Lone worker protection with a named person at the other end

Who started it, when, how long they expected to be, what they said they were doing, the job if there is one, and the responder pinned to it at the start. Each check-in is stamped as it happens, and a session runs active then ended, or active then alarm then resolved.

• Expected duration is picked from half an hour up to twelve hours. The check-in interval is every fifteen minutes up to every two hours, or none, in which case only the overrun raises the alarm.
• The responder is fixed when the session starts. Changing the responder list later doesn’t change who a running session escalates to.
• There is no rota. The alarm goes to the first active responder you set up, so the person named on the worker’s screen is the person who gets it.
• One session per worker at a time. Starting another while one is active or alarmed is refused.

Three things. A check-in that isn’t made by the time it’s due. A session that runs more than ten minutes past the finish the worker gave. And the SOS button, which raises it the moment it’s pressed.

NoteA position leaves the phone only when SOS is pressed. A missed check-in or an overrun raises the alarm without one, so the responder starts from what the worker said they were doing, the job it was on, and a phone call. Neither app streams a worker’s location during a session.

One named person inside your own business, by email, and nobody else. Not the police, not an ambulance, not an alarm receiving centre. Their name and phone number are on the worker’s screen before a session starts, so the worker knows exactly who is coming and who isn’t.

• An administrator sets responders up in the web app with a name, a phone number and an email address. The phone number is required, because the worker is told to ring it.
• The email names the worker, what they said they were doing and when they expected to finish, and says their position has been released to the responder in Estimark.
• Every attempt to deliver it is recorded as queued, sent or failed, with the reason. A failed send is retried three times, two minutes apart.
• If it still hasn’t gone, Estimark’s own operators get a notice so somebody can ring you. It carries your company name, the session and the time, and never the worker’s name or where they are.

NoteAn alert is an email to a person who may not be looking at their phone. The worker’s screen says the same and tells them to ring the responder themselves as well. A police-response alarm receiving centre in the UK needs BS 8484 accreditation and a police URN, and Estimark holds neither.

No. A position sent during a lone-working session goes into its own store, apart from every other location record. It isn’t on any map or management screen, and the alarm list shows that an alarm happened, what kind, the note and who it went to, with no coordinates on it.

• The released position opens only for the responder pinned to that session and for the worker, and only once an alarm has been raised. Holding the permission to take alarms isn’t enough on its own.
• A session that ends without an alarm is deleted within 72 hours, position and all.
• A session that raised one is kept: when, what kind, every delivery attempt and its result, who resolved it and any note they left. That is the record an accident investigation asks for.

On the phone for the worker, on the web for the office. In the iPhone app it’s Settings, then Lone working. In the Android app it’s Lone working on the Browse tab, or the same row under Settings. Both open the same screen: pick a duration, pick a check-in interval, say what you’re doing, start. The web app has no worker side; what it has is Lone Worker Alarms in the sidebar, where responders are set up and alarms are read and resolved.

• The screen shows who will be alerted before the session starts, in the same words the responder is given.
• A running session shows the expected finish, the next check-in due, a check-in button and the SOS button. After SOS, the screen keeps the exact delivery result and a ring-them-now link to the responder’s number.
• Only the responder closes an alarm, and can leave a note on it. The worker can’t end a session that raised one, because it’s an incident record by then.