest Control / Chemical Applicator   – Manufacturing / Lab / School District   – EHS Consultant / Trainer   – Construction / Facility Maintenance  • Each industry preloads module defaults and example hazards.  🟢 Purpose: Enables dynamic tailoring of plan templates, available modules, and required training categories.

3.2.2 Industry Mapping

• Example mapping:

  – Auto Shop → HazCom, Labels, Training, SDS   – Pest Control → HazCom, Labels, FIFRA, Training   – EHS Trainer → Training, Insights, Contractor Module  🟢 Integration: Feeds into “Modules & Plan Selection” below.

3.3 Modules & Plan Selection

(Merged former Steps 3.2 + 3.3)

3.3.1 Auto-Suggested Modules

• System suggests modules based on selected industry (from 3.2).

 • User can toggle modules ON/OFF (HazCom Plan, Labels, Training, Insights, etc.).  • Dynamic pricing display for upgrades (Standard → Pro upsell).  🟢 Purpose: Encourages users to discover relevant modules at onboarding.

3.3.2 Plan Selection / Upsell

• Highlight benefits of upgrading plan tier (extra sites, AI Insights, unlimited SDS).

 • Apply promotional discounts or free trial codes (Standard only).  • Confirm chosen plan → persists in subscription record (AdminHQ Step #14).  🟢 Integration: Links with AdminHQ for billing + usage limits setup.

3.4 Company Details

• Capture:

  – Legal Company Name   – Address, City, State, ZIP   – Phone Number, Website   – Business Size (1–10 / 11–50 / 51–200 / 200+ employees)  • Optional: EIN / EPA ID / License #.  🟢 Purpose: Enables compliance document pre-filling and report headers.  🟢 Integration: Writes to companies table and syncs with AdminHQ profile (#14).

3.5 Assign Program Coordinator

• Prompt user to assign or nominate Program Coordinator (required by OSHA §1910.1200(e)(4)).

 • Options:   – Select existing user   – Enter new contact (auto-invites post-onboarding)  • Display duties summary (“Responsible for SDS, Training, and Plan review”).  • Auto-send onboarding email outlining next steps.  🟢 Outcome: Satisfies OSHA Step 1 – Program Coordinator assignment.  🟢 Integration: Coordinator automatically granted Admin + Plan Editor role.

3.6 Roles & Permissions

3.6.1 Default Roles

• Preloaded roles:

  – Admin (Full access)   – Manager (Site-level)   – Employee (Training + Read-only SDS)   – Trainer (Upload content, view progress)

3.6.2 Role Customization (Standard + Pro)

• Allow company to rename roles (e.g., “Safety Officer,” “Supervisor”).

 • Assign role colors/icons for UI clarity.  • Save custom permission matrix for modules.  🟢 Purpose: Aligns terminology with company culture while maintaining permission control.

3.7 Site Configuration

• Add sites under the company profile:

  – Site Name   – Address   – Site Manager Name + Contact   – Site Code (optional)  • Limits by plan:   – Starter → 1 site   – Standard → Up to 5 sites   – Pro → Unlimited sites  • Option to clone site structure from template.  🟢 Integration: Creates sites and site_contacts records; linked with HazCom Plan, Inventory, and Training modules.

3.8 Location Setup per Site

• Define sub-locations within each site:

  – Example: “Main Warehouse,” “Chemical Storage,” “Paint Booth.”  • Starter → up to 5 locations per site.  • Capture location tags: type, hazard type, ventilation status.  🟢 Purpose: Enables SDS location tagging and hazard mapping for Insights (#8).

3.9 User Upload & Role Mapping

• Upload employees manually or via CSV:

  – Fields: Name, Email, Role, Site, Location, Department.  • Validate unique emails and assign roles.  • Auto-create user records and trigger invite workflow (Step #1.3).  🟢 Integration: Connects to Training (#7) → generates initial assignments for each role.

3.10 Invite Users

• Auto-send invites to uploaded users with embedded signup token.

 • Invite email includes:   – Company Name   – Assigned Role   – Link to complete registration (Step #1.3).  • On first login, trigger:   – “Initial Training Task” (HazCom basics).   – “Baseline HazCom Plan Skeleton” creation for site.  🟢 Purpose: Speeds up readiness for OSHA Step 2 – Program Availability and Training.

3.11 Finalize Onboarding Summary

• Display full summary of setup:

  – Company, Industry, Modules, Sites, Users.  • Allow review & edit before confirmation.  • Confirmation action triggers:   1️⃣ Company status → “Active.”   2️⃣ Send “Welcome to Tellus” email with quick-start links.   3️⃣ Redirect to Insights Home Dashboard (Step #8).  🟢 Integration: Records onboarding progress in onboarding_checklist for Sentinel (#9) monitoring.

3.12 Tiering Summary

3.13 Notifications & Alerts

3.14 Implementation Notes

• Tables: companies, sites, locations, users, user_roles, onboarding_checklist, modules_enabled.

 • Orchestrator service triggers sequential onboarding steps with checkpoint saves.  • Role defaults and permission JSON defined in configuration layer.  • Integration with AdminHQ (#14) for plan/usage tracking.  • Background job monitors onboarding completion and triggers Sentinel (#9) reminders.  • Optional AI onboarding assistant (Pro): auto-suggest missing roles, hazards, or modules.

✅ Compliance & Business Alignment Summary

4. Chemical Inventory (Inventory Management + SDS Maintenance)

(Supports OSHA §1910.1200(g) – Safety Data Sheets, §1910.1200(f) – Labels, and §1910.1200(e) – Inventory List maintenance) This is the operational core of HazCom platform — managing every chemical, its SDS, EPA label, and compliance metadata.

4.1 Purpose

• Maintain a centralized, accurate record of all hazardous and non-hazardous chemicals at each site.  • Ensure every product has an associated SDS and label in compliance with GHS.  • Streamline data capture using barcode, OCR, and AI assistance.  🟢 Outcome: Up-to-date, SDS-backed inventory for each location — forming the foundation for HazCom Plan generation and employee access.

4.2 Site & Location Context

4.2.1 Site and Location Selection

• User selects Site → Location hierarchy before adding or viewing inventory.  • Display hazard summary for selected location (Health / Flammable / Corrosive).  • Filters: “Show All Chemicals,” “Missing SDS,” “Expiring SDS.”  🟢 Integration: Location context feeds into HazCom Plan, Labels, and Training modules.

4.3 Add Chemical

4.3.1 Manual Entry (Starter)

• Fields: Product Name, Manufacturer, Product Code, CAS No., Container Size, Quantity.  • Validation: duplicate detection by Product + Manufacturer.  • Manual SDS attachment option (PDF).

4.3.2 Barcode Scan (Starter + Standard)

• Use camera or external scanner to read UPC/EAN/GS1 barcode.  • Auto-fetch product info via GS1 / Tellus Product DB.  • Pre-populate name, manufacturer, and category.  🟢 Integration: Uses product_lookup API with caching for efficiency.

4.3.3 Picture Label OCR (Standard + Pro)

• Upload product label image.  • OCR + Vision model extracts: Product Name, Manufacturer, Signal Word, Hazard Pictograms.  • Autofill fields for quick review.  🟢 Purpose: Reduces manual entry time and ensures label-SDS alignment.

4.3.4 Add Additional Attributes

• Add container details:   – Size / Unit (oz, L, gal)   – Batch / Lot No.   – Expiration Date / Manufacture Date   – Storage Condition (Temp Range, Ventilation Req.)  🟢 Enforcement: Product identifier consistency validated against SDS Section 1.

4.3.5 Confirm & Save Record

• Validate completeness → Save to chemicals table.  • Auto-create linkage to sites and locations.  • Add entry to “Recent Additions” queue for admin review.

4.4 SDS Attachment & Association

• Search SDS by product name or manufacturer via integrated SDS sources (e.g., manufacturer sites, MSDSonline).  • User selects the correct SDS → downloads & stores PDF.

4.4.2 Standard + Pro – AI SDS Suggestion

• System searches internal SDS library and external web simultaneously.  • Suggests top 3 matches with confidence score.  • Option to preview before attaching.

4.4.3 Preview, Accept, or Upload (Standard + Pro)

• Preview SDS summary:   – Product Identifier   – Revision Date   – Hazard Classification   – Signal Word / Pictograms  • Accept match or upload manually.  🟢 Automation: AI extracts and stores SDS Section 2 data → Hazard Class, H/P codes, pictograms.

4.4.4 SDS Metadata Extraction

• Extract:   – SDS Revision Date   – Manufacturer Contact   – Emergency Phone   – Hazard Statements / Precautionary Codes  • Store JSON summary for search and AI retrieval.  🟢 Enables Insights (#8) and Copilot (#15) to provide hazard explanations.

4.5 FIFRA (Pesticide / Insecticide Handling)

• Input EPA Registration Number.  • System performs web search → prompts for manual entry of product and active ingredients.

4.5.2 Standard + Pro – EPA PPLS Integration

• Fetch label and product data via EPA PPLS API.  • Auto-populate: Active Ingredients, % Concentration, Signal Word, EPA Reg. No.  • Download and attach label PDF.  🟢 Purpose: Ensures accurate pesticide labeling and hazard classification.

4.6 Bulk Upload (Standard + Pro)

4.6.1 Upload File

• Accept CSV or invoice (PDF → AI parser).  • Fields mapped: Product Name, Manufacturer, CAS, Qty, Site, Location.  • Pre-validation for duplicates and missing values.

4.6.2 Review & Validation

• Display table preview before commit.  • Highlight missing or mismatched SDS fields.  • Allow inline correction or deletion.

4.6.3 SDS Association

• For each record:   – Try match from internal SDS DB.   – Else, suggest SDS via web search.   – Mark unresolved ones as “Pending SDS Review.”  🟢 Integration: Pending queue linked to Review SDS Screen (ChemIQ Backoffice).

4.6.4 Accept & Commit Inventory

• Final confirmation before write to database.  • Store import summary and log to inventory_uploads.  🟢 Flag: Items without SDS → appear under Sentinel (#9) “Missing SDS Alert.”

4.7 Inventory Maintenance & Review

4.7.1 Scheduled Reviews

• Automatic Annual Inventory Review reminder for each site.  • SDS Review reminder when SDS older than 3 years.  • “Inventory Drift” detection (Chemicals removed physically but not in system).

4.7.2 Editing & Deactivation

• Deactivate obsolete chemicals (kept for record retention).  • Edit and version SDS associations when new revision arrives.

4.7.3 Change Audit Trail

• Log every add/edit/delete with user, timestamp, and action type.  🟢 Viewable under: Administration → Audit Logs (Step #14).

4.8 Tiering Summary

4.9 Notifications & Alerts

4.10 Implementation Notes

• Tables: chemicals, chemical_attributes, sds_documents, inventory_uploads, fifra_labels, pending_sds_reviews.  • Image OCR pipeline uses Google Vision / Tesseract for label parsing.  • SDS Extraction microservice runs parser → extracts JSON per section.  • Pesticide integration: epa_ppls_connector microservice scheduled daily for sync.  • Background cron (Sentinel #9) for “Review Due” alerts.  • Copilot (#15) integration: answers SDS, hazard, and labeling questions via vector search.

✅ Compliance & Business Alignment Summary

5. Labels Module (GHS / NFPA / HMIS Labeling)

(Supports OSHA §1910.1200(f) – Labeling of Containers and Workplace Labeling Requirements) This module builds directly on the Chemical Inventory data (Step #4) and ensures all containers, including secondary containers, are properly labeled per GHS, NFPA, and HMIS standards.

5.1 Purpose

• Allow users to generate OSHA-compliant GHS, NFPA, or HMIS labels directly from Tellus inventory data.  • Ensure every container (primary and secondary) is clearly marked with product identifiers, hazard symbols, and precautionary statements.  • Provide easy label printing and audit traceability.  🟢 Outcome: Enables instant, standardized, and traceable label generation from verified SDS data — closing the loop between inventory, SDS, and training.

5.2 Scope

• Available for: Standard and Pro plans.  • Supported Label Types:   1️⃣ GHS Label – Globally Harmonized System standard (for primary & secondary containers).   2️⃣ NFPA Label – 704 Diamond for quick hazard identification.   3️⃣ HMIS Label – Workplace hazard labeling system for internal use.  🟢 Integration: Sources hazard data directly from SDS Section 2 (Hazard Identification).

5.3 Label Generation Flow

5.3.1 Select Chemical

• User selects chemical from inventory list.  • Auto-load associated SDS metadata (Signal Word, Hazard Class, Pictograms).  • Preview summary of SDS Section 1 & 2 for validation.  🟢 Integration: Pulls data from chemicals and sds_documents.

5.3.2 Choose Label System

• User selects one of:   – GHS: Pictograms, Signal Word, H/P Statements.   – NFPA: Color-coded diamond with ratings (Health, Flammability, Instability, Special).   – HMIS: Rating bar with PPE icons.  • Pro plan allows template mixing (e.g., GHS + NFPA combo label).  🟢 Compliance: Ensures workplace labeling aligns with container type and usage.

5.3.3 Auto-Populate Fields

• Automatically fill from SDS and system metadata:   – Product Identifier (SDS Section 1)   – Manufacturer   – Signal Word   – Hazard Statement(s) (H-Codes)   – Precautionary Statements (P-Codes)   – GHS Pictograms (red diamonds)  • Optional: Add secondary fields — lot number, site, date printed, responsible person.  🟢 Validation: Enforce consistency with SDS → prevent mismatch between hazard statements and pictograms.

5.3.4 Add Company Branding (Optional)

• Company logo, site name, and contact info can be included in footer.  • Configurable per site (Pro plan).  🟢 Purpose: Provides traceability and professional presentation for audits.

5.4 Label Format & Sizing

5.4.1 Label Templates

• Predefined sizes:   – 1″×2″ (small vials / containers)   – 2″×4″ (standard bottles)   – 4″×6″ (drums / bulk containers)  • Choose layout: horizontal / vertical.

5.4.2 Custom Templates (Pro)

• User can upload SVG/JSON label templates for custom printers.  • Save templates at site or organization level.  • Option to define print density and DPI.

5.5 Preview & Print

5.5.1 Label Preview

• Live preview in UI (React canvas).  • Supports GHS pictogram rendering and font scaling.  • Users can reorder text blocks before print.

5.5.2 Print / Export Options

• Export options:   – PDF (for desktop print)   – PNG (for embedding in documents)   – Direct print → Zebra / Dymo printers (via print API).  • Multi-select chemicals → batch label print.  🟢 Integration: Export logs stored in label_print_history for audit trail.

5.6 Label Data Sources

🟢 Automation: AI SDS parser (from Step #4) populates these fields automatically.

5.7 Audit & Recordkeeping

5.7.1 Label Logs

• Every label generation event recorded with:   – Chemical ID, SDS ID, Label Type, User, Timestamp, Site.  • Logged in label_audit_log table.  • Downloadable report under Administration → Audit Logs (Step #14).

