Safety Technology and Compliance
Safety and Compliance Tradition.
Modern Engineering.
Custom-built HSE software — built around your operation, trained to your safety team, evolved as your company evolves.
The problem
Small operators are stuck between two bad options.
Powerful tools designed for 200-person enterprises. Long implementation timelines. Generic forms. Pricing that punishes you for adding field staff. And the actual HSE work is still on your plate.
Paper JSAs in a binder. Jotform for field reports. An Excel cert tracker. A consultant who shows up quarterly. Cheap until OSHA shows up — or until you lose a contract over compliance gaps.
The solution
Evolve your safety program as your company evolves.
Build
A custom HSE suite built around your operation — your sites, your fleet, your forms, your operator-specific compliance. Not a template you adapt to.
- Custom JSAs & permits
- OSHA 300 / 300A / 301 ready
- Mobile field forms
- Your branding, your domain
Train
We train your safety lead to operate the suite end-to-end. They run the program. You don't depend on an outside consultant to know what's in your own system.
- Supervisor onboarding
- Field-team walkthroughs
- Admin training
- Documentation library
Evolve
New sites, new clients, new regulations. We change your toolset to match — typically 2–3 days. Enterprise vendors take 6+ weeks for the same request.
- Ongoing customization
- New form & workflow builds
- Technical advisory
Built around your operation
Customization isn't an upgrade. It's the default.
F&H STAC isn't an off-the-shelf product you adapt to your operation. It's a suite we build around your operation — your sites, your fleet, your forms, your operator-specific compliance burdens. Same software foundation. Different build for every client.
How a custom build happens
Walk your operation
Site visits, fleet review, current paperwork. We see what you actually do.
Design to your needs
Your JSAs, your permits, your checklists, your branding, your rule sets.
2–3 weeks to live
Configured on your custom domain. Crew imported, sites loaded, forms wired.
Change when you change
New site, new client, new reg? Add it. No procurement cycle, no ticket queue.
Why small + custom beats large + generic
The honest comparison.
| KPA Flex · Vector EHS · DATS | F&H STAC | |
|---|---|---|
| Forms & workflows | Configurable templates from a generic library. You adapt your process to theirs. | Built from your JSAs, permits, audits. The tool fits how you already work. |
| Time to live | 3–6 month enterprise implementation. Multiple kickoff calls, IT involvement. | 2–3 weeks from contract to crew trained. One person, one decision, one build. |
| Changes after go-live | Submit a ticket. Wait 6+ weeks for next sprint. Pay for "professional services" hours. | Text or call. Most changes live in 2–3 days. Included in retainer. |
| Who knows your operation | A customer success rep managing 40 accounts. Never been on a Bakken pad. | Bryant. 7+ years on ExxonMobil, Hess, Continental, Whiting, Marathon, ConocoPhillips sites. |
| Pricing model | Per-seat licensing. More crew = more cost. More sites = more cost. Add-ons cost extra. | Flat annual + monthly retainer. Crew and sites don't change the price. |
Large EHS vendors build for the median customer — a 200-person company in an industry they don't specialize in. That's why their forms feel generic and their reps don't know what a heater rig-in looks like. F&H STAC builds for you: one operation, one suite, direct access to the person who built it. Smaller isn't a limitation. It's why the work is better.
An example build · Bakken operator
What a finished custom suite looks like.
Below: a representative example of a custom F&H STAC build for a small Bakken operator. Your build will look different — your branding, your forms, your dashboards, your KPIs. This is one example of what's possible, not a product menu. (Example data shown.)
Where your operation stands today.
Compliance signals by site, by day
Injury and Illness Incident Report
Cottonwood 3-30 Pad
PR-103H · McKenzie County, North Dakota
3 of 19 crew · 4 courses shown
| H2S | OSHA 10 | 1st Aid | Confined | |
|---|---|---|---|---|
| Mendoza, J. HSE Mgr | ✓ | ✓ | ✓ | ✓ |
| Solomon, K. Sup A | ✓ | ✓ | ! | ✓ |
| Reyes, M. Sup B | ✓ | ✓ | ✓ | ✗ |
How we fit your operation
From contract to live in 2–3 weeks.
Discovery
Remote discovery: your operation, your forms, your compliance needs. Scope confirmation.
