Near-miss reports and safety incident records: what a company can license

Can near-miss reports be licensed?

Often, in part. Near-miss reports, hazard observations, investigation write-ups and corrective actions written by a company's own employees can belong in a data license once names and identifying details are removed. OSHA injury and illness logs, workers' comp files, medical notes and drug test results stay out.

The value sits in the trail, not the single form. A forklift near miss that links to a root cause, a corrective action with an owner and a due date, and a later check that the hazard did not come back shows a problem being noticed and fixed. Records like that rarely reach the public web, and AI labs and data buyers want them for training and evaluating systems that support operations and safety work.

Safety records are seldom licensed on their own. They matter most next to the work orders, dispatch logs, inspections and project files that show the work surrounding each event.

What is a near-miss report? Three illustrative examples

A near-miss report records an unplanned event that could have hurt someone or damaged property but did not. A good one captures the date and place, the task under way, what happened, how bad it could have been, the immediate response, the cause and the follow-up.

Illustrative, fictional examples of the narratives that matter:

• Warehouse: "A pallet stacked above the beam label shifted as a reach truck passed. No contact. Load restacked, aisle coned off, rack capacity signs replaced; the supervisor rechecked the aisle on the next shift."
• Commercial construction: "A plywood sheet lifted in a gust on the level-four deck and landed inside the barricade. Crew briefed; material tie-down added to the daily pre-task plan."
• Field service: "A technician found a circuit still live after lockout because the panel schedule was mislabeled. Panel relabeled; a test-before-touch step added to the job checklist."

Each one ends in a change to how the work is done. That outcome is what separates a useful record from a form someone filled in to close a ticket.

Which safety records are in scope, and which stay out?

A record that straddles both groups, such as an investigation report naming the injured worker, is handled by dropping the personal and medical fields rather than the whole report. The PII redaction matrix shows how those rules are usually set per record type, and the company agrees them with SourceX before any work begins.

Why OSHA logs and injury records stay out

OSHA's injury and illness logs are built around named employees, their injuries and their treatment, and OSHA's recordkeeping rules include employee privacy protections for some kinds of cases. Read the current rule text on OSHA's website rather than relying on a summary. For a licensing screen the working rule is simple: injury, illness and medical details are excluded, not redacted and kept.

Health information raises a separate question. Whether HIPAA reaches an employer's injury and claims records is covered in are workers' comp records PHI. Where health information is covered, HHS describes two routes to de-identify it, Expert Determination and Safe Harbor, in its HIPAA de-identification guidance. State privacy and employment laws add their own requirements and vary from state to state. This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.

Who owns the safety reports your team writes?

Reports that employees write as part of their jobs are generally the company's. The Copyright Act defines a work prepared by an employee within the scope of employment as a work made for hire, which makes the employer its author (17 U.S.C. 101). Commissioned work from outsiders qualifies only in listed categories and with a signed written agreement, so three situations need a closer look:

• Subcontractors. On a general contractor's site, subs often file near-miss reports on their own forms. Those may belong to the sub unless the subcontract says otherwise.
• Temporary workers. Reports from people placed by a staffing agency are not employee work for the host company, and those workers do not count toward the 50+ full-time employees at peak (contractors excluded) baseline.
• Customer sites. Crews working inside a client's plant may report on the client's forms under the client's safety program, and the service contract may say who owns those reports.

Roll-up platforms meet this question once per add-on; the specialty contractor roll-up screen walks through it for HVAC, electrical, plumbing and roofing businesses.

The hazard-to-closure test: how deep are your records?

Tick what is true today. Companies with strong safety records usually tick the first five.

• Reports go back several years in an EHS platform, a safety app or a consistent archive of scanned forms.
• Each near miss links to an investigation, or to a recorded decision not to investigate.
• Corrective actions carry an owner, a due date and a closure record.
• Some actions have an effectiveness check showing whether the hazard came back.
• Narratives are written in full sentences, not only dropdown codes.
• The same events appear in other systems, such as work orders, dispatch logs, inspections or project files.
• Employees wrote most of the reports, and subcontractor reports can be separated.
• Someone can export the records with name, injury and medical fields removable.

Vehicle and routing near misses pair well with dispatch history; the guide to dispatcher decision records explains where those live.

The baseline is a US company with 50+ full-time employees at peak (contractors excluded), several years of documented operations, rights to license its records and an authorized sponsor; who qualifies has the detail. The data inventory builder helps list systems and years of history without sharing a single report.

How to answer your safety manager's objection

EHS managers guard these records for good reasons, so lead with what stays out.

The concern is still valid when reports name injured workers throughout and cannot be separated, when records are under a litigation hold or tied to an open inspection or claim, or when most reports describe clients' sites. Leave the safety records out in those cases, or revisit once counsel clears them. A firm whose business is advising other companies on safety is a different case again, because its reports mostly describe its clients.

What licensing means for the company

1. The company keeps ownership; the records are licensed, not sold.
2. De-identification and redaction rules are agreed before any work begins.
3. SourceX and the company agree one all-in price, with SourceX's fee included and no separate charges.
4. AI labs and data buyers review the opportunity; once a company is deal-ready, buyers typically respond within about two weeks.
5. Nothing is binding until the company signs, and deals are typically exclusive for AI training for an agreed term.
6. Payment is one-time, typically within about 60 days of invoicing once the buyer selects the data.

Next step

If you run a company with years of safety and operational records, apply at sourcex.si/apply. If you know other owners whose records fit, register as a partner: partners earn 25% of the eligible platform fees SourceX collects from a referred company's deals, capped at $100,000 per referred company, and rewards are paid only after the buyer pays and SourceX receives its fee.