5.7.2 Audit Readiness

• During OSHA inspection:   – Provide proof of printed labels (PDF archive).   – Trace back to SDS version used at print time.  🟢 Purpose: Demonstrates full labeling traceability under §1910.1200(f)(9).

5.8 Notifications & Alerts

5.9 Tiering Summary

5.10 Implementation Notes

• Tables: labels, label_templates, label_print_history, label_audit_log.  • Label generation microservice pulls data from chemicals + sds_documents.  • PDF generator: ReportLab or React PDF renderer (dynamic size scaling).  • Pro printer integration: Zebra Browser Print API or CUPS connector.  • Audit data synced with Sentinel (#9) for “Label Activity” monitoring.  • API Endpoint: /labels/generate for automation via Integration Hub (#17).

✅ Compliance & Business Alignment Summary

6. HazCom Plan Builder (Written Program Generator)

(Supports OSHA §1910.1200(e) — “Written Hazard Communication Program” and aligns with OSHA Publication 3695 & 3696) This module is the heart of OSHA HazCom compliance in Tellus — transforming inventory data, site setup, and user roles into a living, version-controlled, AI-assisted written program.

6.1 Purpose

• Create, manage, and maintain the company’s written Hazard Communication Program (HazCom Plan) for each site.  • Ensure every plan covers OSHA-required sections:   – (e) Written Program   – (f) Labels & Warnings   – (g) Safety Data Sheets   – (h) Employee Information & Training  • Integrate AI assistance for drafting and reviewing, with version control, annual reviews, and built-in training generation.  🟢 Outcome: A complete, OSHA-aligned HazCom Plan — automatically generated, editable, reviewed, approved, and distributed to employees.

6.2 Site Selection

• User selects site for which the plan is being viewed or created.  • Display site metadata: site manager, coordinator, last plan revision date, total employees, SDS count.  • Pro users can clone existing plan from another site for multi-location consistency.  🟢 Integration: Uses sites table (from Step #3) for context and data linking.

6.3 View Existing Plans

• Display versioned list of prior plans:   – Plan Name / Version / Created On / Approved By / Status (Draft, Pending, Active, Archived).  • Option to preview, duplicate, or archive older plans.  • Color-coded status indicators for visual tracking.  🟢 Purpose: Enables easy retrieval and audit of historical HazCom Plans.

6.4 Generate New HazCom Plan

6.4.1 Template Selection (Starter)

• User chooses OSHA Plan template questions (based on OSHA 3695 sample).  • Template divided into required sections [(e), (f), (g), (h)].  • Each question editable in text area.  🟢 Purpose: Gives smaller businesses a quick self-guided way to meet compliance requirements.

6.4.2 AI Analyzer (Standard + Pro)

• AI engine analyzes:   – Company details (industry, size, coordinator role).   – Inventory data (hazard types, pictograms, signal words).   – Site locations (storage areas, PPE, equipment).   – User roles & training records.  • Generates customized questionnaire covering all HazCom sections (e–h).  🟢 Integration: Combines data from Steps #3–#5 for context-aware generation.

6.4.3 User Answers Questions (Starter)

• User manually answers each section’s question.  • Progress bar across four OSHA sections.  • Inline help (“See OSHA 3695 Section (e) Example”).

6.4.4 AI-Suggested Answers (Standard + Pro)

• For each question, Copilot suggests draft answers based on company data.  • User reviews, edits, and confirms before saving.  • Option to regenerate individual answers.  🟢 Purpose: Saves time and ensures OSHA-compliant phrasing without manual writing.

6.4.5 Review & Save Draft

• Displays compiled answers section-wise.  • “Save as Draft” saves to hazcom_plans with status “Draft.”  • Version increment (e.g., v1.0, v1.1) logged automatically.

6.4.6 Generate Plan Document

• System compiles all answers into formatted HazCom Plan document using OSHA 3695 Appendix A layout.  • Generated from template (hazard_communication_template.docx).  • Auto-inserts:   – Company Name, Site Info, Coordinator, Revision Date   – Inventory Summary (chemical count, hazards, pictograms)   – Labeling Procedures (from Step #5)   – SDS Access & Review Procedures (from Step #4)   – Training Method & Frequency (from Step #7)  🟢 Output: OSHA-aligned written program, ready for review and approval.

6.4.7 Review & Inline Editing

• View generated plan in rich text editor.  • Inline edit sections before approval.  • Highlight AI-generated text in color (for human review).  🟢 Compliance: Human-in-the-loop review ensures accuracy before activation.

6.4.8 Program Coordinator Approval

• Coordinator (assigned in Step #3.5) must approve plan before activation.  • Approval via digital signature / checkmark + date.  • Approval logs stored in plan_approvals.  🟢 Enforcement: Plan cannot be “Active” without approval.

6.4.9 Auto-Generate Training & Quiz (Standard + Pro)

• Once approved, system generates training content:   – Plan overview slides (summarized per section).   – Quiz cards (multiple-choice from plan key points).  • Based on Appendix B of OSHA 3696 – “Training and Information Requirements.”  🟢 Integration: Training (#7) auto-imports these for assignment.

6.4.10 Assign Training (Standard + Pro)

• Assign generated training to all employees at the selected site.  • Email invites + in-app task creation.  • Record completion in training log.  🟢 Purpose: Automates employee communication & compliance tracking.

6.4.11 Publish & Lock Plan

• Convert approved plan into locked PDF.  • Attach digital signature of Program Coordinator.  • Allow PDF download or email distribution.  • Mark version as “Active.”  🟢 Archival: Older versions archived but remain accessible for audits.

6.5 Versioning & Audit Logs

6.5.1 Version Summary

• Tracks creation, review, and approval metadata:   – Created by / Reviewed by / Approved by / Dates.  • Automatic version numbering (v1.0, v2.0, etc.).  • Notes field for describing revision reason.

6.5.2 Annual & Trigger-Based Review

• System prompts review:   – Annually, or   – When new chemicals or hazards are added (from Step #4).  • Alerts Coordinator and Admin to revise plan.  🟢 Integration: Linked to Sentinel (#9) for “Plan Review Due” alerts.

6.5.3 Audit Log

• Log all actions: creation, edits, approvals, publication.  • Viewable under Administration → Audit Logs (Step #14).  🟢 Ensures OSHA Step 6 – Evaluate & Reassess documentation.

6.6 Tiering Summary

6.7 Notifications & Alerts

6.8 Implementation Notes

• Tables: hazcom_plans, plan_sections, plan_versions, plan_approvals, plan_audit_logs.  • AI service: Uses Copilot (#15) for question generation and answer drafting.  • Document rendering: Word (python-docx) → PDF export via ReportLab.  • Integration points:   – Inventory (#4): pulls hazard classifications.   – Labels (#5): label policy section auto-population.   – Training (#7): generates required training modules.   – Sentinel (#9): review reminders.  • Pro: Plan diff viewer to compare revisions (text + AI summary).

✅ Compliance & Workflow Alignment Summary

7. SafePath Training Module (Employee Information & Training)

(Covers OSHA Step 5: Inform and Train Employees — §1910.1200(h))

7.1 Purpose

• Deliver compliant, multilingual, and role-specific HazCom training aligned with OSHA Step 5 — “Inform and Train Employees.”  • Ensure all employees understand chemical hazards, labels, and SDS access before exposure or reassignment.  • Integrate AI-driven personalization, auto-retraining, and quiz-based assessment for continuous program readiness.  🟢 Outcome: A traceable, auditable training lifecycle — creation → delivery → evaluation → retraining — meeting all OSHA HazCom training requirements.

7.2 Training Overview

7.2.1 Purpose

• Train employees on hazardous chemicals in their work area before initial assignment and whenever new hazards are introduced.  • Reinforce understanding of the HazCom Plan, labels, and SDS usage.  🟢 Note: Training must be provided in a language and vocabulary employees can understand.

7.2.2 Training Types

• Initial Training: On onboarding or when a new HazCom plan is activated.  • Refresher / Retraining: After introduction of new chemicals or plan revision.  • Special Task Training: For non-routine operations (tank cleaning, confined spaces, etc.).

7.2.3 Training Dashboard

• Displays user-level progress (Pending / Completed / Expired).  • Site- and company-level summaries for managers and coordinators.  🟢 Tracks OSHA readiness per site for inspection purposes.

7.3 Training Creation & Assignment

7.3.1 Auto-Generated Training (Standard + Pro)

• Automatically triggered after HazCom Plan approval (Step #6.4.9).  • AI drafts training slides + quiz from the company’s plan and chemical data.  🟢 Based on OSHA Appendix B training requirements — hazards, SDS access, protective measures, labeling, and program understanding.

7.3.2 Manual Training Creation (All Plans)

• Trainers create or upload content manually:   – Video / PPT / PDF / text modules.   – Add custom multiple-choice or true/false questions.  • Optional categories: HazCom, PPE, Spill Response, Labeling, etc.

7.3.3 Assign Training

• Assign to all users, selected roles, or specific sites/locations.  • Group or individual assignment supported.  • Notifications via email + in-app.  🟢 Reminder cadence: initial → 3-day → final reminder.

7.3.4 Training Acknowledgment

• Require digital acknowledgment or e-signature at course completion.  • Stored in immutable audit record for compliance proof.

7.4 Training Delivery

7.4.1 Learning Modes

• Video, interactive slides, PDF viewer, or text modules.  • Fully responsive for mobile and tablet access.  🟢 “Play-and-Lock” tracking ensures full engagement before quiz activation.

7.4.2 Multi-Language Options

• English / Spanish toggle via i18n locales.  • Company default language configurable per employee.  🟢 Meets OSHA’s requirement for comprehension in the employee’s language.

7.4.3 AI Explainer Mode (Standard + Pro)

• Copilot (Step #15) assists during training — explaining terms, pictograms, or SDS sections.  • Uses contextual retrieval from company SDS and HazCom Plan.  🟢 Improves comprehension and retention across language barriers.

7.5 Quiz & Evaluation

7.5.1 Quiz Structure

• Auto-generated quiz from course content (Standard + Pro).  • Trainers can edit or add questions manually.  • Supported formats: multiple-choice, true/false, matching pictograms to meanings.

7.5.2 Passing Criteria

• Default passing score = 80% (configurable).  • Failed attempts → allow up to 3 retries.

7.5.3 Immediate Feedback

• Display correct answers and explanations post-quiz.  🟢 Reinforces knowledge and proves employee understanding.

7.5.4 Completion Certificate

• Auto-generate PDF certificate with:   – Course title, completion date, score, trainer signature.  • Auto-store under employee’s training record.

7.6 Recordkeeping & Compliance Logs

7.6.1 Employee Training Logs

• Record: course name, completion date, score, trainer, duration, delivery method.  • Linked to company, site, and location.

7.6.2 Trainer Audit Trail

• Track who created, modified, or assigned each course.  • Retain change history for minimum 5 years.

7.6.3 Versioned Training Plans

• Link each training batch to its corresponding HazCom Plan version.  🟢 Ensures traceability — “Which plan was used for which training.”

7.6.4 Exports & Reporting

• Export formats: PDF / CSV for OSHA inspection.  • Dashboard filters: site, date range, plan version, completion status.

7.6.5 Integrations

• Webhooks / API for external LMS sync.  • Internal triggers → “Mark user compliant” → update Insights (#8).

7.7 Retraining & Continuous Review

7.7.1 Auto-Retraining Triggers

• New chemical added (Inventory #4).  • New HazCom Plan version published (Plan #6).  • Employee transferred to new site.

7.7.2 Training Reminder Automation

• 30 days before expiry → notify user + manager.  • Auto-queue retraining sessions for upcoming due dates.

7.7.3 Annual Review Workflow

• Program Coordinator reviews training effectiveness yearly.  • Option to clone previous curriculum with updates.  🟢 Supports OSHA Step 6 — Evaluate and Reassess Program.

7.8 Tiering Summary

7.9 Notifications & Alerts

7.10 Implementation Notes

• Tables: trainings, training_courses, training_assignments, training_results, training_audit_logs.  • AI slide & quiz generation powered by Copilot (#15) using plan + SDS context.  • Triggers: Plan Approval (Step #6) → Generate Course → Assign Users.  • Alerts & reminders handled by Sentinel (#9).  • Integrations:   – Insights (#8): aggregate completion metrics.   – AdminHQ (#14): manage role-based access & quotas.   – SupportIQ (#18): route training issues for help.  • Certificate generator uses ReportLab with digital signature & branding.

✅ Compliance & Alignment Summary

✅ Training Module Outputs

8. Insights & Compliance Dashboard

(Covers OSHA Step 6 – Evaluate and Reassess Program)

8.1 Dashboard Overview

8.1.1 Purpose  • Provide visual analytics, KPIs, and AI-driven insights for OSHA 1910.1200 compliance readiness.  • Allow continuous monitoring of SDS, labeling, training, and plan health.  🟢 Note: Each dashboard reflects “Evaluate and Reassess” (OSHA Step 6) by surfacing what’s missing, outdated, or at risk. 8.1.2 Dashboard Types  1. Home Dashboard / Compliance Summary – high-level readiness per site or company.  2. Chemical Inventory Dashboard – SDS coverage, expired or missing SDS, EPA label compliance.  3. Training Dashboard – completion %, overdue trainings, retraining triggers.  4. HazCom Plan Dashboard – plan versions, approval status, review cycles.  5. AI Insights Dashboard (Pro only) – anomaly detection, risk scoring, predictive trends.  🟢 Role-based views: Admin (full), Manager (site-only), Employee (personal status).

8.2 Home / Compliance Dashboard

8.2.1 Starter Plan  • Compliance checklist only.  • KPIs: SDS count, plan version, trainings completed.  • Manual email notifications.  🟢 Simple “traffic-light” readiness indicator (Green = Ready, Yellow = Pending, Red = Overdue). 8.2.2 Standard Plan  • Adds alerts: missing SDS, expired training, plan older than 1 year.  • Rule-based insights and time-based reminders (yearly review).  • Email + in-app notifications.  🟢 Can drill down by site or role. 8.2.3 Pro Plan  • AI-powered compliance score (% readiness).  • Predictive alerts (“Next Audit Risk” based on patterns).  • Anomaly detection across sites (e.g., sudden increase in hazards or chemical turnover).  • Automated monthly compliance summary reports (PDF/CSV).  • Email + in-app + Slack/Webhook notifications.  🟢 Exportable dashboard widgets for management reporting.