Configuration
Suite built to your operation. Branding, crew imported, sites loaded, JSAs configured.
Training
Train your safety lead end-to-end. Supervisor onboarding. Field-team walkthroughs.
Evolve
Customization retainer kicks in. New sites, clients, regulations — updates in 2–3 days.
Pricing at a glance
Three components. One bundled price.
Custom HSE suite built around your operation. Discovery, configuration, training, and deployment to your domain. 50% at signing, 50% at go-live.
Hosted suite, infrastructure, security, updates. Paid annually upfront.
Ongoing customization, new form builds, technical advisory. Direct access to the developer. Kept apprised of newest features. 12-month minimum.
About what you'd pay for KPA Flex software alone — but built around your operation, with the developer on retainer to evolve it as you grow.
Modern architecture
Installs in 15 seconds. Works offline. Updates silently.
F&H STAC is a Progressive Web App (PWA) — the same modern architecture used by Starbucks, Spotify, BMW, Uber, and the Washington Post. It installs to any phone's home screen straight from a text message. No App Store, no IT approval, no waiting weeks for vendor updates.
| KPA Flex · DATS · Legacy EHS | F&H STAC (PWA) | |
|---|---|---|
| Install method | App Store / Google Play. Search, download, account creation, permissions — 4–6 minutes per crew member. | Text a URL → tap "Add to Home Screen" → done. ~15 seconds. |
| Update cycle | Vendor pushes update → Apple/Google review (days–weeks) → users prompted → some never do. | Push to server → next launch on every crew phone has the new version. No prompts, no skipped versions. |
| IT department | Requires MDM profiles, sideload policies, version approvals. Procurement & IT involvement. | Installs the same way as Outlook Web or Salesforce. No IT approval needed. |
| Offline in the field | Limited offline mode. Many features require connection. | Full offline. Complete JSAs, take photos, log incidents on a heater pad with no signal. Auto-syncs back in service. |
| Per-client branding | One-size-fits-all app. Vendor's logo, colors, forms. Custom variants impossible inside the App Store. | Your logo, your color scheme, your operator-specific rule sets, your subdomain. Deployed in days. |
| Data ownership | App Store account ties data to vendor's identity layer. Migration off = manual export + start over. | Full data export to CSV/JSON anytime, no fees. Written into contract. |
No App Store badge. Yes to everything else. We could have built native iOS and Android apps to put an "App Store" logo in our marketing. We didn't — because that means slower updates, no per-client customization, IT friction, longer install times, and a higher price to cover the overhead. F&H STAC delivers custom-branded, operator-specific tools at this price point because we chose modern architecture.
Data security & infrastructure
Your records, protected by infrastructure that protects theirs.
HSE data is sensitive — employee records, incident reports, contractor info. F&H STAC runs on Supabase, the same SOC 2 Type 2–certified, HIPAA-compliant infrastructure used by Mozilla, GitHub, PwC, Johnson & Johnson, and 1Password.
As a firm focused on security, we've been happy to work with Row Level Security Policies to secure database operations.
— Matthieu, Tech Lead, PwC FranceIndustry-relevant references
Phoenix Energy
Completed critical infrastructure migration in six months on Supabase — same backend, same operational complexity.
supabase.com/customers/phoenix-energyEpsilon3
Digitized paper-based procedures in the space industry — the closest analog to replacing paper JSAs and OSHA forms.
supabase.com/customers/epsilon3eXp Realty
Cut SaaS costs by switching to Supabase-backed tools — proof that enterprises are migrating off legacy platforms.
supabase.com/customers/exprealtyYour data, safeguarded
Encryption & backups
- TLS 1.2+ in transit · AES-256 at rest
- Daily backups · 7-day retention
- Point-in-Time Recovery available
- Tested restore procedures
Access & control
- Role-based access controls
- Tenant isolation per client
- Full audit trail of all changes
- Export to CSV/JSON anytime
Process commitments
- Written DPA at signing
- 72-hour incident notification
- Annual deployment review
- Data deletion within 30 days of termination
Verify independently: supabase.com/customers · supabase.com/enterprise · supabase.com/security
Ready to talk?
Schedule a free 30-minute consult.
We'll talk through your operation, walk through the suite live, and give you a fixed proposal. No commitment. No sales pressure.
Bryant Price — Owner / HSE Consultant · Williston, ND