Public hazard & incident reporting

Workplaces aren’t only used by people with logins. A subcontractor on site, a delivery driver in the carpark, or a member of the public may spot a hazard or need to report an incident. Public reporting gives them a way to do that — by link, QR code, or printed poster — with no account and no app.

Set it up (admin)

Open Settings → Organisation → Reporting.
On the Public Hazard & Incident Reporting card, set a Reporting code — lowercase letters, numbers, and hyphens. It’s pre-filled with a suggestion based on your organisation name, so it works out of the box. Click Save.
Your Reporting link appears, with Copy and open-in-new-tab buttons. It looks like:
```
https://app.steadyon.biz/report/<your-reporting-code>
```
Use the enable/disable toggle to turn reporting on or off. Disabling keeps your saved code but stops the link, QR code, and poster from accepting reports until you switch it back on.

QR code

Once the code is saved, a live QR code preview appears with Download PNG and Download SVG buttons. The QR encodes your reporting URL — print it on a sign at the entrance, on equipment, or in an induction pack.

Printable poster

The Printable poster section offers A4 and US Letter buttons. Each downloads a ready-to-print PDF carrying the QR code, your organisation name, plain-language three-step instructions, and a “you can report anonymously” line. Pin it in the lunchroom or at reception.

What a reporter sees

Opening the link shows a chooser with two options:

Report a Hazard (listed first) — “something that could cause harm, before anyone gets hurt”. A short form: title, what the hazard is and why it’s dangerous, location, optional photo(s), and optional contact details (name, email, phone). No risk-assessment fields — your team classifies it on triage.
Report an Incident — “something that already happened — an injury, a near miss, or a dangerous event”. Captures what happened, whether it’s an incident or near miss, the date, optional photos, and optional contact details.

No login, no account. On a phone, the photo button opens the camera directly. After submitting, the reporter sees a reference number to quote. SteadyOn does not email the reporter a confirmation — it won’t send to unverified addresses.

What happens on your side

A new hazard or incident appears in the matching register, unreviewed, with a “Public report” badge on both the list row and the detail page.
The detail page shows a “Reported by (public)” block with whatever contact details the reporter gave, clearly marked unverified.
Your organisation’s admins and owners get an email alerting them to the new report, with a link straight to the record.

Triage it like any other hazard or incident: assess, assign, close out.

Spam protection

Reports are rate-limited per reporting code, and a hidden honeypot field catches bots. Submissions cap at five attachments (images or video only). If your organisation’s plan is paused or a trial has expired, the public page shows a tidy “not accepting reports right now” message.

Privacy

A reporter’s contact details are visible only to your members and admins, never to anyone else. SteadyOn does not share, sell, or advertise against this data — see the Privacy Act page for the full position.