SystemShip Management & Maritime Compliance

Safety Management System Document Control

Document control for the safety management system shipping companies keep aboard: one change mapped to every procedure, form, ship and crew member it touches, closed only when each person has acknowledged it and each master has confirmed the old copy removed.

See one SMS change mapped, redlined and challenged ↓
Watch with transcript →
The problem

A change is real only when the old copy has left the engine control room

A rule, a flag circular or an audit finding reaches the HSQE mailbox and goes into a change register. Someone searches the SMS for the words they expect, and checklists worded around the cargo gear register never match.

The revision is edited in a word processor with its reasons left in email, reviewed by email and approved on a signature sheet. Masters print, brief, sign and scan; crew on leave and ships in drydock fall through, a printed old revision stays in the engine control room file, and crew answer questions from whichever copy is nearest.

Built forHSQE managersDesignated persons ashoreTechnical superintendentsMasters

The Problem Today

A rule change or audit finding has to reach every procedure, form, ship and crew member, and the trail is kept by hand.

4.5%
of Paris MoU deficiencies in 2025 were ISM-related published

Kept by hand ashore

  • Manuals
  • Checklists
  • Masters
  • Signatures
  • Checklists a search missesLists that say cargo gear never match the words searched
  • Old revisions left aboardPrinted copies linger in engine room files

The Solution

  1. Mapped as a rippleAgents find each procedure, form, ship and person a change touches
  2. Each change citedRevisions drafted change by change, each tied to its source
  3. Read as an auditor wouldA challenger finds missed checklists and a slip in a draft the agents wrote
  4. Signed aboard, ship by shipCrew acknowledge the notice; masters confirm old copies removed

Built-in controls

  • Approval rests with the designated person ashore
  • Remarks from ships go to a named reader
  • Crew are answered from the revision in force aboard

What You Get

The fleet moves to the new revision together, with a trail an auditor can follow.

  • Misses found before auditChecklists the word search skipped, raised by the challenger
  • Drydock crews handled on purposeRollout options rehearsed, each deferral confirmed
  • Send-backs kept as rulesA repeated ruling, applied once the DPA approves
Features

Safety management system shipping software, from audit finding to crew answer

HSQE managers, technical superintendents and the DPA work through them to carry one change through the SMS manual and the fleet. The screens follow a crane rule across a bulk fleet.

demoThe manager, its fleet, the crew, documents and numbers on screen are sample data.

  1. 01Change ripple

    One SMS change mapped as rings of procedures, forms, ships and people aboard

    • Each place a change lands, on one screen. The HSQE manager sees the procedures, forms, ships and people a rule or finding touches before drafting a word.
    • Rings that fill as work is approved and acknowledged. Progress reads from the center out, so a gap on the ships ring is a master who has not confirmed the old copy removed.
    • Each agent's step, source and confidence beside the map. The HSQE manager sees what each agent read and how sure it was before relying on its work.
  2. 02Impact search

    Impact search across the SMS manual by equipment, then by ship and crew

    • Manuals, forms and checklists found by subject. The search reads for the equipment and the step, so a change reaches documents filed under other headings.
    • A confidence beside each finding. The HSQE manager sees which finds are less certain and where to look twice before any drafting starts.
  3. 03Auditor's read

    Draft revisions read as a flag or class ISM auditor would, before signing

    • Points written with the question the auditor would ask. The HSQE manager meets likely ISM audit findings while the revision can still change.
    • Drafts by the agents held to the same test. A step dropped from a drafted section is caught and restored before any signature.
    • Points for people sent by name. Each decision the agents may not take reaches the person who owns it: the DPA, the HSQE manager or the superintendent.
  4. 04Redlines

    Each revision redlined change by change, with a source on each change

    • Deleted and inserted text on the company's own page. Reviewers read the revision as it will look aboard, header block included.
    • A source under each change. The reason for a change travels with it, so nobody hunts through email during an audit.
  5. 05Maker request

    Current manual and test intervals asked of the equipment maker in fixed fields

    • Fixed fields set against what is on file. The value on file sits beside each question, so the superintendent sees which intervals rest on an old manual revision.
    • Draft changed only through the fields. Only an answer in a fixed field or an attached extract can change the procedure; free text from the maker goes to a person.
    • Open until the maker answers. The request shows sent and waiting with its due date, and the sections that rest on it wait with it.
  6. 06Technical review

    Technical review held until the maker's answer reaches the draft

    • Review held while the maker's answer is open. A section that rests on the maker's manual cannot pass technical review while its test interval is still a question.
    • Sign-off chain with each reader's progress. Technical review, preparer and approver show who has read how much of the package before anyone signs.
    • Planned maintenance point for the superintendent. Ships already past their renewal survey are listed beside the draft, so the superintendent books their first annual crane examinations in planned maintenance.
  7. 07Crew question

    Crew questions answered only from the revision in force on that ship

    • Answers cite section and revision. A crew member follows the procedure that applies aboard today, never a draft or one the ship has not yet received.
    • Equipment calls left to named people. Asked whether a crane may be used, the assistant quotes the procedure and names the master and the superintendent.

