Permit to Work (PTW) Process for Solar: Templates & Safety Workflow

A 2 MW commercial rooftop in Gujarat taught our team a lesson we still repeat in every safety induction. A technician opened a combiner box at 11 a.m. on a clear day. The AC breaker was off. He assumed the strings were dead. They were not — 980 V DC sat on the busbars, and the arc flash burned his forearm before he pulled back. The root cause was not carelessness. It was the absence of a permit to work. Nobody had written down the isolation points. Nobody had verified absence of voltage. Nobody signed anything.

Solar is uniquely hostile to informal safety habits. The DC side of a PV array cannot be switched off in daylight. Strings generate lethal voltage from dawn. Crews work on rooftops, near inverters holding stored charge, often under schedule pressure. Falls remain the top cause of death in US construction, with 421 fatal falls to a lower level recorded in construction in 2023, according to the U.S. Bureau of Labor Statistics (2024). A permit to work (PTW) system is the formal control that stops the “I thought it was off” conversation from ever happening.

This guide gives EPCs and O&M teams a complete PTW process for solar: when a permit is required, the 7-step workflow from hazard assessment to closeout, electrical isolation and lockout-tagout (LOTO) specifics for PV, working-at-height permits, IEC 62446 documentation duties, OSHA 1910.147 compliance mapping, and when digital PTW beats paper.

In this guide:

• What a PTW is — and what it is not (AHJ permits are a different thing)
• The 7-step solar PTW workflow, with a one-page template structure
• Electrical isolation and LOTO rules specific to PV systems
• Working at height, hot work, and confined space permits
• Standards map: IEC 62446, OSHA 1910.147, NFPA 70E, and EN 50110
• Digital PTW vs. paper: an honest tradeoff
• Common PTW failures we see on real sites — and how to audit them

What a Permit to Work Is — and What It Is Not

A permit to work is a signed document that authorizes one defined task, on one defined asset, for a defined time window, under defined precautions. It is a communication device. The signature chain — issuer, acceptor, and sometimes an isolating authority — forces a conversation that informal briefings skip.

The PTW sits at the top of a hierarchy of safety documents. The risk assessment identifies hazards for the whole job. The method statement (or job hazard analysis) describes how the work happens step by step. The PTW then authorizes the specific hazardous task to start, confirming isolations are in place. A toolbox talk delivers it to the crew.

Do not confuse PTW with the AHJ permit. The authority having jurisdiction (AHJ) issues construction permits before installation — structural, electrical, interconnection. That is a design and compliance matter, handled upstream by your engineering and permitting team (our sister company covers that workflow in detail in its guide to solar permit design). The PTW governs worker safety during execution and O&M. You need both; one never substitutes for the other.

Three permit categories cover almost all solar field work:

Some companies run a single PTW form with tick-box categories. Others issue separate color-coded permits per hazard. Both work. What fails is a 6-page form nobody reads.

The 7-Step Solar PTW Workflow

Every defensible PTW system follows the same spine. Adapt the details to your company size, but never skip a step.

1. Task definition and hazard assessment. The supervisor writes down exactly what will be done, on which asset, and lists the hazards. “Replace inverter 3 at Site B” is a task. “Check the system” is not — reject vague scopes at this step.

2. Isolation and lockout-tagout. The authorized person isolates every energy source feeding the work point: AC disconnect, inverter DC inputs, battery terminals, and — where possible — individual strings. Each isolation point gets a personal lock and tag. Energy control procedures for hazardous energy are mandatory under OSHA 29 CFR 1910.147, which applies to roughly 3 million US workers servicing machines with hazardous energy.

3. Test before touch. Verify absence of voltage at the work point with a meter rated for the DC voltage present (CAT III or CAT IV, 1,000 V or 1,500 V rated). Test the meter on a known live source before and after. This is the step that would have saved the technician in Gujarat.

4. Permit issue and toolbox talk. The issuer walks the acceptor through the permit: isolation points, remaining live parts, PPE, emergency plan. The acceptor briefs the crew. Everyone signs.

5. Supervised execution. Work proceeds within the permit’s scope and time window. Any change — new hazard, weather shift, scope creep — suspends the permit until reassessed.

6. Handback. The acceptor confirms the work point is safe, tools and personnel are clear, and guards are reinstated. The isolating authority removes locks in reverse order.

7. Closeout and records. Test results (insulation resistance, polarity, earth continuity) attach to the closed permit. File everything. IEC 62446-1 treats this documentation as part of the system’s formal maintenance record, per the IEC 62446-1 standard.

A PTW is only as strong as step 3. If your crews skip test-before-touch, you do not have a permit system — you have paperwork.

Electrical Isolation and LOTO for PV Systems

PV breaks the core assumption behind most electrical LOTO: you cannot de-energize the source. Modules produce voltage whenever light hits them. A 20-string array at 8 a.m. in winter can still sit above 600 V DC. Your isolation strategy must accept a permanently live DC side and control it, not pretend it is dead.

