Filling out safety forms where there is no signal

Not about the server, and that is the half people hear. The standards require records to be created and kept: 29 CFR 1904.33(a) sets five years for the OSHA 300 Log, the privacy case list, the annual summary and the 301 forms, and 29 CFR 1910.1020 sets thirty years for exposure records. Nothing in the text speaks to the moment a record leaves the device it was written on. But Part 1904 does put clocks on the work itself, and they run on the calendar whatever the signal is doing — seven calendar days to enter a recordable case under 1904.29(b)(3), seven more to move it from the establishment to the central location under 1904.30(b)(2)(i), and eight or twenty-four hours to report the worst outcomes under 1904.39(a). The gap between writing and uploading is yours to manage, not OSHA's to excuse.

Yes. The field forms write the entry to the device, confirm it on screen, and send it when the connection returns.

One. The entry gets its identifier when you fill it in, not when it uploads, so a second tap — or a resend during a half-returned signal — lands on the same record instead of creating a new one. That holds for the screens the offline queue covers: the hot work and confined space permits, adding a product, the safety plan, the 301 form, the training record with its attachment, the toolbox talk and the incident investigation. Try it: in airplane mode, fill in a hot work permit, tap Submit twice, come back online, then open the permit list.

Yes, and the form says which one it is. An inspection answered to question twelve of twenty comes back with those twelve answers under a banner naming the form you had open. Submit it and the draft disappears. One limit worth knowing rather than discovering: clearing the browser's data clears the draft with it, because the draft lives on the device.

No. Opened cold and still offline, with the sign-in token already expired for more than an hour, the app opens on the kept session rather than on the login screen. That is the question the buyer checklists tell you to run — leave the device offline and see whether it demands re-authentication — and it is the one nobody answers in print.

No. When the signal returns the queue sends each entry for itself. One the server refuses stays on the device, marked for review in the offline manager, and the ones behind it go up anyway. A full queue never drops the oldest entry quietly. Try it: in airplane mode fill in two forms, come back online, then open the offline manager — the queue is empty and both forms are in their lists.

The others still go through. A single malformed entry used to stop the whole queue and stay at the front of it, which meant everything written behind it never went up. Entries that fail permanently are set aside with the reason and an attempt count, and the queue keeps moving.

The person who wrote it. The owner is fixed when the entry is created, not when it uploads, so a record written by the morning crew is not reassigned to whoever is logged in at the end of the shift. The OSHA interpretation letter of August 14, 1997 makes the same point about badge-scanned attendance: the condition is that the record identifies the right person.

Yes. In an interpretation letter dated April 10, 2000, OSHA stated it would have no objection to electronic capture satisfying training certification requirements. A 1997 letter had already reported that a search of all OSHA standards found no standard requiring the employer to obtain the employee signature. What the standards ask for is a certification record identifying who was trained.