Open source. Done for you deployment.

Your safety program,
live in your own app.

Built and run by someone who has actually done the audits. You own the accounts, the keys, and the data. I stand it up, build your program inside it, and keep you audit ready every month.

Book a free call See what it costs

You own it. I run it.

Most safety software rents you access to your own records.

This one does not. The app is open source and free. You open your own Vercel and Supabase accounts, the app runs on your infrastructure under your keys, and I get invited in to build it and look after it. The day you decide you no longer need me is the day nothing breaks.

Your Supabase and Vercel accounts

The hosting and the database are opened in your name, on your billing. I get invited in as a member, the same as any staff member, and you can revoke that on any day you like.

Your API keys, your usage

Every key belongs to you and every bill comes to you directly. Nothing is resold to you with a margin on top, and nothing routes through an account you cannot see.

Your data stays yours

Your workers, your forms, your evidence, and your audit history sit in a database you own. There is no export request to file and nobody to ask for permission.

No lock in, ever

The app is open source and you keep your own copy of it. If you stop paying me tomorrow, the app keeps running and your crew never notices.

What it costs

One build to get you audit ready. One monthly to keep you there.

The software is free. What you are paying for is the program built inside it and the person who keeps it current. No per-user fees, no seat counts. Every company starts from a different place, some with a full program, some with a binder, some with nothing, so we review where you are and give you a firm price before any work begins.

The build

One time. Required. This is the foundation.

Audit ready

A working, audit ready instance with your safety program already inside it. Not a blank shell you have to figure out.

Your own app instance stood up: hosting, domain, secure login, keys wired in
Full safety program built in: policies, procedures, forms, hazard assessments
Your existing documents imported and your crew loaded
Hands on training for your team on the app
Delivered audit ready, tested, and working
Tailored to your certifying partner and your trade

One time build

Priced to your setup

A firm number after a short call, before any work starts.

Get a firm number

Every company starts from a different place. We look at your crew size and how much program you already have, then give you a solid, firm price before any work starts. You approve the number before we continue.

Keep it running

Pick one. Starts after the build. Cancel anytime.

Where most start

Managed

Flat monthly, set to your size

For a single company that wants to stay current without thinking about it.

Program and forms kept current as ISN, Avetta, ComplyWorks, and OHS rules change
App updates and security patches applied to your instance
Automatic backups
Support line: it breaks, I fix it
Up to 1 hour of small changes each month included

Book a call

Multi location

Managed Plus

Flat monthly, set to your size

For larger crews, multiple locations, or heavier month to month change.

Everything in Managed
Larger change allowance: up to 3 hours each month
Priority support
Quarterly program review before audit season
Multi location and higher worker counts supported

Book a call

What the monthly does not cover

The monthly keeps you current and running. It does not include custom builds. A new module, a custom feature, an outside integration, or building a second company's program is quoted separately, either hourly or as a flat project price. You always see the number before I start. No surprise invoices.

Or do it yourself

Free means free. Here is the source code.

If you have someone technical and the time, take the repo, point it at your own Supabase project, deploy it to your own Vercel account, and run the whole thing without ever talking to me. That is not a trial and it does not expire. It is the same app I install for paying clients.

What you will not get for free is the part that takes the expertise: a safety program written for your trade, your documents imported, your evidence mapped to the way your certifying partner actually scores the audit, and someone watching it every month. That is what the build and the monthly are for.

Get the code on GitHub Download ZIP

$ git clone https://github.com/Yeti567/cor-pathways.git

AGPL-3.0. Clone it, read it, run it. Setup is in the README and takes about twenty minutes.

Licensed AGPL-3.0. Free to run for your own company, forever. Read every line before it touches your data.
Vercel and Supabase. Both have a free tier that a small crew fits inside. You pay them directly when you outgrow it.
Bring your own keys. Supabase is all you need to start. PDF form import, email, and ELD each switch on when you add that key.
Start free, call me later. Self-host it now and hire me to build the program on top of it whenever you are ready. Nothing gets migrated.

Who it is for

One app, whether you fix it, build it, or haul it.

Trades, contractors, and carriers run different work, but they all answer to a safety program and, more and more, a COR audit. Cor Pathways fits each one, and the COR module adapts to the certifying partner you actually use.

HVAC and mechanical trades

Dispatch service work orders, track customer equipment and its history, run job checklists, and capture time, travel, and materials from the field. Your COR safety program rides along on the same app.