The practical isolation hierarchy for solar work:

1. AC side first. Open and lock the main AC disconnect and the inverter AC breaker. This stops export and kills the transformer’s backfeed path.
2. Inverter DC inputs. Open the inverter’s DC switch and lock it. Wait the manufacturer’s discharge time — typically 5 to 15 minutes for DC-link capacitors.
3. String level. For combiner or string work, open the string fuses or DC isolators feeding your work zone. Adjacent strings in the same combiner may stay live; the permit must name exactly which strings are isolated.
4. Stored energy. Batteries need their own isolation permit line. DC busbars inside inverters hold charge after isolation — the wait time goes on the permit.
5. Verify. Absence-of-voltage test at the exact work point, meter checked before and after.

We covered the isolator hardware side in our guide to the solar DC isolator and the LOTO fundamentals in the lockout-tagout glossary entry. The commissioning-side test sequence pairs with our solar system commissioning protocol.

Two solar-specific traps deserve explicit lines on every electrical PTW:

• Backfeed from adjacent inverters. On multi-inverter C&I sites, isolating one inverter’s AC does not clear the AC board. Map every source that can energize your work point.
• Module-level electronics. Microinverters and DC optimizers reduce string voltage but add live components behind every module. Rapid shutdown brings conductors below 30 V within 30 seconds inside the array boundary under NEC 690.12 — but only when activated, and only on the controlled conductors.

Arc-flash risk is the reason NFPA 70E matters here. NFPA 70E requires a shock and arc-flash risk assessment before work on or near energized equipment, according to the NFPA 70E standard. If the task cannot be done de-energized — rare in O&M, but it happens during IV-curve tracing or thermography — that is energized electrical work. It needs its own permit, a qualified person, insulated tools, and arc-rated PPE sized by an incident-energy calculation, not guesswork.

Working at Height, Hot Work, and Confined Spaces

Electrical hazards get the attention in solar, but gravity kills more workers. Falls, slips, and trips accounted for 39.2% of all fatal injuries in construction in 2023, according to the U.S. Bureau of Labor Statistics (2024). In the UK, falls from height caused 50 of 124 construction worker deaths across 2022/23 to 2024/25 reporting, per HSE construction statistics (2025). Solar crews live on roofs, so the working-at-height permit is your highest-volume PTW.

A solar working-at-height permit should confirm:

• Roof assessment: structure, skylights, fragile surfaces (fiber-cement sheets are a recurring killer)
• Anchor points or lifeline system inspected and rated
• Fall protection plan: guardrails, restraint, or arrest — in that priority order
• Edge distance rules and exclusion zones below for falling objects
• Weather limits: wind speed cutoff (typically 40 km/h for module handling), lightning protocol
• Rescue plan: a fall-arrested worker must be reachable within minutes, not after a ladder truck arrives

OSHA’s trigger is 6 ft (1.8 m) in construction under 29 CFR 1926.501. The UK Work at Height Regulations 2005 have no height threshold — they apply wherever a fall could cause injury. If you operate across markets, set your internal trigger at the stricter line.

Hot work permits cover angle grinding on racking, welding mounting structures, and torch work near roofing membrane. The 30-minute fire watch after work ends is the part crews skip; make it a signature line on the permit.

Confined space permits apply to battery containers, below-grade cable vaults, and some inverter rooms. Battery enclosures add thermal-runaway and off-gassing hazards. OSHA’s permit-required confined space rule is 29 CFR 1910.146. Ventilation testing and an attendant at the entry point are the minimum controls.

Standards Map: IEC 62446, OSHA, NFPA 70E, EN 50110

Nobody enjoys standards crosswalks, but auditors do. This table maps each framework to what your PTW system must evidence.

IEC 62446 matters to PTW in a specific way: the standard makes the maintenance documentation part of the asset’s formal record. When your permit closes with insulation-resistance and polarity readings attached, you are simultaneously satisfying your safety system and your IEC documentation duty. We run the same pairing between solar commissioning checklists and test certificates on our own EPC projects.

For the US compliance side in depth, see our guide to OSHA compliance for solar installers. For training pathways that build the “authorized person” bench a PTW system needs, see solar O&M technician training.

Digital PTW vs. Paper: An Honest Tradeoff

Vendors sell digital permit-to-work platforms hard. Here is our take after running both on real portfolios: digital PTW wins at scale and loses on small crews. The process discipline matters more than the medium.

Digital makes sense above roughly 10 sites or 20 concurrent permits. Below that, a disciplined paper pad with a permit register beats a half-adopted app. The failure mode we see most is the middle ground: a digital system nobody updates, plus informal verbal authorizations on the side.

One contrarian point: a PTW system can make a site less safe. When permits become ritual — same boilerplate hazards, rubber-stamp issue, no walk-down — crews learn the permit is theater. Research on safety bureaucracy consistently shows paperwork volume and injury rates do not correlate; verification behavior does. Audit the behavior, not the binder. If your issuer cannot point to the physical isolation within 60 seconds of being asked, the permit failed regardless of its formatting.