8.3 Chemical Inventory Dashboard

8.3.1 Metrics Tracked  • Total chemicals per site / location.  • SDS coverage (percentage with valid SDS links).  • Expired or outdated SDS (> 3 years old).  • FIFRA/EPA label status.  🟢 Compliance Alignment: OSHA 1910.1200 (f) & (g) + EPA Labeling requirements. 8.3.2 Actions & Alerts  • “Missing SDS” list with link to upload or assign SDS.  • “Expired Labels” alert (Standard + Pro).  • AI Trend (Pro): detects frequent add/remove patterns (chemical turnover indicator).  🟢 Integrates with Inventory Module (Step 4) for real-time sync.

8.4 Training Dashboard

8.4.1 Metrics Tracked  • Training completion rate per site / role.  • Expired or pending trainings.  • Average quiz scores and retraining needs.  🟢 OSHA 1910.1200 (h)(1) – tracks employee information and training requirements. 8.4.2 AI Assistance (Pro)  • Suggests which departments are most at risk of non-compliance.  • Predicts next training cycle based on employee turnover or new chemicals added.  • Provides weekly “Training Health Score.” 8.4.3 Visuals & Notifications  • Charts for completion %, overdue trainings, and recent certificates.  • Email + in-app reminders (Starter – manual, Standard – automated, Pro – webhook ready).

8.5 HazCom Plan Dashboard

8.5.1 Plan Status Metrics  • Active plans per site.  • Plan age (days since approval).  • Version history and review cycle.  • Plan owner (Program Coordinator). 8.5.2 Alerts & Reminders  • “Plan Overdue for Review” (> 12 months).  • “Pending Approval” flag for draft plans.  🟢 Automates Step 6 of OSHA Program – Evaluate and Reassess. 8.5.3 AI Insights (Pro)  • Correlates plan changes with training and inventory updates to predict compliance gaps.  • Detects plan sections left unchanged for > 12 months and recommends review.

8.6 AI Insights Dashboard (Pro Only)

8.6.1 AI Anomaly Detection  • Identify new hazard types not in previous SDS set.  • Detect chemical turnover > threshold per quarter.  • Spot missing or mis-matched SDS to inventory items. 8.6.2 Predictive Risk Engine  • Predict next “inspection risk window.”  • Show probability score per site (“% ready for OSHA audit”). 8.6.3 Cross-Module Correlation  • Combines data from Inventory, Labels, Plan, and Training.  • AI generates monthly “Compliance Digest” summaries emailed to Program Coordinator. 8.6.4 Continuous Learning Loop  • AI improves risk predictions based on past user actions (e.g., late SDS fixes or training delays).  🟢 Long-term goal: automated “HazCom Health Score.”

8.7 Reports & Exports

8.7.1 Report Types  • Starter: PDF Compliance Summary.  • Standard: PDF + CSV Exports.  • Pro: PDF + CSV + XLSX + API Endpoint (REST/GraphQL). 8.7.2 Scheduling & Delivery  • Manual (Starter), Auto (Standard), AI-scheduled (Pro).  • Reports emailed to Coordinator + stored in Audit Logs. 8.7.3 Custom Analytics (Pro)  • Cross-company or multi-site comparisons.  • Filter by module (Inventory, Training, Plan).  🟢 Supports EHS consultants managing multiple clients.

✅ Compliance Alignment Summary

Perfect 👌 — your screenshots give a clear picture of the Chemical Dashboard’s visual and analytical depth, and we can now expand the Insights Module (Step #8) to include these advanced visual analytics while maintaining your structured step format. Below is the regenerated Step #8, combining: Your original Insights module (from the table and notes) Your chemical analytics dashboard (hazard-type visuals, SDS coverage, pictogram counts, etc.) Tier-based enhancements for Starter, Standard, and Pro

8. Insights & Compliance Dashboards

(Covers OSHA Step 6 – Evaluate and Reassess Program)

8.1 Purpose & Structure

8.1.1 Purpose  • Provide comprehensive visibility into company-wide compliance and chemical safety data.  • Enable AI-driven tracking of HazCom readiness, training completion, SDS coverage, and hazard distribution.  • Support OSHA Step 6 — continuous review and reassessment. 8.1.2 Dashboard Categories  1. Home / Compliance Dashboard – overall readiness & alerts.  2. Chemical Dashboard – GHS hazard classifications, SDS coverage, and pictogram analytics.  3. Training Dashboard – completion & retraining trends.  4. HazCom Plan Dashboard – plan versions, status, approvals.  5. AI Insights Dashboard (Pro) – anomaly detection, compliance scoring, predictive risk.  🟢 Role-based visibility: Admin (full), Manager (site-level), Employee (personal status).

8.2 Home / Compliance Dashboard

8.2.1 Starter Plan  • Compliance checklist widget only.  • KPIs: total SDS count, HazCom Plan version, trainings completed.  • Manual email notifications.  🟢 “Readiness Bar” = average of SDS coverage %, plan validity, and training completion. 8.2.2 Standard Plan  • Adds rule-based alerts: expired SDS, overdue training, stale HazCom Plan.  • Time-based reminders (annual review).  • Email + in-app notifications.  🟢 Drill-down view by site or department. 8.2.3 Pro Plan  • AI-generated Compliance Score (% readiness).  • Predictive alerts (“Next Audit Risk”).  • AI-generated monthly summary reports (PDF, CSV, XLSX, API).  • Cross-company analytics for multi-site organizations.  🟢 Integrates Slack/Webhook notifications.

8.3 Chemical Dashboard (Powered by AI Agent)

(based on your uploaded visuals) 8.3.1 Overview Panel  • Location selector (e.g., Holladay – H001).  • HazCom Plan Status banner (Created / Pending).  • Hazard Overview Cards:   – Distinct Hazard Types (Health / Physical / Environmental).   – Hazard Classes Count (e.g., 9 classes per GHS).   – Total Hazardous Products requiring safety measures. 8.3.2 Key Metrics Cards  • Total SDS Stored — number of SDS in system.  • SDS Coverage % — covered products ÷ total products.  • Employees Trained % — % trained vs total workforce.  • Pending Trainings — count of users awaiting completion.  🟢 OSHA Alignment: Tracks §1910.1200 (g) SDS & (h) Training. 8.3.3 GHS Pictogram Overview  • Count per pictogram (Health Hazard, Flame, Corrosion, etc.).  • Visual display (red diamond icons).  • AI suggests under-represented hazards (e.g., missing Environment or Gas Cylinder). 8.3.4 Charts & Analytics  • Hazard Distribution by Type (pie: Health vs Physical vs Environmental).  • Inventory Distribution by Hazard Type (correlation to product count).  • Hazard Categories (GHS Classification) – bar chart by Category 1–5.  • Inventory by Hazard Class – stacked bar: inventory count vs product count.  🟢 Pro: Enable cross-site comparison (hazard density per site). 8.3.5 AI Insights (Pro)  • Detects imbalance in hazard distribution (e.g., “High flammables vs low PPE usage”).  • Predicts next SDS requiring update (based on vendor activity).  • Suggests re-training triggers for new hazard types detected. 8.3.6 Exports  • PDF snapshot for inspectors.  • CSV / XLSX exports for inventory analysis.  • API endpoint for integration with corporate dashboards.

8.4 Training Dashboard

8.4.1 Metrics  • Training completion rate by site/department.  • Overdue or expiring trainings.  • Quiz score averages & top missed questions. 8.4.2 Visualizations  • Progress donut (completion %).  • Heatmap by role (who’s most overdue).  • Retraining trends timeline. 8.4.3 AI Insights (Pro)  • Predict departments at compliance risk (e.g., “Mechanical shop overdue >60 days”).  • Suggest retraining for hazard-intense sites.

8.5 HazCom Plan Dashboard

8.5.1 Metrics  • Active vs expired plans.  • Days since last approval.  • Version history graph (timeline).  • Approver summary (Program Coordinator). 8.5.2 Alerts  • “Plan Overdue for Review” flag (> 365 days).  • “Pending Approval” for drafts. 8.5.3 AI Layer (Pro)  • Detect plan sections unchanged >12 months.  • Suggest revision for sections with new hazards (cross-referenced from inventory).

8.6 AI Insights Dashboard (Pro Only)

8.6.1 AI Anomaly Detection  • Identify missing SDS or newly introduced hazard classes.  • Detect rapid chemical turnover (> threshold). 8.6.2 Predictive Risk Analytics  • “Next Inspection Risk” score per site (0–100).  • Forecast OSHA readiness trend. 8.6.3 Compliance Score & Correlation  • Aggregate of:   – SDS completeness (40%)   – Training completion (30%)   – Plan freshness (20%)   – Label printing record (10%)  🟢 Outputs “Overall HazCom Health Index.” 8.6.4 Automated Summaries  • Monthly “Compliance Digest” PDF emailed to Program Coordinator.  • Optional webhook push to corporate dashboards (PowerBI/Tableau).

8.7 Reports & Exports

8.7.1 Report Types  • Starter → PDF  • Standard → PDF + CSV  • Pro → PDF + CSV + XLSX + API 8.7.2 Scheduling  • Manual (Starter)  • Recurring (Standard)  • AI-Scheduled (Pro – auto frequency by activity level) 8.7.3 Export Content  • Company-level summary  • Site-level chemical analytics  • Training records & plan versions

✅ Compliance Mapping

8.8 Notes for Implementation

🧩 Technical Suggestions  • Use modular dashboard components — /dashboards/{moduleType} (Home, Chemical, Training, etc.)  • Back each widget with a REST/GraphQL query from PostgreSQL views.  • Store snapshot metadata for historical comparisons.  • For Pro AI: run nightly job to update risk scores (LangChain + pgvector + cron).

9. Continuous Monitoring & Alerts (Tellus Sentinel)

(Covers OSHA Step 6 – Evaluate and Reassess Program)

9.1 Purpose

• Provide real-time visibility into compliance status across modules (Inventory, SDS, Plan, Training).  • Automatically detect anomalies, expired items, and new risks using event triggers and AI models.  • Generate notifications, summaries, and corrective action workflows without manual intervention.  🟢 Goal: Turn Tellus into a proactive, self-auditing platform that continuously maintains OSHA readiness.

9.2 Monitoring Categories

9.2.1 Chemical Inventory Watchers  • Monitor chemical additions, deletions, or changes in hazard classification.  • Detect SDS mismatches (e.g., product name doesn’t match SDS identifier).  • Watch for expiring SDS (>3 years) or missing EPA labels (FIFRA).  🟢 Integrates directly with Chemical Inventory module (#4). 9.2.2 Training Compliance Monitors  • Track overdue trainings, upcoming expirations, and retraining needs.  • Identify untrained employees for new hazard types.  • Detect department or site with low completion percentage.  🟢 Triggers new training session creation (auto-assignment if Pro). 9.2.3 HazCom Plan Health Monitors  • Check for plan versions older than 12 months.  • Alert when a new chemical type enters but plan hasn’t been revised.  • Detect missing Program Coordinator approval.  🟢 Links with Plan Builder (#6) and AI Analyzer. 9.2.4 Labeling Monitors  • Detect inventory entries missing secondary container labels.  • Flag label print backlog per site.  • Cross-check label pictograms vs SDS hazard statements. 9.2.5 System & Account Monitors  • Track inactive users (no login >90 days).  • Detect unverified email accounts or failed invitation tokens.  • For enterprise clients: alert when subscription limits exceeded (sites, users, SDS, etc.).

9.3 Alert Channels (Tier-Based)

9.3.1 Starter Plan  • Email alerts only.  • Daily batch summary of critical compliance gaps (e.g., missing SDS, untrained staff).  • Manual acknowledgment required by Admin.  🟢 Focus: Visibility through basic email summaries. 9.3.2 Standard Plan  • Real-time in-app + email alerts.  • Pre-built rule triggers (expired SDS, overdue training, stale plan).  • Notification Center under Dashboard with filter by site/module.  • Optional digest reports weekly.  🟢 Focus: Reactive compliance management. 9.3.3 Pro Plan  • Full multi-channel alerting: Email + In-App + Slack/Teams/Webhook + SMS (optional).  • AI prioritization — “High-risk alerts” ranked by impact and urgency.  • Predictive alerts: “Plan review likely needed soon” or “Training renewal expected in 10 days.”  • Event correlation: e.g., new chemical added → retraining required → generate alert + task.  🟢 Focus: Predictive, automated compliance workflows.

9.4 AI-Driven Anomaly Detection (Pro Only)

9.4.1 Anomaly Types  • Inventory Anomalies: Sudden chemical turnover, duplicate CAS numbers, missing pictograms.  • Training Anomalies: Site with training drop-off >30% month-over-month.  • Plan Anomalies: Inconsistent hazard class vs HazCom section.  • Behavioral Anomalies: User repeatedly postpones tasks → “Compliance Drift Risk.” 9.4.2 AI Engine Functions  • Run nightly scans over SDS, training, and plan data.  • Weight each anomaly using compliance risk scoring matrix.  • Update “HazCom Health Index” in Insights dashboard (Step 8).  🟢 Outputs feed back into the Insights module to visualize historical alert trends.

9.5 Notification Rules & Automation

9.5.1 Rule Structure  • Trigger → Condition → Action → Notification → Resolution.  • Example:   Trigger: SDS uploaded.   Condition: SDS older than 3 years.   Action: Send alert to Site Manager.   Resolution: Upload newer SDS version. 9.5.2 Workflow Automation (Standard + Pro)  • Link alerts to actions in the UI (e.g., “Fix Missing SDS”).  • Create subtasks with due dates and responsible users.  • AI suggests next steps (“Request SDS from manufacturer” template). 9.5.3 Alert Suppression  • Intelligent batching to avoid spam (combine duplicate events).  • Allow Admins to mute non-critical alerts for defined duration.

9.6 Escalation Logic

9.6.1 Alert Escalation Paths  • Level 1: Site Manager notified.  • Level 2: Program Coordinator if unresolved within 7 days.  • Level 3: Admin / Compliance Director if still unresolved after 14 days.  🟢 Log all escalation history for audit trail. 9.6.2 Dashboard View  • Alert board with tabs: Open, In-Progress, Resolved, Ignored.  • Severity color codes (Critical / Warning / Info).  • Exportable as CSV/PDF for inspections.

9.7 Monitoring Frequency

9.7.1 Starter: Daily batch (overnight). 9.7.2 Standard: Hourly sync jobs. 9.7.3 Pro: Real-time (event-driven microservices using webhook queues or Kafka stream). 🟢 Each alert logged to “Sentinel_Alerts” table for traceability and Insights analytics.

9.8 AI Recommendations Panel (Pro Only)

• Located in Home and Insights dashboards.  • Shows “Top 5 Recommended Actions” generated by AI Sentinel Agent:   1. “Replace outdated SDS for Acetone.”   2. “Retrain 3 employees on new flammable hazard.”   3. “Review HazCom plan (no update in 14 months).”   4. “Label 6 unmarked secondary containers.”   5. “Re-approve expired PPE policy.”  • Each recommendation links directly to the corrective screen (Inventory, Training, Plan, etc.).  🟢 Moves Tellus from reactive → proactive compliance management.