HSQE manager, DPA, superintendent and master on one amendment

Each signs or confirms a different step, and the trail shows who did which.

HSQE managers

Own the change register, prepare revisions and chase acknowledgments across the fleet

  • The places a change lands, mapped by agents
  • Checklists a search misses, found before audit
  • Acknowledgments counted per person, not by scan
Designated persons ashore

Approve SMS revisions as the authorized person; confirm deferrals and rules

  • Approval that opens only once the notice is read
  • Deferrals that wait for their confirmation
  • Send-backs kept as rules they approve
Technical superintendents

Review technical content and book the maintenance a change calls for

  • The maker's manual asked for in fixed fields
  • A review tied to each change read
  • Examinations booked from the challenger's point
Masters

Acknowledge revisions aboard, brief the crew and confirm old copies removed

  • What changed, without the whole manual again
  • Remarks to the office read by a person
  • Crew answers from the revision in force
More screens

The rollout what-if, the change queue, the SMS manual and the rules kept

What the HSQE manager and the DPA open while the maker's answer is still awaited.

Three ways to roll outEmail the crew on leave, let drydock crews acknowledge at sailing, or hold everything: overdue at the flag audit and ship-days on the old revision for each.
Open changes on their clockNine open changes sorted by days left, with a flag circular from the HSQE mailbox read before anyone registers it.
The SMS manual libraryManuals, procedures, forms and checklists with the revision in force, its issue date, who approved it and how many ships carry it.
Rules kept from rulingsTwo rules in force and a third proposed from two send-backs, waiting for the DPA before the agents apply it.

demoSample data, from the working solution.

Three signatures ashore, then an acknowledgment from each person aboard

Nobody approves what they prepared, and reopening a package clears every signature on it.

Technical superintendent
Sees
Each change of the technical procedure on screen, and at least one of its sources
Signs
The technical review: intervals and examination steps fit these cranes
HSQE manager
Sees
The amendment notice, with each change of each document on screen
Signs
As preparer of the package
Designated person ashore
Sees
The notice read again and a source behind the new procedure
Signs
Approval as the authorized person, and any deferral as second person
Master
Sees
The documents for the deck and engine departments
Signs
The acknowledgment with the notice number, and that the old copy is removed
Each crew member
Sees
The documents for their own department, opened before signing
Signs
Their acknowledgment, typing the notice number

Six agents map, draft, challenge and issue, and none of them approves

Work passes from agent to agent and ends with a named person.

Trigger agent

Reads the rule, finding or lesson and lists what must change, cited.

  • Never decides a rule does not apply to the fleet
Impact agent

Finds each procedure, form and checklist the change touches, then the ships and the people.

  • Edits no document
Redline agent

Drafts each revision change by change with a source, asks makers for current manuals and proposes rules from rulings.

  • Issues no revision
  • Writes no change without a source
The auditor's read

Reads drafts and returns as a flag or class ISM auditor would, the agents' own drafts included.

  • Approves nothing
  • Lets no unapproved revision through
Distribution agent

Issues approved revisions, asks for acknowledgments in fixed fields, chases and withdraws obsolete revisions.

  • Counts no return with the wrong notice number
  • Reads no free text into the record
Onboard answers

Answers crew questions from the revision in force on that ship, citing section and revision.

  • Never answers from a draft or an obsolete revision
  • Decides no equipment use

What HSQE managers ask about safety management system shipping software

What is safety management system shipping software?

Safety management system shipping software keeps a ship manager's ISM safety management system current: valid documents where they are used, changes reviewed and approved by authorized people, obsolete copies removed. Here agents map each change to the procedures, forms, ships and people it touches, and people review, approve and acknowledge it.

What does ISM Code compliance ask of document control?

It asks for procedures that control SMS documents and data, valid documents at each relevant location, changes reviewed and approved by authorized personnel, obsolete documents promptly removed, and each ship carrying the documentation relevant to it. The screens paraphrase the Code; the IMO text governs.

Who approves a revision to the SMS manual?

The designated person ashore, as the authorized person, after reading the amendment notice and opening a source. The technical superintendent reviews technical content first and the HSQE manager prepares; nobody approves what they prepared.

How are crew acknowledgments counted?

Per person, with name, rank, date, the notice number and the documents opened for their department. A return quoting an older notice is not counted, and a ship closes only when its master confirms the old copy removed.

Can crew ask questions about a procedure?

Yes. Answers come only from the revision in force on that ship, citing section and revision. Whether equipment may be used is never decided by the agents; the assistant names the master and the technical superintendent.

What does the DPA do here?

Here the DPA signs SMS revisions as the authorized person under the company's document control procedure, confirms deferrals as second person and approves rules learned from earlier rulings.

Bring the last change
your auditor asked about.

Send one closed change, its finding and the revised documents, and we will map each place it should have landed.