Product
The roster freezes the second the alarm sounds
In an evacuation the most expensive minute is the one spent arguing about who has the list. The moment an incident opens, presence is frozen and everyone looks at the same list.
The frozen roster
The presence list at the second the incident opened; this list does not change and is never edited afterwards.
Every movement after the incident is kept separately. The two lists are never merged; merging them loses track of who is where.
Safe, injured, missing
Marking happens in the field and reaches the incident commander instantly; the commander's screen holds names, not just numbers.
- Safe: the person was seen at the assembly point or reported themselves.
- Injured: handed to the medical team; the row does not close, it keeps tracking.
- Missing: not seen yet; the last gate they were seen at is a required field.
Last gate and time
For every person marked missing, the last gate and time appear on screen; the search team searches that area rather than the whole building.
How staleness is shownReporting yourself at the assembly point
The code at the assembly point is scanned and the person moves to the safe list; where a phone is not available a marshal marks them from the list.
Several assembly stations see the same list; the same person is never counted twice at two stations.
First aiders and fire marshals
Marshals are separately marked in the list; when an incident opens nobody searches for who is on duty where — it is on the screen.
Reunification
- The parent arrives at the assembly point and their identity is verified.
- The system checks the student may be released to that parent; where a custody restriction exists, the restriction wins.
- The handover is recorded so that both sides can see it.
- The student leaves the list as handed over, not as missing.
Drills
A drill runs through the same flow as a real incident: it is planned, run and timed.
How many people were marked safe in how many minutes, which gate jammed, how many stayed missing; the record is used as is in the post-incident review.
An audit trail that cannot be altered
Throughout the incident, who marked what and when is recorded and cannot be edited retroactively; a correction can only be written as a new row.
The incident report is signed and verifiable through its digest; anyone can check that a row in the report was not altered afterwards.
The audit trail and personal data