9.9 Reports & Logs

9.9.1 Alert History Reports  • List all alerts with timestamps, source module, site, severity, and resolution status.  • Export in PDF/CSV/XLSX.  • Filter by module, site, date range, or alert type. 9.9.2 Compliance Trend Graphs  • Daily or weekly alert count trends.  • Time-to-resolution averages.  • AI-generated “Compliance Drift Index” for executive reports.

✅ Compliance Alignment Summary

9.10 Notes for Implementation

🧠 Technical Design  • Implement using a “sentinel” microservice polling PostgreSQL + Supabase events.  • Each rule stored in sentinel_rules table → executed by scheduler (cron or Celery).  • Notifications pushed to notifications table → real-time via WebSockets for Standard+ tiers.  • AI logic:   – Embedding historical alerts into pgvector.   – Ranking similar past events to predict recurrence likelihood.

10. Incident & Spill Log (IncidentIQ)

(Supports OSHA 29 CFR 1904 recordkeeping, HazCom §1910.1200(e)/(h), and ties to EPA/DOT where applicable)

10.1 Purpose

• Capture spills, releases, exposures, near-misses, and injuries with full traceability.  • Link incidents to chemicals, SDS, locations, training, and labels to drive corrective actions.  • Produce regulatory-ready reports and analytics; feed Continuous Monitoring (#9) and Insights (#8).  🟢 Outcome: Faster response, tight documentation, measurable reduction of repeat events.

10.2 Create & Triage Incident

10.2.1 Start Incident  • Quick form: type (spill/release/exposure/near-miss/injury/other), date/time, site, location, reporter.  • Photo/video upload (mobile friendly).  • Severity (Low/Med/High) + immediate status (Open/Contained/Resolved). 10.2.2 Associate Hazards  • Link one or more chemicals from inventory; auto-attach SDS and GHS pictograms.  • If chemical unknown: provisional record + later match workflow.  🟢 Shows first-aid and response from SDS Section 4/5 automatically. 10.2.3 Exposure Details (if applicable)  • Person(s) involved, exposure route (inhalation/skin/eye/ingestion), PPE in use, first aid given, medical referral.  • Witnesses and supervisor. 10.2.4 Containment & Cleanup  • Steps taken, materials used (absorbent, neutralizer), waste container & temporary label generator.  • If FIFRA/EPA label involved → attach label image/number. 10.2.5 Regulatory Flags  • Checkboxes: recordable (OSHA 300), reportable (release thresholds), transportation impact (DOT), environmental release (EPA).  🟢 Prompts additional required fields only when relevant.

10.3 Investigation & Root Cause

10.3.1 5-Whys / Fishbone Templates  • Structured fields to capture causes (procedures, training, equipment, environment, human factors). 10.3.2 Contributing Data  • Pull linked training history, label presence, storage conditions, inspection findings. 10.3.3 AI Assistance (Standard + Pro)  • Suggested probable causes from similar incidents.  • Recommended corrective/preventive actions (CAPA) with due dates and owners.

10.4 Corrective & Preventive Actions (CAPA)

10.4.1 Action Items  • Assign tasks (e.g., update SOP, re-label secondary container, retrain employees, reorder PPE).  • Due date, assignee, priority, attachments. 10.4.2 Automation Hooks  • Create retraining assignment directly in Training (#7).  • Trigger plan revision prompt in HazCom Plan (#6) if new hazard or SOP change. 10.4.3 Verification of Effectiveness  • Post-implementation check with pass/fail and notes.  🟢 Required before incident can be closed.

10.5 Notifications & Escalations

10.5.1 Immediate Alerts  • Notify Site Manager + Program Coordinator on “High severity” or “recordable/reportable” incidents.  • Attach SDS snippet (Section 6 emergency response) in alert. 10.5.2 Escalation Rules  • Unacknowledged High severity → escalate to Admin at 2 hours.  • Overdue CAPA → 7-day escalation ladder (Site → Coordinator → Admin).  🟢 Mirrors escalation logic defined in #9. 10.5.3 Channels by Tier  • Starter: Email.  • Standard: Email + in-app.  • Pro: Email + in-app + Slack/Teams/Webhook + optional SMS.

10.6 Registers & Reporting

10.6.1 Incident Register  • Filterable list (status, severity, site, chemical, recordable/reportable).  • Bulk export: PDF/CSV (Starter/Standard), +XLSX/API (Pro). 10.6.2 OSHA 300/300A/301 Support (Pro)  • Map incident fields to OSHA forms; generate draft PDFs.  • Flag missing data to finalize a log line. 10.6.3 Environmental & Transport (Pro)  • Optional fields for CERCLA/EPCRA thresholds, state reporting contacts, DOT packaging/UN numbers for spill during transport.  • Generate internal initial report and checklist; (no automated filing).

10.7 Analytics & Insights

10.7.1 Dashboards  • Incident trends by site, shift, department.  • Heatmap by location; chemical-specific incident frequency.  • Time-to-contain and time-to-close metrics. 10.7.2 AI Insights (Pro)  • Recurrence prediction (which areas/chemicals likely to re-incident).  • “Top 5 CAPA that reduce 80% of risk” recommendation.  • Correlate incidents with training gaps, labeling gaps, or stale plans. 10.7.3 KPIs  • TRIR (if injury data tracked), CAPA closure rate, days since last incident, % incidents with SDS attached, % incidents linked to training.

10.8 Permissions & Data Retention

10.8.1 Access Control  • Reporter can view own submissions; Manager/Coordinator per-site; Admin org-wide.  • Medical/PII access restricted to HR/Coordinator (Pro: field-level masking). 10.8.2 Retention  • Default 5 years (configurable by org policy).  • Tamper-evident audit log for edits/closures.

10.9 Tiering (Starter / Standard / Pro)

Starter  • Create incidents with photos, link chemicals/SDS, basic CAPA.  • Email notifications, PDF/CSV export, simple trend chart.  🟢 Entry-level compliance evidence. Standard  • Adds AI suggestions for root cause/CAPA, in-app notifications, escalation ladder, richer dashboards, retraining/task automation hooks.  🟢 Operationalize investigations and follow-through. Pro  • OSHA 300/300A/301 draft forms, environmental/transport fields, Slack/Teams/Webhooks/SMS, API/XLSX exports, AI recurrence prediction, PII masking, cross-site benchmarking.  🟢 Enterprise-grade governance and analytics.

10.10 Implementation Notes

• Tables: incidents, incident_parties, incident_chemicals, incident_media, incident_capa, incident_escalations, incident_flags.  • Events publish to Sentinel (#9) for alerts; Insights (#8) consumes aggregates.  • Link by IDs to chemicals, sds_documents, trainings, hazcom_plans, sites/locations.  • Mobile first: offline capture queue with background sync.  • Document generation: server-side PDF templates for OSHA logs and internal summaries.

11. Document Center / File Library

(Supports OSHA §1910.1200(e)(1)(iii) – “Written program availability and records retention”)

11.1 Purpose

• Centralize all compliance documents, records, and attachments in one location.  • Provide version control, retention, and search for SDS, plans, training certificates, permits, and inspection records.  • Enable AI-powered indexing and contextual retrieval (for Copilot, Insights, and Audits).  🟢 Outcome: Single source of truth for EHS and HazCom documentation — auditable, traceable, and accessible from any module.

11.2 Structure & Organization

11.2.1 Folder Hierarchy  • Root folders by Company → Sites → Locations → Modules.   e.g. /Company/Site/HazComPlan/2025_V1 or /Company/Site/Training/Certificates.  • Drag-and-drop upload UI + breadcrumb navigation. 11.2.2 Document Categories  1. SDS and Chemical Records  2. HazCom Plans & Policies  3. Training Materials (Videos, Slides, Certificates)  4. Incident Reports (#10 outputs)  5. Audit & Inspection Reports  6. Permits & Certifications (EPA, Fire Marshal, PPE Fit Tests)  7. General EHS Resources (Manuals, SOPs, Templates)  🟢 Supports custom folders per organization. 11.2.3 Metadata Fields  • Document Name, Type, Site, Location, Owner, Uploaded By, Date, Version, Tags (“SDS”, “Plan”, “Training”, etc.).  • Expiration Date & Review Interval for renewable documents.

11.3 Uploading & Version Control

11.3.1 Upload Methods  • Manual upload (PDF, DOCX, PPTX, XLSX, Images).  • Bulk upload via ZIP or CSV mapping.  • Integration upload from Google Drive / SharePoint / S3 (Pro). 11.3.2 Versioning  • Automatic version number increment (V1, V2, etc.).  • Option to “Mark as Superseded.”  • Compare two versions (Pro: AI diff summary).  🟢 Satisfies OSHA requirement to retain previous versions for reference. 11.3.3 File Integrity & Retention  • Files stored with hash checksum to ensure integrity.  • Retention defaults to 5 years configurable per document type.  • Auto-archive expired documents with option to restore.

11.4 Search & Retrieval

11.4.1 Standard Search (Starter / Standard)  • Search by title, tag, type, site, uploader.  • Filters for “Expiring Soon,” “Outdated,” “Awaiting Approval.” 11.4.2 AI Search (Pro)  • Full-text semantic search across SDS, plans, training docs.  • Ask natural-language queries (“Show me our PPE policy for flammables”).  • Returns relevant documents + summary snippets with section links. 11.4.3 Linked Access (Integration)  • Documents linked from HazCom Plan, Training, Incident, and Audit modules.  • E.g., view SDS directly from IncidentIQ record.

11.5 Approvals & Review Workflow

11.5.1 Approval Cycle (Standard + Pro)  • Upload → Reviewer Assignment → Approval/Rejection → Published.  • Reviewer roles assigned per category (e.g., Safety Manager for Training, EHS Director for Plans). 11.5.2 Periodic Review Triggers  • Automatic reminders X days before document expiry.  • AI suggests review when related chemical or training data changes. 11.5.3 Audit Trail  • Logs uploader, reviewer, approval dates, and changes.  • Exportable to CSV / PDF for audits.

11.6 Notifications & Alerts

11.6.1 Starter – Email alert on upload and manual reminder for expiry. 11.6.2 Standard – Email + in-app alert for pending review or expiring docs. 11.6.3 Pro – All channels (Email + In-app + Slack/Webhook + SMS optional).  • AI prioritization: high-risk expirations (permits, plans, training records).

11.7 Analytics & Insights

11.7.1 Document Health Metrics  • Total docs stored, review rate, expiration rate, review overdue count.  • Pie charts by category (SDS, Plans, Permits, Certificates). 11.7.2 AI Insights (Pro)  • Detects missing mandatory docs per module (e.g., no current HazCom Plan for Site B).  • Suggests archiving or renewal of stale files.  • Generates monthly “Document Health Digest” emailed to Program Coordinator.

11.8 Permissions & Security

11.8.1 Role-Based Access  • Admin: All documents company-wide.  • Manager: Site-specific documents.  • Employee: Read-only for SDS and Training materials.  • External Contractors: Restricted temporary read access to assigned folders. 11.8.2 Pro Security Features  • Field-level encryption for sensitive docs (medical, exposure reports).  • Optional two-factor approval for critical uploads.  • Detailed access logs for inspection evidence.

11.9 Tiering Summary

11.10 Implementation Notes

• Tables: documents, document_versions, document_tags, document_reviews, document_access_logs.  • File storage: Digital Ocean Spaces / Google Drive API / AWS S3 (Pro).  • Vector index (Pro): store embeddings for semantic search across text content.  • Scheduled job: daily expiry check → alert queue (Sentinel #9).  • Integrations: pull SDS and HazCom Plan PDFs automatically to folder on approval.

✅ Compliance Alignment Summary

12. Contractor / Visitor Safety Module (SafeEntry)

(Supports OSHA §1910.1200(e)(2) — “Informing Other Employers and Contractors” requirement)

12.1 Purpose

• Manage third-party contractors, maintenance crews, and visitors working at company sites.  • Ensure they receive proper HazCom awareness, site orientation, and hazard-specific training before entering the facility.  • Maintain signed acknowledgments and training logs for auditing and liability protection.  🟢 Outcome: Every person entering a site (employee or external) is documented, trained, and aware of hazards they may encounter.

12.2 Contractor Setup

12.2.1 Company Registration (External Contractor)  • Contractor company adds basic profile: Company Name, Contact Person, Email, Phone, and Services Provided.  • Optional fields: Insurance Certificate upload, OSHA record summary, certifications (e.g., forklift, confined space). 12.2.2 Link to Site(s)  • Host company (Tellus client) approves contractor access to specific site(s) or location(s).  • Assign Access Duration (temporary, recurring, or permanent).  • Site-level contact (manager) auto-notified for approval. 12.2.3 Contractor Portal / Limited Dashboard  • Contractors view only assigned sites.  • Access SDS, site rules, active HazCom plan, and relevant training content.  🟢 Reduces risk of external exposure claims and ensures traceable awareness.

12.3 Visitor Registration & Check-in

12.3.1 Pre-Entry Registration  • Visitors/contractors receive link (QR/email) to pre-fill form before site entry.  • Collect: name, company, visit reason, expected areas visited, duration, emergency contact. 12.3.2 On-Site Check-in Kiosk / QR Code (Standard + Pro)  • Self-check-in via tablet or QR posted at reception/gate.  • Display site-specific safety instructions.  • Capture e-signature acknowledgment:   “I have reviewed and understand the site hazards and safety procedures.” 12.3.3 Badge Printing (Pro)  • Print visitor badge with name, company, host, expiry time/date, and QR for instant verification. 12.3.4 Check-out / Exit Log  • Optionally log checkout for visitor duration and occupancy report.  🟢 Maintains full audit trail of site access.

12.4 Training & Orientation

12.4.1 Training Assignment (Standard + Pro)  • Assign short HazCom awareness modules or site-specific orientation video.  • Training completion mandatory before access approval. 12.4.2 Hazard Access Mapping  • Auto-match training to hazards present in the area they’ll visit (based on site’s chemical inventory).  🟢 Example: Visiting Maintenance Tech enters Flammable Storage Room → receives Fire & PPE module. 12.4.3 Training Record Retention  • Store contractor’s training date, score, and acknowledgment under company + site.  • Expiration logic for retraining after 12 months or when hazards change.

12.5 Document Exchange

12.5.1 Share SDS / HazCom Information  • Site Manager can share selected SDS or HazCom Plan sections with external contractors.  • View-only access — downloadable PDFs. 12.5.2 Collect Contractor Safety Documents  • Contractors upload:   – JSA / SWPP form   – Site-specific Risk Assessment   – Toolbox Talk log  • Files stored under Document Center (#11) tagged “Contractor Docs.” 12.5.3 AI Review (Pro)  • AI agent checks uploaded contractor documents for missing signatures, incomplete risk assessments, or expired insurance.  • Suggests re-upload or flag for review.