Construction and contractors

Manage projects, daily field work, contractor and subtrade pre-qualification, site inspections, and field-level hazard assessments. Built for general contractors and trades that outgrew paper but do not want enterprise bloat.

Trucking and carriers

Full NSC compliance: Hours of Service, driver qualification files, daily trip inspections, vehicle maintenance and CVIP, plus live ELD data flowing in from Motive and more.

Built offline-first, not bolted on later

Most field-ops apps need a connection to load the form. Cor Pathways stores everything in IndexedDB, signs and submits offline, and quietly catches up when the truck rolls back into town. Workers stop saying 'I'll do it when I get back to the office.'

Built by someone who has done the audits

This is not a general purpose form builder with a safety skin on it. The COR module is shaped the way an auditor actually scores the instrument, because the person who built it has sat on both sides of that table.

An app you install, not just a website

Add Cor Pathways to a phone's home screen and it runs in standalone mode like a native app. Updates reach every device within 30 minutes, no App Store review cycle, no waiting for IT to push anything.

Open source, so the receipts are public

The whole app is on GitHub under the AGPL. Your IT person can read every line before it touches your data, and you are never negotiating with a vendor who knows you cannot leave.

Every capability

One app, all the modules, nothing behind a tier.

There is no premium edition, because there is nothing to upsell you. Every install gets the entire surface, whether I built it for you or you deployed it yourself on a Sunday.

Forms

Replace every clipboard with a form that fills itself in

A section-based builder, 20+ field types, and a PDF importer that turns the form you already use into a live digital one.

Drag-and-drop form builder

Sections, repeatable sections, required fields, conditional logic. Mobile first, then tablet, then desktop.

20+ field types

Pass/Fail/NA, dropdowns linked to managed lists, dates, times, numbers, signatures, photos, GPS, PDFs, worker pickers, equipment pickers, and more.

PDF-to-form importer

Upload a blank PDF; Google Document AI plus Gemini auto-detect the fields and the form is built for you to refine.

Managed lists

Reusable, company-wide dropdown lists (Vehicle Types, Hazards, Risk Severity, Days of Week, anything you want). Edit once, every form updates.

Standard vs Private forms

Choose who can see signed copies. Private forms are confined to the device or admin panel.

Use as label, flag, evidence photo

Per-field tweaks: mark a field as the form's label, allow flagging for follow-up, capture an evidence photo right on the question.

Work in the field

A worker app that works in the dirt

Built offline-first. Submissions, photos, and signatures keep flowing through dead zones and shaky LTE.

Fully offline

Open the app with no signal, fill the form, snap photos, sign it. Everything queues locally in IndexedDB.

Silent background sync

When connectivity returns, the queue flushes automatically. No 'press to sync,' no lost submissions.

Camera + signature capture

Take photos and capture signatures with no network round-trip. Both are stored locally and uploaded on reconnect.

Time cards

Clock in and clock out by location, with notes. Tracks hours by worker and project.

Assigned forms feed

Workers see exactly what's assigned to them, sorted by due date.

Worker ticket upload

Photograph a First Aid or H2S card. OCR pulls the expiry date and files it against the worker.

COR

COR audit readiness, mapped to your certifying partner

Pick your certifying partner and the whole module organizes your evidence the way that partner's auditor scores it.

Choose your certifying partner

AMTA, ACSA, AASP, or IHSA COR 2020. The module renumbers and renames to that partner's audit, so what you see on screen matches the instrument the auditor uses.

Evidence mapped to the elements

Documents, forms, and live app data are tagged to the right audit element, with a readiness percentage and the exact gaps left to close.

Question-by-question crosswalk

Every audit question paired with the document that answers it, the verification method, and where that evidence lives.

Auditor package in one click

Export a print-ready package that walks the auditor through each element and its supporting evidence.

Policy expiry tracking

Upload a policy, tag its COR section, set its expiry date. The app reminds the right person before it lapses.

Built on a real program

Hazard assessments, inspections, incidents, corrective actions, orientation, and training records that feed the audit as you work.

Field service & projects

Run the jobs, not just the safety binder

Service work orders, customer equipment, job checklists, and time and materials, for trades and contractors who do the work and own the safety program.

Service work orders

Dispatch, track, and sign off jobs. Add the materials and equipment used, capture time and travel, attach photos, all from the field.