The same applies to your upstream documentation. Accurate single-line diagrams and string maps from your solar design software feed directly into faster, more honest isolation planning. When the design in SurgePV’s solar designing workspace names every string and combiner, the permit writer lists real isolation points instead of generic ones. Pair that with solar proposal software that carries the design BOM into the handover pack, and the O&M team starts life with documentation that matches the roof.

Common PTW Failures on Solar Sites — and How to Audit Them

These are the failure patterns we see most often across EPC and O&M audits. Each has a fix that costs almost nothing.

1. Blanket permits. One permit covers “all maintenance on Site C for the month.” This defeats the entire point. Fix: one permit per task, per crew, per shift. Validity windows of 12 hours maximum.

2. No test-before-touch. Isolation happened, but nobody verified at the work point. Fix: a mandatory field recording the meter model, the reading, and the meter check — signed by the person who held the probes.

3. Orphaned locks at handover. Shift changes leave locks whose owners have gone home. Fix: a lock register tied to the permit register; no shift closes with locks unaccounted for.

4. Contractor permits in a vacuum. Subcontractors arrive with their own paper that never meets yours. Fix: all work on your site runs on your permit system, briefed by your issuer. No exceptions for “their own safety system.”

5. Permits closed without test records. The inverter is back online but the IEC 62446 closeout data was never captured. Fix: the permit cannot close until the test-record field is filled.

Audit quarterly with a simple sampling method: pull 10 closed permits, walk 3 of them physically, and interview 1 acceptor. Score against the 7-step workflow above. Report the score to the same meeting that reviews injury statistics — because the two are connected. Falls and electrical contact remain the top killers in construction; the OSHA fall prevention campaign and LOTO standard exist because the same failures repeat. Your permit system is where repetition gets interrupted.

Conclusion

A permit to work system is not bureaucracy. It is the written proof that someone isolated the energy, someone verified it, and someone accepted responsibility before a crew touched live DC at 10 m above the ground. Solar’s permanent-live DC side and rooftop work environment make informal safety habits a losing bet. Build the 7-step workflow, keep the form to one page, and audit behavior rather than binders.

Three actions to take this week:

• Map your isolation points. For each active site, list every AC disconnect, inverter DC switch, string isolator, and battery terminal. Photograph and label them. This single document upgrades every future permit.
• Adopt the one-page PTW template from this guide and run it on your next 3 jobs — including construction-phase work. Time the issue process; if it exceeds 30 minutes, the form is too long.
• Fix your upstream documentation. Generate string-level layouts and BOMs in SurgePV so permit writers and O&M crews work from drawings that match the roof — book a SurgePV demo to see the workflow.

Frequently Asked Questions

What is a permit to work (PTW) in solar installation?

A permit to work is a signed, time-limited document that authorizes a specific high-risk task on a solar site. It confirms hazards were assessed, energy sources are isolated and locked out, and the crew knows the controls. Typical solar PTWs cover DC string work, inverter replacement, combiner box maintenance, and roof work at height.

When is a permit to work required for solar work?

Issue a PTW whenever the task involves live electrical exposure, stored DC energy, work at height above 1.8 m (6 ft in the US), confined spaces such as battery containers, or hot work. Routine visual inspections with no contact and no exposure do not need a full PTW — a documented risk assessment is enough.

What is the difference between a PTW and an AHJ solar permit?

An AHJ permit is a construction authorization from the local building or electrical authority before installation. A permit to work is an internal safety control that authorizes hazardous tasks during construction or O&M. The AHJ permit governs whether you may build; the PTW governs how crews work safely on site.

Does OSHA require a permit to work for solar?

OSHA does not use the term “permit to work” for most tasks, but 29 CFR 1910.147 mandates lockout-tagout procedures for hazardous energy, and 1910.146 requires permits for confined spaces. In practice, EPCs and O&M providers run a PTW system to prove compliance with these rules. The UK and IEC markets use formal PTW as standard practice.

What should a solar PTW template include?

A solar PTW template needs 10 fields: site and asset ID, task description, hazard list, isolation points with lock numbers, test-before-touch verification, PPE requirements, permit validity window, issuer and acceptor signatures, suspension and handback section, and closeout with test records. Keep it to one page so crews actually use it.

How does lockout-tagout work on a solar PV system?

PV arrays stay live in daylight, so you cannot de-energize the DC side. LOTO on solar means isolating the DC at string or combiner level, locking the AC disconnect and inverter, tagging every isolation point, and verifying absence of voltage at the work point with a rated meter. Module-level power electronics or covered modules reduce DC risk but never eliminate it.

What is IEC 62446 and how does it relate to PTW?

IEC 62446 is the international standard for testing, documentation, and maintenance of grid-connected PV systems. Part 3 covers outdoor infrared thermography, and the maintenance section requires documented inspection and test records. PTW closeout is where those records — insulation resistance, polarity, earth continuity — get captured and filed.

Is a digital PTW system worth it for solar O&M teams?

Yes, for portfolios above roughly 10 sites. Digital PTW cuts permit issue time from 30–45 minutes to under 10, creates an automatic audit trail, and prevents expired permits from staying open. For a single-crew residential installer, a disciplined paper pad still works — the process matters more than the platform.