12.6 Alerts & Escalations

12.6.1 Alerts for Expiring Access / Insurance / Training  • System notifies both parties (contractor and host) 7 days before expiry.  • Auto-suspends access after expiration (Pro). 12.6.2 Incident Trigger Integration  • If contractor involved in incident (#10), automatically:   – Freeze contractor account until investigation closes.   – Notify Program Coordinator and Site Manager. 12.6.3 Tier-Based Notifications

12.7 Reports & Analytics

12.7.1 Access Logs  • All visitor/contractor entries with timestamps, site, duration, and training completion.  • Filter by company, site, date range, or approval status. 12.7.2 Training Coverage Report  • Completion % for contractor workers vs employees.  • Highlight “untrained contractors onsite.” 12.7.3 AI Insights (Pro)  • Detect contractors frequently entering high-hazard areas without training updates.  • Predict “non-compliance risk” score per contractor company.  • Recommend re-orientation or safety briefing. 12.7.4 Exports  • PDF / CSV (Starter, Standard)  • XLSX / API / Webhook (Pro)  🟢 Compatible with Insights (#8) dashboards and Sentinel (#9) alerts.

12.8 Permissions & Access

12.8.1 Roles  • Admin: Global access to all contractor and visitor records.  • Site Manager: Approve access for their site only.  • Contractor Company Admin: Manage own workers and documents.  • Employee Host: View only guests they invite. 12.8.2 Security Controls  • Optional NDA acknowledgment before file access.  • Time-limited share links for external files.  • Access log and digital signature record for every entry.

12.9 Tiering Summary

12.10 Implementation Notes

• Tables: contractors, contractor_users, contractor_access, contractor_training, contractor_documents, visitor_logs.  • Integrates with Training (#7), Document Center (#11), IncidentIQ (#10), and Sentinel (#9).  • Mobile-first responsive portal for contractor check-ins and uploads.  • Optional QR-code printed from admin panel per site.  • AI pipeline (Pro):   – Index contractor docs into vector store.   – Scan for missing mandatory keywords (insurance, hazard, SDS reference).  • Data retention: 3–5 years (configurable).

✅ Compliance Alignment Summary

13. Audit & Inspection Module (InspectIQ)

(Supports OSHA §1910.1200(e)(1)(iv) – periodic program review, and OSHA 1904.7–1904.33 for inspection & corrective documentation) This module closes the loop on compliance verification — ensuring that your sites not only have plans, SDSs, and training, but that their implementation is physically verified and documented.

13.1 Purpose

• Digitize safety inspections, self-audits, and compliance walkthroughs across all sites.  • Provide customizable checklists for chemical storage, PPE, labeling, SDS accessibility, and employee awareness.  • Track findings, assign corrective actions (CAPA), and generate inspection summary reports for regulatory readiness.  🟢 Outcome: Every inspection, deficiency, and follow-up becomes traceable, measurable, and reportable.

13.2 Checklist & Template Creation

13.2.1 Checklist Library  • Pre-built OSHA & HazCom inspection templates:   – Hazard Communication Program Review   – SDS Binder / Accessibility Audit   – Labeling & Container Verification   – Training Compliance Verification   – PPE & Chemical Storage Inspection  • Option to create custom checklists (per site or company). 13.2.2 Checklist Builder (Standard + Pro)  • Drag-and-drop interface to add:   – Yes/No/NA questions   – Photo/Attachment prompts   – Score weights and category grouping (e.g., Storage 20%, Training 30%)  🟢 Enables company-specific EHS audits or consultant templates. 13.2.3 Question Tagging (Pro)  • Tag questions to OSHA clauses or internal SOPs.  • Enables filtered reports by regulation reference later.

13.3 Scheduling & Assignment

13.3.1 Schedule Types  • One-time, recurring (weekly, monthly, quarterly, annual).  • Choose auditor (internal or external). 13.3.2 Assignment Logic  • Assign per Site / Location / Department.  • Notify assigned auditor and Site Manager via email & in-app. 13.3.3 Integration Hooks  • Auto-schedule inspection when certain Sentinel (#9) alerts repeat.   Example: “Repeated label missing” → auto-generate “Label Compliance Audit.”

13.4 Conducting Inspections

13.4.1 Mobile & Web Interface  • Offline mode for mobile inspectors (auto-sync later).  • Capture photos, notes, GPS coordinates.  • Upload evidence files and tag to question. 13.4.2 Smart Inputs (Standard + Pro)  • “Copy from last audit” to reuse previous responses.  • Barcode scan or search to link specific chemicals or SDS records.  🟢 Saves time and maintains audit continuity. 13.4.3 AI Assistant (Pro)  • Suggests likely answers from historical inspections.  • Auto-detects anomalies in photos (e.g., missing GHS label, open container).  • Provides instant recommendations for each non-conformance found.

13.5 Scoring & Findings

13.5.1 Weighted Scoring System  • Auto-calculates overall site compliance score.  • Category scoring (Labeling, SDS, Training, PPE, Chemical Storage).  • Displays “Pass / Conditional / Fail” result with percentage. 13.5.2 Deficiency Recording  • Mark item as “Non-Compliant,” “Observation,” or “Recommendation.”  • Attach photos, notes, responsible person, due date. 13.5.3 CAPA (Corrective & Preventive Actions)  • Assign corrective tasks directly within audit (auto-links to IncidentIQ #10).  • Set deadlines and reminders.  • Verification step to close CAPA once completed.  🟢 Establishes full audit → action → verification loop.

13.6 Notifications & Escalations

13.6.1 Tiered Alerts 13.6.2 Escalation Path  • Site Manager → Program Coordinator → Admin → Corporate EHS.  • Unresolved CAPA >14 days → automatically escalated and logged in Sentinel (#9).

13.7 Reporting & Analytics

13.7.1 Inspection Reports  • Auto-generate PDF summary with:   – Checklist results   – Findings & corrective actions   – Photos and attachments   – Compliance score and comments.  • Export formats: PDF / CSV / XLSX (Pro: API integration). 13.7.2 Trend Analysis Dashboards (Standard + Pro)  • Compliance score trends over time.  • Findings by category (Labeling, SDS, Storage, etc.).  • Repeat violations by location or employee. 13.7.3 AI Insights (Pro)  • Detect patterns (e.g., “Same deficiency repeated across 3 sites”).  • Predict which areas are at high risk for next inspection.  • Recommend training or plan updates based on frequent findings. 13.7.4 Integration with Insights (#8)  • Feeds compliance scores and unresolved findings to the Home Dashboard.  • AI uses results to adjust HazCom Health Index automatically.

13.8 Permissions & Access

13.8.1 Roles  • Admin – full view across company.  • Program Coordinator – read/write for assigned sites.  • Auditor – limited to assigned checklists.  • Site Manager – view results + manage CAPA.  • Employee – read-only on public findings related to their department. 13.8.2 Access Security  • Sign-off workflow: inspector + manager + coordinator.  • PDF report watermark with timestamp & digital signature.  • Tamper-evident audit record maintained.

13.9 Tiering Summary

13.10 Implementation Notes

• Tables: audits, audit_checklists, audit_questions, audit_answers, audit_findings, audit_actions, audit_escalations.  • Mobile-first design using PWA or native shell.  • Sync offline entries via background service (queue-based).  • Event hooks:   – Audit scheduled → add to Sentinel alert list.   – Audit completed → push Insights (#8) dashboard update.  • AI (Pro):   – Image classification model (GHS pictogram / PPE detection).   – LLM for recommendation text generation (“Consider relocating flammable liquids”).  • Retention: audit records stored minimum 5 years (export-ready for OSHA inspection).

✅ Compliance Alignment Summary

14. Administration & Billing Module (AdminHQ)

(Supports SaaS account control, plan governance, role management, and subscription compliance across Tellus Starter, Standard, and Pro tiers) This is Step #14 – Administration & Billing Module (AdminHQ) — the operational backbone that manages accounts, roles, usage limits, plans, and billing for companies, partners, and consultants.

14.1 Purpose

• Provide centralized control for organization administration, user management, plan subscriptions, billing, and usage monitoring.  • Enable multi-tenant visibility (Tellus Admins, Company Admins, Partner/Consultant Admins).  • Serve as the operational “HQ” for plan enforcement, upgrades, and account lifecycle.  🟢 Outcome: Transparent, self-service administration for customers while maintaining automated plan and usage compliance.

14.2 Structure

14.2.1 Sections / Tabs  1. Company Profile  2. Users & Roles  3. Sites & Locations  4. Subscription & Billing  5. Usage & Limits  6. Audit Logs  7. Integrations & Branding 14.2.2 Access Levels  • Super Admin (Tellus HQ): View/manage all companies.  • Company Admin: Manage their organization’s configuration.  • Partner/Consultant Admin (Pro): Manage multiple client companies.

14.3 Company Profile

14.3.1 Basic Details  • Company Name, Address, Industry, EIN/DUNS, Primary Contact.  • Editable branding fields: logo, colors (Pro). 14.3.2 Regulatory Identifiers  • EPA ID, OSHA SIC/NAICS code, State license numbers.  🟢 Enables integration with compliance reports and external regulatory forms. 14.3.3 Plan Tier Display  • Shows current plan, renewal date, and trial status.  • Link to upgrade or downgrade.  • For trial accounts: warning banner before expiration.

14.4 Users & Roles

14.4.1 User Directory  • Displays all active, pending, and deactivated users.  • Search, filter by site, location, and role.  • Bulk import/export (CSV/XLSX). 14.4.2 Role Management  • Default roles: Admin, Manager, Employee, Trainer, Viewer.  • Custom roles (Standard + Pro) with permission matrix (CRUD by module).  🟢 Roles propagate across modules: Inventory (#4), Plan (#6), Training (#7), etc. 14.4.3 Invitations & Deactivation  • Send invites via email.  • Deactivate or reassign users (preserves audit trail).  • MFA enforcement (Pro).

14.5 Sites & Locations

14.5.1 Site Directory  • View, add, or deactivate sites (according to plan limits).  • Starter: 1 site; Standard: up to 5; Pro: unlimited.  • Track site-level managers, training progress, and inventory. 14.5.2 Location Management  • Nested structure under each site.  • Define address, coordinates, hazard classification, and storage type.  🟢 Used for geo-specific compliance reporting.

14.6 Subscription & Billing

14.6.1 Subscription Overview  • Displays current plan, active modules, renewal frequency (monthly/annual).  • Add-ons: extra users, storage, or AI credits.  • Renewal and cancellation policies shown clearly. 14.6.2 Payment Processing (Standard + Pro)  • Integrated with Stripe (or Paddle/Zoho for enterprise).  • Payment methods: credit card, ACH, invoice (Pro).  • Automated receipts and renewal notifications. 14.6.3 Invoices & History  • List of past invoices, amounts, and payment status.  • Download PDF or send to accounting email.  🟢 Keeps financial documentation in compliance with SOC2 audit needs. 14.6.4 Plan Upgrades / Downgrades  • Auto-calculate prorated charges.  • Changes applied instantly or at next billing cycle.  • Admin can request “Custom Enterprise Plan.”

14.7 Usage & Limits

14.7.1 Real-Time Usage Dashboard  • Track:   – # of Sites used / allowed   – # of Users used / allowed   – # of SDS documents stored   – # of Trainings completed   – File storage used (GB)   – AI queries / credits used (Pro)  🟢 Helps enforce fair usage and transparency. 14.7.2 Overage Alerts  • Email + in-app alert when usage >90% of limit.  • Option to auto-upgrade to next plan (Pro only). 14.7.3 Data Retention Limits  • Archive inactive users or old data when retention policy hits limit.  • Pro plans get customizable retention duration (5–10 years).

14.8 Audit Logs & System Activity

14.8.1 System Audit Logs  • Record of all admin actions: user changes, role updates, plan changes, billing modifications.  • Filter by user, action type, date.  • Export PDF / CSV (Pro: API available). 14.8.2 Security Logs (Pro)  • Login attempts, failed authentications, MFA events.  • Alerts for suspicious logins or repeated failures.  🟢 Integrates with Sentinel (#9) for system-level alerts. 14.8.3 Change Tracking  • Every configuration change tagged with “who, when, what.”  • Supports compliance with internal IT audits.

14.9 Integrations & Branding

14.9.1 Email Branding (Standard + Pro)  • Custom logo, color, and company name on outgoing emails (training invites, plan PDFs).  • Reply-to customization (company domain). 14.9.2 External Integrations (Pro)  • Webhooks for account creation/deletion events.  • API endpoints for partner dashboards (consultants).  • SSO via Microsoft/Google Workspace (Pro). 14.9.3 Partner / Consultant View (Pro)  • Manage multiple clients under one login.  • Each client sandboxed but accessible through shared analytics dashboard.  🟢 Perfect for EHS consultants managing several SMBs.

14.10 Notifications & Escalations

14.11 Tiering Summary

14.12 Implementation Notes

• Tables: companies, subscriptions, plans, billing_history, users, roles, sites, usage_metrics, audit_logs.  • Stripe webhook integration for real-time updates.  • n8n / workflow automation for reminders & invoice generation.  • Role permissions JSON stored per company for flexible access.  • Auto-sync plan entitlements with front-end feature flags.  • Pro: expose GraphQL API for consultants to query multi-client metrics.

✅ Compliance & Business Alignment Summary

15. AI Copilot / Assistant Module (Tellus Copilot)

(Supports OSHA §1910.1200(h) — “Employee Information and Training” by enabling on-demand, comprehensible hazard communication) This module turns Tellus from a static compliance app into an intelligent, context-aware EHS assistant that understands SDSs, HazCom Plans, training data, incidents, and user context — bringing your “agentic AI” vision fully into the platform.

15.1 Purpose

• Provide an interactive, intelligent assistant for employees, managers, and admins to query HazCom information in natural language.  • Enable real-time contextual guidance: find SDS details, locate hazards, retrieve plan sections, and generate reports.  • Act as the frontline AI agent layer across all Tellus modules — embedding search, summarization, and workflow execution.  🟢 Outcome: Every user gains instant access to compliant, accurate, and explainable safety knowledge without manual navigation.

15.2 Core Capabilities

15.2.1 Conversational Querying  • Users ask questions in plain language:   – “Show me the SDS for acetone.”   – “What PPE do I need for flammable liquids at Site A?”   – “Who hasn’t completed HazCom training this week?”  • Copilot identifies user role, site context, and permissions before responding. 15.2.2 Contextual Data Retrieval  • Searches vectorized data from SDS, HazCom Plans, Training, Incidents, and Audits.  • Uses embeddings for semantic similarity — not keyword search.  • Prioritizes results by module and relevance. 15.2.3 Cross-Module Orchestration (Pro)  • Chain actions automatically:   – “Add SDS for acetone to Site B.”   – “Create a new HazCom Plan version for Warehouse.”   – “Assign training to untrained users in Lab.”  🟢 Powered by n8n workflows and AI function calling.