Customer equipment history

Every unit you service gets a file: make, model, location, and the full history of work performed on it.

Job checklists

Reusable, trade-specific checklists workers complete on site, tied to the work order and stored as evidence.

Contractor and subtrade management

Pre-qualify, orient, and monitor the contractors and subtrades on your sites, with the records the COR audit asks for.

Time, travel, and materials

Workers log hours, travel, and materials in the field. Pricing, costing, and invoicing stay on the admin side.

Equipment follow-ups

A failed check or a deficiency on a unit becomes a tracked follow-up routed to the right person.

Automation

Workflows that route the work, not your time

Forms trigger forms. Failures spawn corrective actions. Schedules fire reminders. You set it once.

Form chains with branching

Completing a First Aid form can route to a WSIB form, an Incident Report, and a Ministry of Labour form based on the answers given.

Flag-and-assign loop

Flag a failed inspection item, attach a photo, assign it to a worker. The corrective action lives on with its own lifecycle: open → assigned → in progress → completed → signed off.

Schedules with reminders

Monthly site inspections, weekly toolbox talks, biweekly time cards. The system reminds the right person and flags overdue work.

Auto-Share

Completed forms email themselves to the right recipients automatically, per location or all locations.

Visibility

The analytics layer, included, because there is nothing to upsell you

A live monitor of submitted forms, full reports, and an analytics layer that surfaces trends across every form, location, and worker.

Live Monitor

Submitted forms stream in, grouped by day, with signature counts and date-range filters. The dashboard your owner refreshes all day.

Reports

Filter, group, and export submission data. Generate the audit packet without copying anything by hand.

Analytics

Field-level analytics across every form flagged for analytics. Watch trends, hot spots, repeat failures, and worker performance over time.

Incidents

A focused view of incident submissions, who reported them, who is following up, and what is still open.

Corrective Actions register

Every flag and follow-up tracked in one place, with status, assignee, attached photos, and sign-off history.

Equipment + Resources

Run the trucks, tools, and documents from the same place

Equipment files with meter readings, maintenance, and scheduled service. A resource library with document control numbers and revision history.

Equipment files

Per-unit pages with meter history, maintenance log, scheduled services, attached documents, and every form ever submitted against the unit.

Scheduled service due

Service intervals by date OR by meter. Overdue services surface automatically.

Resource library

Sectioned, reorderable document repository, manuals, signed policies, SDS, toolbox talks. Viewable in the worker app.

Document Control Numbers

Optional. Every document and form gets a DCN with a two-digit revision and an optional year segment. Full revision register included.

People + Permissions

Built for industrial orgs, not five-person startups

Workers, supervisors, managers, admins, super admins, and visitors, each scoped to the projects they should see.

Workers + Locations

A master worker grid, location/project pages with visibility rules, and reach assignments that scope users to the projects they touch.

Certifications + Tickets

Per-worker certification grid with expiry tracking, image attachments, and a company-level certification types library.

Custom Permission Profiles

Build profiles that match your org chart. Power tiers set the ceiling; profiles tune what users can actually do.

Visitor sign-in

Replace the paper sign-in sheet. Ministry inspectors, auditors, suppliers, captured with reason and time, available as a live roster.

Full admin audit trail

Every administrative action is logged and visible to your Super Admin, including mine. You can see everything I do in your instance.

Platform

Modern infrastructure under the hood. You see one calm app.

The stack is picked so your IT team does not have to. Supabase Postgres with row-level security. A PWA that installs on every device. A service worker that ships new versions to every phone within 30 minutes. Data isolation enforced at the database level, not just the app.

Installable as a PWA on iPhone, Android, and desktop.
Automatic version refresh across every device every 30 minutes.
Data isolation enforced at the database, not in app code.
Email login with optional SSO.
Custom print headers for completed forms with logo + company info.
PDF-to-form import using Google Document AI + Gemini.
Reach-based access, workers see only their assigned projects.
Multi-location, multi-project, multi-form workflows.

Book a free call.

Tell me your trade, your crew size, and which portals your clients use. You walk away with a firm setup number and the right monthly tier. No obligation.

Book the call Call 780-832-5158

Or speak to our safety advisor

Ken Rentergem

Senior Safety Consultant

Certified AMTA COR Auditor

403-866-9517

Your safety program, live in your own app.