15.3 Interface & Accessibility

15.3.1 Access Points  • Docked chatbot on every page (bottom-right).  • Global keyboard shortcut (“Ctrl + Space”).  • Full-page Copilot Console (Pro). 15.3.2 Modes of Operation  • Search Mode: Retrieve documents or data.  • Explain Mode: Summarize or simplify technical content.  • Action Mode (Pro): Execute or trigger workflows.  • Compliance Mode (Admin): Generate status summaries and insights. 15.3.3 Multi-Language Support (Standard + Pro)  • EN ↔ ES (English–Spanish) translations for queries and responses.  • OSHA/HazCom glossary maintained internally for accurate bilingual terms.  🟢 Ensures comprehension for multilingual workplaces.

15.4 Example Use Cases

15.5 AI Knowledge Engine

15.5.1 Knowledge Sources  • SDS JSON data (from Step #4).  • HazCom Plan documents (Step #6).  • Training logs and completion data (Step #7).  • Incidents and audits (Steps #10, #13).  • Regulatory references (OSHA 1910.1200, EPA, DOT). 15.5.2 Vector Index (Pro)  • pgvector / Pinecone-based storage of embeddings per company.  • Scoped by tenant — ensures data isolation.  • Metadata tagging: {module, site, document_type, date}. 15.5.3 Retrieval-Augmented Generation (RAG)  • Combines vector retrieval + context-based prompt templates.  • Citation-style answers: includes document references (e.g., SDS ID, plan version).  • Auto-summarizes long SDS or plan sections into 3–5 bullet key points.

15.6 Safety Simplification & Training Integration

15.6.1 Simplified Explanations (All tiers)  • Converts technical SDS terms into plain language:   – “Toxic if inhaled → means avoid breathing fumes; wear respirator.”  🟢 Satisfies OSHA requirement for understandable communication. 15.6.2 Embedded Training Companion (Standard + Pro)  • Inside training modules (#7), Copilot answers questions during lessons.  • “What does this pictogram mean?” → explains symbol and hazard type. 15.6.3 Quiz Assistance (Pro)  • AI explains why a selected answer is correct or incorrect after completion.  • Improves retention and comprehension.

15.7 Generative Features (Pro Only)

15.7.1 Document Generation  • Generate new HazCom Plans from company data.  • Draft SDS summaries for internal review.  • Write training outlines and quiz sets automatically. 15.7.2 Incident Summaries  • Convert raw incident data into OSHA 300-compatible summaries.  • Generate CAPA recommendations. 15.7.3 Email / Message Drafting  • “Notify team about overdue training” → creates formatted email draft with metrics.  • “Send vendor SDS request letter” → generates compliant message.

15.8 Security & Permissions

15.8.1 Role-Based Scope  • Copilot responses limited to user’s module access and site scope.  • Employees cannot view plan drafts or financial data.  • Admins can ask global questions (e.g., across all sites). 15.8.2 Compliance Guardrails  • All answers reference authoritative data from system sources (no hallucinations).  • Prompts sanitized before LLM call.  • Optional “strict mode” — only factual retrieval, no generative reasoning. 15.8.3 Auditability  • Every Copilot conversation logged with query, response, sources used, and timestamp.  • Logs available in Audit Logs (#14.8).

15.9 Notifications & Escalations

15.9.1 Triggered Alerts  • If Copilot detects unsafe condition query (“spill,” “exposure,” “symptoms”), it:   – Displays immediate safety guidance.   – Sends alert to Site Manager and Program Coordinator. 15.9.2 Learning Feedback Loop (Pro)  • Monitors frequent queries → suggests missing training or unclear SDS info.  • Example: repeated “What does flammable mean?” → triggers training enhancement flag.

15.10 Tiering Summary

15.11 Implementation Notes

• Backend microservice tellus-copilot connects to FastAPI + OpenAI API.  • Vector store (pgvector / Pinecone) updated via background tasks when documents change.  • RAG templates defined per module:   – SDS Q&A, Plan Q&A, Training Assistant, Audit Helper, Admin Query.  • Model selection by tier:   – Starter → GPT-4o-mini   – Standard → GPT-4o   – Pro → GPT-5 / fine-tuned internal model.  • Integrations: embedded as React component in all dashboards.  • Optional offline fallback → limited FAQ mode (cached answers).

✅ Compliance & Business Alignment Summary

16. Waste & Sustainability Module (EcoLog)

(Aligns with EPA RCRA, DOT 49 CFR hazardous waste transportation, and optional ESG / sustainability reporting frameworks) This module sets the foundation for Tellus to evolve beyond HazCom into environmental management and ESG tracking, aligning with EPA RCRA, state-level waste rules, and modern sustainability expectations.

16.1 Purpose

• Manage and track hazardous and non-hazardous waste generation, storage, transportation, and disposal across sites.  • Generate waste profiles, manifests, and disposal records for EPA/state compliance.  • Collect sustainability metrics such as recycling rates, greenhouse gas (GHG) data, and waste reduction KPIs.  🟢 Outcome: Enables businesses to stay compliant with environmental waste regulations and demonstrate sustainability performance.

16.2 Waste Profile Management

16.2.1 Create Waste Profiles  • Each waste stream defined with:   – Waste name & description   – Generating process or department   – EPA waste code(s) (D, F, K, P, U)   – Physical state (solid/liquid/gas/sludge)   – Hazard class (flammable, corrosive, reactive, toxic)   – SDS or chemical reference link  • Auto-suggest waste codes based on SDS content (Standard + Pro). 16.2.2 Approval Workflow  • Profiles reviewed by EHS Manager or Waste Coordinator.  • Approved profiles versioned; superseded ones archived but searchable. 16.2.3 Storage & Compatibility Rules  • Define storage requirements: container type, segregation, secondary containment.  • AI validation (Pro): detect incompatible waste streams stored together.

16.3 Waste Container Tracking

16.3.1 Container Registry  • Track each container’s unique ID, contents, start date, location, and capacity.  • QR/barcode label printing (Standard + Pro).  • Field app for scanning and updating container status. 16.3.2 Lifecycle Status  • “Open → Full → Awaiting Pickup → Shipped → Disposed.”  • Visual dashboard: container count by status and site. 16.3.3 Accumulation Time Tracking  • Auto-alert when containers approach 90-day (LQG) or 180-day (SQG) limits.  🟢 Regulatory tie-in: EPA RCRA generator standards.

16.4 Transportation & Disposal

16.4.1 Manifest Creation (Standard + Pro)  • Generate EPA uniform hazardous waste manifests with pre-filled generator and transporter data.  • Digital signature (e-sign) from generator, transporter, and TSDF.  • Attach scanned manifest copy post-disposal. 16.4.2 Transporter & Disposal Facility Database (Pro)  • Store and validate transporter EPA IDs and TSDF permits.  • Link waste shipment to facility contact and disposal method.  • AI check for expired transporter licenses. 16.4.3 Non-Hazardous & Recyclable Waste Tracking  • Record non-regulated waste, recycling, and universal waste (batteries, bulbs, e-waste).  • Allows sustainability reporting and internal waste minimization analytics.

16.5 Sustainability Metrics

16.5.1 Waste Diversion Rate  • Calculate % of total waste diverted from landfill (recycled, reused, recovered). 16.5.2 Carbon Impact Estimation (Pro)  • Estimate GHG emissions associated with disposal and transport.  • CO₂e calculated using emission factors (EPA WARM or DEFRA datasets). 16.5.3 Water & Energy Usage (Pro - optional expansion)  • Track facility-level water consumption and energy data for ESG dashboards.  🟢 Enables future ESG module integration.

16.6 Reporting & Analytics

16.6.1 Regulatory Reports  • Generate EPA Biennial Report (hazardous waste summary).  • State-level export formats (California DTSC, Texas TCEQ, etc.).  • DOT shipping summary for audit trail. 16.6.2 Operational Dashboards (Standard + Pro)  • Waste generated per site / department.  • Disposal costs and frequency trends.  • Containers nearing accumulation limits. 16.6.3 Sustainability Dashboards (Pro)  • Monthly waste generation vs. recycling graph.  • Carbon reduction and diversion trends.  • ESG readiness score combining waste, energy, and emissions metrics. 16.6.4 AI Insights (Pro)  • Predict next container fill date based on historical rates.  • Suggest consolidation of compatible wastes to reduce pickups.  • Generate annual sustainability summary (“Waste reduction by 12% YoY”).

16.7 Notifications & Alerts

16.8 Permissions & Access

16.8.1 Roles  • Waste Coordinator: Manage profiles, manifests, and transporters.  • Site Manager: View and update container status.  • Employee: Submit waste pickup requests.  • Admin: Full company-wide view. 16.8.2 Access Control (Pro)  • Role-specific visibility: waste by site or department only.  • Audit log for every manifest and disposal action.

16.9 Tiering Summary

16.10 Integration Points

• Inventory (#4): Automatically detect waste streams from expired chemicals or spills (IncidentIQ #10).  • Document Center (#11): Store manifests, disposal certificates, and transporter docs.  • Sentinel (#9): Monitors expiring storage limits and transporter license renewals.  • Insights (#8): Feeds sustainability KPIs to Home Dashboard.  • Copilot (#15): Responds to queries like “Show me last quarter’s hazardous waste totals.”

16.11 Implementation Notes

• Tables: waste_profiles, waste_containers, waste_manifests, transporters, waste_facilities, waste_metrics.  • QR/barcode labels: generated from container IDs (Zebra / PDF).  • API integration: optional connection with EPA e-Manifest (for Pro).  • AI pipeline: monitors fill rate trends and classifies waste type by SDS data.  • ESG engine: stores carbon & diversion calculations in sustainability_metrics table.  • Retention: all manifests retained ≥3 years (per EPA).

✅ Compliance & Sustainability Alignment Summary

17. Integration Hub (Tellus Connect)

(Supports extensibility, automation, and partner ecosystem — enabling Tellus to function as a connected compliance platform.) This module is the bridge between Tellus and the external ecosystem — connecting third-party apps, automation tools, and partner systems (like n8n, Zapier, Google Drive, or regulatory APIs) while ensuring data security, tenant isolation, and auditability.

17.1 Purpose

• Provide secure APIs, webhooks, and automation connectors to integrate Tellus data with third-party systems.  • Enable EHS consultants, enterprise clients, and automation tools (n8n, Zapier, Power BI) to interact with Tellus modules programmatically.  • Allow real-time event-based triggers for workflows, alerts, and data sync.  🟢 Outcome: Seamless interoperability between Tellus and customer ecosystems — unlocking new revenue streams and automation efficiency.

17.2 Architecture Overview

17.2.1 Integration Layers  1. Public REST API (All Tiers) – Standard read/write for basic data.  2. GraphQL API (Standard + Pro) – Aggregated multi-module queries.  3. Webhooks (Standard + Pro) – Real-time outbound event triggers.  4. Partner SDK / Automation Templates (Pro) – n8n, Zapier, Make, Power Automate connectors.  5. Regulatory API Connectors (Pro) – EPA, OSHA, and e-Manifest integration. 17.2.2 Security Model  • OAuth 2.0 and API keys per organization.  • Scopes per module (SDS, Training, Plan, etc.).  • Rate limits and API gateway monitoring.  🟢 Data isolation per tenant (Postgres schema / row-level security).

17.3 Available API Domains

17.3.1 Company & Site Management  • CRUD endpoints for companies, sites, and locations.  • Use case: consultants auto-create site structure for new clients. 17.3.2 Inventory & SDS  • /chemicals, /sds, /labels endpoints.  • Upload, search, or export SDS metadata.  • Optional AI embedding sync endpoint for new SDS uploads (Pro). 17.3.3 HazCom Plans  • /hazcom/plans – list, create, update, version control.  • /hazcom/questions – retrieve question templates.  • Webhook triggers: plan.created, plan.approved, plan.expired. 17.3.4 Training  • /training/courses, /training/records.  • Integration with external LMS or HRIS.  • Webhook: training.completed → send back to HR system. 17.3.5 Incidents & Audits  • /incidents, /audits endpoints for two-way sync.  • Consultants can log incidents remotely or retrieve findings.  • Webhook: incident.created, audit.submitted. 17.3.6 Document Center  • /documents API with upload and tagging support.  • /folders API to organize per site and module.  • Pro: signed URL generation for secure temporary access. 17.3.7 Waste & Sustainability  • /waste/profiles, /waste/containers, /waste/manifests, /waste/metrics.  • Future connector: EPA e-Manifest endpoint.  • ESG export endpoints (GRI / CSV / API).

17.4 Webhooks

17.4.1 Event Categories  1. Inventory Events: new SDS added, chemical deleted, SDS expired.  2. Training Events: training assigned/completed.  3. Plan Events: plan created/approved/expired.  4. Incident Events: incident logged/resolved.  5. Audit Events: audit scheduled/completed.  6. Waste Events: manifest approved, container full. 17.4.2 Webhook Management  • Each company can register multiple endpoints with filters by event type.  • Test and retry functionality with signing secret for verification.  • Replay events from history for failed deliveries. 17.4.3 Example Events

{
"event": "training.completed",
"timestamp": "2025-10-25T18:02:00Z",
"data": {
"user_id": 1821,
"course_id": 501,
"score": 90,
"completed_at": "2025-10-25"
},
"signature": "sha256=xxxx"
}

17.5 Partner & Consultant Integrations (Pro Only)

17.5.1 Multi-Client Dashboards  • Partners pull metrics for all managed clients using a single token (read-only).  • Query example: GET /partners/{id}/clients/{client_id}/insights.  • Enables EHS consultants to monitor all clients in one view. 17.5.2 White-Label Webhook Prefix  • Allow branded webhook URLs: https://partnername.tellusconnect.ai/hooks/....  🟢 Useful for integrated consultant platforms. 17.5.3 Analytics Export  • Bulk export API for Insights (#8) metrics and audit results.  • Supports Power BI / Tableau integrations.

17.6 Automation Connectors

17.6.1 n8n / Zapier Templates  • Prebuilt workflows:   – “When SDS uploaded → generate AI summary → notify Slack.”   – “When plan approved → email PDF to EHS Coordinator.”   – “When training overdue → create task in Asana.” 17.6.2 Integration Examples  • HRIS (BambooHR, Gusto) → sync employees into Tellus.  • Google Drive → auto-save generated reports and plans.  • Slack/Teams → send Sentinel (#9) alerts.  • DocuSign → collect e-signatures for plan approvals. 17.6.3 Custom Script Runner (Pro)  • Allows Tellus Admins to run approved scripts via API with execution sandbox.  • Use case: periodic data sync or ETL tasks.

17.7 Data Exchange & Security

17.7.1 API Key Management  • Each integration registered in AdminHQ (#14) with key rotation.  • Expired keys auto-disabled after 90 days inactive. 17.7.2 Audit Logs  • Every API call recorded in api_audit_logs.  • Logged: timestamp, method, IP, user/org ID, latency, response code.  🟢 Satisfies SOC2 / ISO 27001 traceability requirements. 17.7.3 Rate Limits  • Starter: 1000 requests/day  • Standard: 10,000/day  • Pro: 100,000/day (burst-capable via gateway scaling). 17.7.4 Data Protection  • Enforced tenant isolation at query level.  • GDPR/CCPA ready — includes “Right to Erasure” API endpoint.

17.8 Monitoring & Alerts

17.9 Tiering Summary

17.10 Implementation Notes

• API gateway built on FastAPI + Kong / NGINX for routing.  • Use JWT or OAuth 2.0 scopes for authorization.  • Async job queue (Celery / Redis) for webhook delivery and retries.  • Webhooks stored in webhook_subscriptions, events in webhook_events.  • Partner integrations tracked in partner_clients with aggregated usage analytics.  • Provide OpenAPI/Swagger documentation with sample code (Python, Node, Power Automate).

✅ Compliance & Business Alignment Summary

18. Customer Support Module (SupportIQ)

(Aligns with OSHA 1910.1200(h)(3)(iv): ensuring employees know where to get further information — extended here as product & compliance support infrastructure.) This closes your platform loop — ensuring every company, partner, or user has built-in support, issue tracking, and AI-guided help across all modules.

18.1 Purpose

• Provide an integrated customer service and technical support system within the Tellus platform.  • Allow users to raise tickets, chat with support, or get AI-generated guidance for product, compliance, or training issues.  • Enable Tellus Admins and partners to manage support SLAs, analytics, and response quality.  🟢 Outcome: Seamless in-app support experience that reduces churn, ensures user satisfaction, and reinforces compliance credibility.

18.2 Support Entry Points

18.2.1 In-App Help Button  • Available across all modules (bottom-right or via “Help” menu).  • Opens AI Copilot (Step #15) → self-service help → escalate to human agent if unresolved. 18.2.2 Support Center Portal  • /support area within platform.  • Tabs: “Tickets,” “Knowledge Base,” “FAQs,” “Announcements.”  • Visible per company (multi-tenant separation). 18.2.3 Email & Chat Channels  • Support email: support@gettellus.ai (auto-creates ticket).  • Chat integration (Intercom/Zendesk Chat or in-house widget).

18.3 Ticket Management

18.3.1 Ticket Creation  • Users select Category (Technical, Billing, Compliance Guidance, Training, AI Copilot, Other).  • Include attachments/screenshots.  • Auto-capture page context (module, user role, site).  • Copilot suggests related KB articles before submission. 18.3.2 Ticket Lifecycle  • Statuses: Open → Assigned → In Progress → Waiting on User → Resolved → Closed.  • Priority: Low, Medium, High, Urgent.  • SLA timers per plan tier. 18.3.3 Assignment & Escalation  • Assigned automatically based on category and site.  • Escalation tiers:   1️⃣ Company Admin Support   2️⃣ Tellus Partner Consultant (if linked)   3️⃣ Tellus Support Team / EHS Specialist  🟢 SLA-based escalation: auto-alert if not responded within threshold.

18.4 AI Support Assistant (Standard + Pro)

18.4.1 AI Auto-Responder  • Analyzes ticket content → provides instant draft answer from knowledge base.  • Suggests next steps or links to documentation (“How to upload SDS,” “Generate Plan PDF”).  • Learns from resolved tickets — continuously improves. 18.4.2 AI Classification  • Auto-tags incoming tickets (Technical / Regulatory / Billing).  • Routes to correct queue.  • Summarizes customer sentiment (positive/neutral/negative). 18.4.3 AI Suggestion Loop (Pro)  • When AI Copilot (#15) fails to resolve query, it opens SupportIQ ticket pre-filled with context + screenshots.  • Tracks “AI deflection rate” (how many tickets were solved without human intervention).

18.5 Knowledge Base

18.5.1 Article Categories  • Product Guides (per module)  • Compliance Help (OSHA, EPA, DOT basics)  • AI Tips (using Copilot, Insights, Sentinel)  • Troubleshooting & Integrations 18.5.2 Article Management  • WYSIWYG editor for Admins.  • Version control, article ownership, and update reminders.  • Tags and search indexing for AI retrieval. 18.5.3 AI-Powered Search (Pro)  • Semantic Q&A built from all KB articles.  • Suggests top 3 relevant solutions before user submits ticket.  • Logs unsuccessful queries → identifies KB gaps.

18.6 SLA & Escalation Rules

🟢 All SLA breaches are auto-reported to Insights (#8) for quality monitoring.

18.7 Reporting & Analytics

18.7.1 Support Dashboard  • Open tickets by category and site.  • Average response time, resolution time, SLA breaches.  • Top issue categories (Technical, Training, Compliance, Billing). 18.7.2 AI Insights (Pro)  • Root cause trends (“Frequent SDS upload errors,” “Training access issues”).  • Predictive load analysis — forecast support volume spikes (based on user activity).  • Agent performance scoring (response quality and tone). 18.7.3 Customer Satisfaction (CSAT)  • Post-resolution survey (1–5 stars).  • AI sentiment analysis of comments.  • CSAT score tracked by site and partner.

18.8 Partner & Consultant Integration

18.8.1 Partner Queue (Pro)  • Partners (consultants) manage tickets for their assigned clients.  • View only clients they support.  • Escalate unresolved tickets to Tellus HQ. 18.8.2 Co-Branded Support (Pro)  • White-labeled knowledge base and support portal with partner branding.  • Partner email alias (support@partnerdomain.com).  🟢 Enables consultant firms to embed Tellus into their service offering.

18.9 Notifications & Channels

18.10 Tiering Summary

18.11 Implementation Notes

• Tables: support_tickets, ticket_comments, ticket_attachments, ticket_categories, knowledge_articles, ticket_audit_logs.  • AI Support powered by same backend as Copilot (#15) with dedicated retrieval corpus (KB embeddings).  • Integration with AdminHQ (#14) for billing-related tickets.  • SLA timers handled by Celery background scheduler.  • Notification service reuses Sentinel (#9) alert bus.  • Chat support can be in-house (React component) or integrated via Intercom/Zendesk API.

✅ Compliance & Business Alignment Summary

18.12 Future Enhancements

• Voice AI Assistant (Pro+): enable voice-to-text for safety queries (“Tellus, how do I neutralize acid spill?”).  • Video Tutorials Library: embed EHS trainer videos for self-help.  • Live Safety Chat Channel: connect employees directly to EHS experts during emergencies.  • Predictive FAQ Generator: AI identifies new topics from Copilot logs to auto-create KB entries.

Would you like me to now generate a summary section that maps all 18 steps/modules — from Signup → SupportIQ — into a single master table (for roadmap, UI planning, or presentation)?

FeatureStarterStandardPro
Company Signup✅ Basic✅ + Trial Option✅ + Consultant Source Tracking
Invite Signup✅ + Multi-company roles
Plan Selection3 tiers visible+ Trial activation+ Add-ons visible
VerificationEmail OTPEmail OTP / Magic LinkEmail + SSO (Google/Microsoft)
AnalyticsBasic source tracking+ Referral code+ Partner attribution dashboard
CAPTCHA
RedirectsBasic OnboardingFull WizardFull Wizard + Role-based start page
EventStarterStandardPro
Signup CompleteEmailEmail + In-appEmail + In-app + Slack/Webhook
Verification PendingEmailEmail ReminderEmail + In-app reminder
Trial ExpiryEmailEmail + In-appMulti-channel (Email + Webhook)
Invite AcceptanceEmailEmailEmail + Slack/Webhook
Failed VerificationEmailEmailEmail + Alert to AdminHQ
Focus AreaFeaturePurpose
Secure account setupOTP / magic linkPrevent unauthorized access
Role-based associationInvitation flowMaintain correct access control
SaaS compliancePlan selection + trial restrictionEnforce licensing & revenue integrity
RecordkeepingSignup metadataEnables audit & partner attribution
Onboarding continuityWizard integrationSmooth flow into Step #3 setup
FeatureStarterStandardPro
Username + Password
OTP / MFAOptionalEnforced for Admin/Consultants
Magic Link✅ + SSO integration
Multi-Company AccessLimited (Invite only)✅ Full cross-company switcher
Role-Based Landing✅ Default✅ Configurable✅ + Custom shortcuts
Audit Logging✅ Basic✅ + Device tracking✅ + Geo/IP + anomaly detection
Session Duration12hConfigurableConfigurable + idle timeout alerts
AlertsEmailEmail + In-appMulti-channel + Webhook (Sentinel)
EventStarterStandardPro
Login SuccessOptional emailEmail + In-app
Login from New DeviceEmailEmail + Webhook
Failed Login AttemptsEmailEmail + LockoutEmail + Slack/Webhook
MFA Code ExpiryEmail reminderEmail + SMS (optional)
Focus AreaFeaturePurpose
Data SecurityMFA + Login Rate LimitPrevent unauthorized access
AccountabilityAudit LogsMaintain traceable access history
Ease of AccessMagic LinkSimplify employee login in field settings
Multi-Tenant GovernanceCompany SwitcherMaintain separation for consultants
SOC2 / ISO ReadinessLogged access eventsAudit-ready authentication layer
FeatureStarterStandardPro
Industry Mapping✅ Basic✅ + module suggestion✅ + AI-driven plan matching
Module Selection✅ Manual toggle✅ Auto + upsell✅ Auto + pricing & API sync
Program Coordinator✅ Required✅ Required + notify✅ Required + AI onboarding tasks
Role Customization✅ Rename roles✅ + full permission matrix
Site Limit1 siteUp to 5 sitesUnlimited
User UploadManualManual + CSVCSV + HRIS API integration
Invite Workflow✅ Email✅ + reminder✅ + Webhook to HR/Slack
Onboarding Summary✅ Manual confirm✅ Wizard auto-review✅ + AI suggestions & task auto-creation
EventStarterStandardPro
Coordinator AssignedEmailEmail + In-appEmail + In-app + Webhook
Onboarding Incomplete (3 days)EmailEmail ReminderEmail + Slack/Webhook
New Site AddedEmailEmail + In-app
Trial Expiry ReminderEmailEmail + In-appMulti-channel
Invite Pending (7 days)EmailEmailEmail + Webhook
OSHA / EHS StepTellus Onboarding ActionPurpose
Step 1 – Assign Program CoordinatorAssign Coordinator taskDefine accountability
Step 2 – Program AvailabilityCreate sites, locations, usersDefine scope of written program
Step 3 – SDS & Inventory ReadinessEnable relevant modulesPrepare for data collection
Continuous ImprovementOnboarding ChecklistVerify setup completeness
Business GrowthPlan Upsell IntegrationMonetization during onboarding
FeatureStarterStandardPro
Manual Entry
Barcode Scan✅ + offline sync
Label OCR✅ + AI hazard parsing
Bulk Upload✅ CSV✅ CSV + Invoice/AI import
SDS SearchWeb onlyWeb + Internal DBWeb + Internal + AI confidence
FIFRA IntegrationManual entryPPLS APIPPLS API + label auto-download
SDS ExtractionManual fieldsAuto hazard extractionFull section parsing
Review AlertsAnnual emailEmail + in-appMulti-channel + Sentinel
Audit Logs✅ + version diff viewer
EventStarterStandardPro
New Chemical AddedEmailEmail + In-appEmail + Webhook (Sentinel)
SDS MissingEmailEmail + In-appAll + Slack/Webhook
SDS Expiring (3 yrs)EmailEmail + In-appMulti-channel
Inventory Review DueEmailEmail + ReminderEmail + AI insights
FIFRA Label ExpiryEmailEmail + EPA sync alert
OSHA / EPA StepTellus FunctionPurpose
§1910.1200(g) SDS AvailabilitySDS Attachment & LibraryEnsure SDS accessible at each site
§1910.1200(f) Label ConsistencyLabel OCR + Hazard extractionMaintain label-SDS alignment
EPA FIFRA CompliancePPLS API integrationAuto-retrieve pesticide label data
OSHA Step 2 – Program AvailabilitySite/Location-level inventoryEnsure SDS accessible per location
Continuous MonitoringSentinel SDS alertsProactive compliance maintenance
FieldSourceSDS Section
Product IdentifierInventory RecordSection 1
Signal WordSDS ExtractSection 2
Hazard Statements (H-codes)SDS ExtractSection 2
Precautionary Statements (P-codes)SDS ExtractSection 2
PictogramsSDS Extract (AI Parsed)Section 2
Manufacturer ContactSDS ExtractSection 1
Date PrintedSystem
EventStandardPro
Label GeneratedEmail summaryEmail + Webhook
Label Batch PrintedEmailEmail + In-app
Missing Label Data (SDS incomplete)EmailEmail + Sentinel Alert
Printer Connection ErrorEmailEmail + Webhook
Audit Log ExportWebhook notification to Admin
FeatureStandardPro
GHS Label Generation
NFPA / HMIS Label
Auto-Fill from SDS
Label Size Templates✅ + Custom sizes
Company Logo✅ + Per-site branding
Batch Printing✅ + API-triggered batch print
Label Logs✅ + Export API
Audit Trail✅ + Versioned SDS linkage
Printer IntegrationPDF exportDirect print via API
AlertsEmailEmail + Webhook (Sentinel)
OSHA / EHS StepTellus Label FeaturePurpose
§1910.1200(f)(1) – Container LabelingGHS/NFPA/HMIS templatesEnsures every container properly labeled
§1910.1200(f)(9) – Secondary ContainersQuick print from systemSimplifies relabeling of workplace bottles
§1910.1200(g)(2) – ConsistencyAuto-sync with SDS dataEnsures label-SDS match
RecordkeepingLabel Audit LogProof of compliance during inspection
Branding & TraceabilityCompany logo / site infoProfessional presentation & site-level ownership
FeatureStarterStandardPro
Manual Plan Builder✅ Template Q&A✅ + AI analyzer✅ + Cross-site cloning
AI Draft Answers✅ + multi-source reasoning
Inline Editing✅ + tracked AI highlights
Coordinator Approval✅ (with e-signature)
Training & Quiz Generation✅ + auto-assign
Annual Review Alerts✅ Email✅ Email + In-app✅ + Slack/Webhook
Version Control✅ + diff history
Multi-Site Plan Sync✅ clone & sync
Export FormatsPDFPDF + DOCXPDF + DOCX + API
AI Plan Template Learning✅ adaptive templates
EventStarterStandardPro
Plan CreatedEmailEmail + In-appEmail + Slack/Webhook
Plan ApprovedEmailEmail + In-appEmail + Webhook
Annual Review DueEmailEmail + In-appMulti-channel
Plan PublishedEmailEmail + PDF copyEmail + PDF + Webhook
Training Auto-GeneratedEmailEmail + In-app task
OSHA StepTellus FunctionPrimary Output
Step 1 – Assign StaffStep 3.5Program Coordinator
Step 2 – Written ProgramStep 6HazCom Plan (PDF/DOCX)
Step 3 – Container LabelingStep 5GHS / NFPA Labels
Step 4 – SDS MaintenanceStep 4SDS Library
Step 5 – Inform & Train EmployeesStep 6.4.9 / Step 7Training Records
Step 6 – Evaluate & ReassessStep 6.5Version Logs + Review Reminders
FeatureStarterStandardPro
Manual Training Creation
AI Auto-Generated Training✅ + auto-assignment
AI Explainer Mode✅ + SDS contextual answers
Multi-Language Support✅ EN/ES✅ EN/ES✅ EN/ES + AI glossary
Certificates✅ + site branding
Retraining Triggers✅ + Sentinel automation
Dashboard & Reporting✅ Basic✅ + AI insights
LMS / API IntegrationOptional✅ Full API + webhook
Audit Trail✅ + version diff viewer
Annual Effectiveness ReviewManualAutomated reminderAI-evaluated summary
EventStarterStandardPro
New Training AssignedEmailEmail + In-appEmail + In-app + Slack/Webhook
Training ReminderEmailEmail + In-appMulti-channel
Training OverdueEmailEmail + Sentinel AlertEmail + Slack/Webhook
Training CompletedEmailEmail + CertificateEmail + Certificate + Webhook
Retraining RequiredEmailEmail + Auto-queue task
OSHA ReferenceTellus FeatureCompliance Purpose
§1910.1200(h)(1) – Training before exposureInitial training workflowEnsure employees trained before hazard exposure
Appendix B – Quick Guide to TrainingCourse & quiz creationCovers labels, SDS, hazards, protective measures
Step 6 – Evaluate & ReassessAnnual review & retrainingMaintain ongoing compliance
Language comprehension clauseMulti-language + AI explainerEnsure comprehension for all employees
Recordkeeping for inspectionsTraining logs & exportsProof of compliance and traceability
Output TypeDescription
Training CourseAuto or manually created HazCom & safety trainings
Quiz ResultsStored with score & timestamp
CertificateDownloadable PDF proof
Compliance LogCompany-wide audit trail for inspectors
DashboardManager view for tracking completion & compliance
OSHA StepTellus ModulePurpose
Step 6 – Evaluate & ReassessInsights Dashboards (8.1 – 8.7)Periodic review of plan, training, and chemical data
Step 4 – Maintain SDS8.3 Chemical Inventory DashboardEnsure SDS access and updates
Step 5 – Inform & Train8.4 Training DashboardMonitor training completion and retraining needs
Step 2 – Written Program8.5 HazCom Plan DashboardReview plan versions and approvals
Step 1 – Responsible Staff8.1 / 8.5 Program Coordinator insightsEnsure leadership visibility and accountability
OSHA StepDashboardCompliance Purpose
Step 6 – Evaluate & ReassessInsights & AI DashboardsContinuous program review
Step 4 – SDS ManagementChemical DashboardEnsure SDS accessibility and coverage
Step 5 – TrainingTraining DashboardMaintain and review employee training records
Step 2 – Written ProgramPlan DashboardMonitor plan versioning and review cycles
Step 1 – Program OwnershipHome DashboardProgram Coordinator visibility and accountability
OSHA StepTellus FeatureCompliance Purpose
Step 6 – Evaluate & ReassessContinuous MonitoringEnsures ongoing compliance checks
Step 5 – Inform & TrainTraining MonitorsDetects overdue training events
Step 4 – SDS MaintenanceSDS WatchersFlags missing or outdated SDS
Step 2 – Written ProgramPlan Health MonitorsKeeps HazCom plan updated
§1910.1200(e)(2)Escalation & Corrective ActionsEnsures accountability & follow-through
FeatureStarterStandardPro
Upload & Categorize✅ Manual upload✅ + bulk upload✅ + Drive/S3 integration
Version ControlBasic (V1/V2)Full w/ diff logFull + AI diff summary
SearchKeywordKeyword + filtersAI semantic search
Review WorkflowManualApprovals + remindersApprovals + AI review suggestions
AlertsEmailEmail + In-appAll + Slack/Webhook + SMS
AnalyticsBasic countsDashboard metricsAI document health digest
ExportsPDFPDF + CSVPDF + CSV + XLSX + API
SecurityRole read onlyRole + approvalsEncryption + access logs
OSHA/EHS RequirementTellus FeaturePurpose
§1910.1200(e)(1)(iii) – Written program availabilityCentral library storageEmployees can review HazCom Plan and SDS anytime
Record Retention (5 years recommended)Versioning + retentionMaintain historical records for audits
Contractor information sharingRole-based external accessProvide temporary read access to contractors
Periodic review of plans and SDSReminders + AI review triggersKeep plans and SDS up-to-date
Inspection / audit evidenceAccess logs + exportsDemonstrate control and traceability
TierChannelsExamples
StarterEmail“Visitor access approved,” “Contractor training overdue.”
StandardEmail + In-app“Access expiring soon,” “Training incomplete.”
ProEmail + In-app + Slack/Webhook/SMS“High-risk contractor not retrained,” “Expired insurance.”
FeatureStarterStandardPro
Contractor Database✅ Basic list✅ + company details✅ + insurance & certifications
Visitor Check-inManual entryQR / tablet kioskQR / kiosk + badge printing
Training AssignmentManualAuto per siteAuto + hazard-linked
Document ExchangeView-only SDSUpload + reviewUpload + AI review
AlertsEmailEmail + In-appAll + Slack/Webhook/SMS
AnalyticsBasic tableDashboard chartsAI contractor risk score
Access ControlCompany-levelSite-basedTime-restricted + audit trail
IntegrationsTraining/PlanFull integration + API/webhooks
OSHA / EHS RequirementTellus FeaturePurpose
§1910.1200(e)(2) – Informing other employers/contractorsShared SDS & HazCom PlansEnsure contractors are aware of hazards
Employee/Contractor communicationTraining + acknowledgmentProof of instruction before entry
Documentation of third-party safety dataDocument Center integrationRetain contractor-provided risk documents
Access control for visitorsQR/Badge + time-limited entryTrack and audit who accessed site
Ongoing complianceSentinel alerts + AI insightsDetect untrained or expired contractors
TierChannelsExamples
StarterEmail“Audit scheduled for tomorrow.” “Inspection overdue.”
StandardEmail + In-app“CAPA due soon.” “Audit report submitted.”
ProEmail + In-app + Slack/Webhook/SMS“High severity finding unresolved >7 days.” “Recurrent non-conformance detected.”
FeatureStarterStandardPro
Prebuilt Checklists✅ Basic OSHA✅ + Custom✅ + Custom + AI tagging
Schedule / AssignManualAuto-schedulingEvent-triggered (Sentinel)
Mobile Inspection✅ Offline sync✅ + AI photo detection
CAPABasicLinked to IncidentIQLinked + AI root cause assist
ReportsPDFPDF + CSVPDF + CSV + XLSX + API
AnalyticsBasicScore trendsCross-site + AI predictive
AlertsEmailEmail + In-appMulti-channel (Slack/Webhook/SMS)
RolesAdmin/Auditor+ Coordinator+ Multi-site dashboards
IntegrationInsights dashboardSentinel, Insights, IncidentIQ
OSHA / EHS RequirementTellus FeatureCompliance Purpose
§1910.1200(e)(1)(iv) – Program reviewScheduled auditsRegular HazCom evaluation
1904 RecordkeepingCAPA & FindingsLog of corrective actions
Training verificationLinked to Training (#7)Ensures program awareness
SDS & labeling checksChecklist libraryValidates field implementation
AccountabilitySign-offs & escalationEnsures oversight and closure
TierChannelExamples
StarterEmail“Plan trial ending,” “Storage limit reached.”
StandardEmail + In-app“Invoice due soon,” “User limit reached.”
ProEmail + In-app + Slack/Webhook“Auto-renew completed,” “API usage threshold exceeded.”
FeatureStarterStandardPro
Company Profile✅ Basic✅ Editable + Industry fields✅ + Regulatory IDs
User Management✅ Invite + Remove✅ Custom roles✅ Advanced permissions + MFA
Site Management1 siteUp to 5 sitesUnlimited sites
Billing & PaymentsManual billingStripe checkoutACH + Invoicing + API
Usage TrackingBasicReal-time dashboardReal-time + Auto-upgrade
LogsBasicSystem actionsSystem + Security + API
BrandingCustom email brandingWhite-label + consultant portal
IntegrationsStripeStripe + Webhooks + SSO
NotificationsEmailEmail + In-appAll + Slack/Webhook/SMS
Focus AreaTellus FeaturePurpose
SaaS GovernanceSubscription & Plan limitsEnsure fair use & revenue protection
AccountabilityAudit LogsTrace changes for internal or SOC2 audits
User Data SecurityMFA + Security LogsReduce access risks
TransparencyUsage DashboardCustomer self-service visibility
Partner EcosystemMulti-client portalEnables consultant revenue stream
Legal ReadinessInvoicing + LogsCompliance with finance & recordkeeping norms
User TypeExample QueryCopilot Response
Employee“What should I do if I spill bleach?”Step-by-step instructions from SDS Section 6.
Site Manager“Which chemicals at Site B are missing SDS?”Table with missing entries and upload links.
Program Coordinator“When was our last HazCom Plan updated?”Displays plan date, version, and reviewer.
EHS Consultant (Pro)“Summarize high-risk sites by compliance score.”Auto-generated summary with color-coded table.
FeatureStarterStandardPro
Conversational Search✅ Basic SDS/Plan search✅ + context + bilingual✅ + full RAG + multi-source
Role-Based Access
Multi-languageEN↔ESEN↔ES + AI glossary
Simplified Explanations✅ + interactive training mode
Workflow ActionsLimited (Training)Full cross-module automation
Generative Docs✅ Plans, SDS summaries, CAPA, emails
Vector IndexSharedCompany scopedPer-company embeddings
AlertsEmailEmail + In-app + Webhook
Audit Logs✅ + LLM usage analytics
OSHA / EHS RequirementTellus Copilot CapabilityPurpose
§1910.1200(h)(1) – Employee info & trainingSimplified SDS explanationsEnsures understandable communication
§1910.1200(e)(1)(iv) – Review & reassessmentSummarization & cross-module insightsSupports program evaluation
Training comprehensionQuiz guidanceImproves retention of hazard knowledge
RecordkeepingConversation logsProof of training engagement
AccessibilityMulti-language supportEnables bilingual compliance
TierChannelExample Alerts
StarterEmail“Container nearing 90-day limit.”
StandardEmail + In-app“Manifest approval pending,” “Expired transporter permit.”
ProEmail + In-app + Slack/Webhook/SMS“AI predicts overflow in 5 days,” “Carbon footprint increased this month.”
FeatureStarterStandardPro
Waste Profiles✅ Manual✅ + auto-suggest codes✅ + AI hazard validation
Container Tracking✅ Manual✅ + QR/barcode✅ + predictive fill alerts
ManifestsManual entryDigital formE-sign + transport database
AlertsEmailEmail + In-appMulti-channel + predictive
Sustainability MetricsBasic summaryWaste diversionCarbon & ESG dashboards
ReportingPDF/CSVEPA/State exportsAPI + ESG exports
AI InsightsPredictive & optimization suggestions
IntegrationsSentinel (#9) + Insights (#8)
Regulation / StandardTellus FeaturePurpose
EPA RCRA Subtitle CWaste profiles, accumulation trackingHazardous waste identification & compliance
DOT 49 CFR 172–173Manifest generationProper labeling, shipping documentation
State-specific waste rulesReporting exportsLocal compliance integration
EPA Biennial ReportingWaste summariesStreamlined data aggregation
ESG / GRI / SASB frameworksSustainability dashboardsLong-term corporate reporting readiness
TierChannelsExample Alerts
StarterEmail“API key expired.” “Request limit exceeded.”
StandardEmail + In-app“Webhook delivery failed.” “Integration offline.”
ProEmail + In-app + Slack/Webhook“New partner integration added.” “Security anomaly detected.”
FeatureStarterStandardPro
REST API✅ Basic✅ + SDS, Plan, Training✅ + all modules
GraphQL API✅ + partner access
Webhooks✅ limited events✅ + all events + replay
Automation Templatesn8n basicn8n + Zapier + Make connectors
Partner Dashboard✅ Multi-client & analytics
Regulatory API Connectors✅ e-Manifest, EPA, OSHA
Audit Logging✅ + anomaly detection
Rate Limits1k/day10k/day100k/day
AlertsEmailEmail + In-appMulti-channel + Webhook
SecurityBasic API keyOAuth2 scopesSSO + signed requests
Focus AreaTellus Connect CapabilityPurpose
AutomationWebhooks + n8n/ZapierReduce manual workflows
ExtensibilityREST/GraphQL APIsIntegrate with HRIS, LMS, CRM
AccountabilityAPI audit logsTraceability for IT/SOC2
Partner EcosystemConsultant APIsScale Tellus through consultants
Regulatory ReadinessEPA/OSHA API hooksEnable future compliance filings
TierSLA (Initial Response)Escalation PathChannels
Starter48 hrsTellus Email SupportEmail
Standard24 hrsTellus Support QueueEmail + In-app
Pro4–8 hrsDedicated Rep → Partner → Tellus HQEmail + In-app + Chat + Webhook
EventStarterStandardPro
New TicketEmailEmail + In-appEmail + In-app + Slack/Webhook
Ticket AssignedEmailEmail + In-appAll + SMS optional
SLA BreachEmailAll + escalation webhook
Resolution SummaryEmailEmailEmail + In-app + PDF transcript
Knowledge Base UpdatesWeekly digestReal-time push + RSS
FeatureStarterStandardPro
Ticketing✅ Basic✅ + category routing✅ + AI triage & escalation
AI Support Assistant✅ FAQ assist✅ full LLM response generation
Knowledge Base✅ + filters✅ + semantic AI search
SLA48 hrs24 hrs4–8 hrs with escalation
ChannelsEmailEmail + In-appEmail + In-app + Chat + Webhook
ReportingBasicTicket statsFull dashboard + AI insights
Partner Access✅ client ticket queue
Branding✅ co-branded support center
ObjectiveSupportIQ FeaturePurpose
OSHA 1910.1200(h)(3)(iv) – “Where to get more information”Knowledge Base & Help CenterGives employees ongoing access to information
Continuous ImprovementAI InsightsIdentifies recurring user issues
Customer SuccessPartner Queues + SLA ReportingEnables proactive support management
Platform RetentionSelf-service + human escalationIncreases customer satisfaction & reduces churn
Audit ReadinessLogged communications & attachmentsMaintains traceable support trail