Back — Operations Analytics
Product updates

What's new

What's new in the Operations Analytics module — every change that makes your day easier, in plain language, not developer-speak.

15 updatesupdated weekly

October 2026

2
Improvement

Analytics: several sites in one view, personal dashboards, saved permit reports

Analytics now answers for several sites at once. On the Overview, the “Site” filter chooses which sites a view combines, and the built-in “Sites overview” puts them side by side. You can build dashboards for yourself — a personal dashboard is visible only to you, a shared one to the team. The permit report’s setup can be saved under a name, with a relative period (“previous month”) too, and a saved view can go on a dashboard as a tile: as a table, bar chart or heatmap, also in the PDF and the scheduled email. The settings pages moved into one “Settings” menu, and an “Analyze” button on the Permit-to-Work list opens the report.

  • Company-wide dashboards: ratios are computed from the sites’ totals, not averaged
  • A report tile references the saved view — change the view and the tile follows
  • A per-person view can go only on a personal dashboard, never on a shared one or into a scheduled report

Guide in Help

Feature

Permit reporting: flexible export, PDF package, pivot and company/person cards

Permit data now answers questions instead of just listing permits. The export’s columns and grain (one row = a permit, a person on a permit, a signature, a gas test…) are yours to choose, and the setup can be saved as a template. The permits’ PDFs come in one ZIP, with a verifiable manifest. In Analytics, the permit pivot breaks permits down by two dimensions — company, plant, type, month… — and behind most numbers is the list of permits (the ones that cannot be opened are marked with an asterisk). The company and person cards bring one contractor’s or one worker’s permits, hours, problems and expiring competences into one place.

  • Export templates with a relative period (“previous month”) and a full data package in Excel
  • PDF package: one PDF per permit + a manifest with SHA-256 hashes, up to 200 permits per request
  • Breakdowns by person and the cards sit behind a separate right; the card is a safety overview, not a performance review

Guide in Help

September 2026

10
Security

Download: "Digital fingerprints" — technical brief

Five pages for auditors and procurement: how the system shows that a signed permit or a recorded action was changed afterwards — the chained fingerprint, the daily external anchor and the QR code on paper. It also states the limits: what we do NOT claim.

Read it online (also as PDF)

Security

Further towards NIS2: two-factor for everyone, versioned policies

Over the past weeks we kept strengthening the supplier side. Two-factor sign-in is available to every user, and your organisation can make it mandatory; the person affected gets an email when their two-factor is turned off or reset. Our internal security policies became controlled documents, with versions and change history, their content re-checked against the running system.

  • Your organisation can tighten the two-factor level — lowering it needs a fresh second factor
  • A failed release rolls itself back to the previous working version
  • The sub-processor list comes from one source, machine-checked against the legal pages

NIS2 supplier compliance

Improvement

A sign-in now lasts a full shift

Until now a sign-in expired roughly every hour during a shift — the "Keep me signed in" box did not change that. From now on a sign-in lasts a full shift, 8 hours, so the box has been removed from the sign-in page. At the end of the shift the session expires; on a shared computer, still sign out when you are done.

  • No more signing in again every hour mid-shift
  • The session ends with the shift — the next colleague signs in under their own name
Security

A password change now signs you out everywhere else — and the audit trail has an external anchor

When you change or reset your password, every OTHER browser and device is signed out immediately — the session is revoked on the server, not left to expire on its own. A forgotten or compromised sign-in ends on its next click. On top of that, a per-tenant fingerprint of the audit trail is taken every day, chained and stored off-server: a later change to an already anchored day — even one made with owner rights inside the database — can be detected.

  • Revoked on the server, not left to expire — tested live
  • A daily, chained fingerprint of the audit trail, with no personal data

Security & trust

Security

NIS2: we mapped all ten Article 21(2) measures

If your organisation falls under NIS2 (in Hungary, Act LXIX of 2024), you have to assess your suppliers too — and until now that work meant extracting the facts from us one question at a time. We now hand it over ready-made: a public page and a downloadable supplier data sheet that map the ten Article 21(2) measure groups onto what the system actually does. In an incident we notify you within 24 hours — that figure exists so your own 24/72-hour reporting deadlines stay achievable. Important: this is not a certification and it does not make you compliant; NIS2 applies to your organisation, what we do is make the supplier side verifiable. Our limits are stated on the same page.

  • All ten measure groups mapped — we deliberately make no compliance claim
  • Incident notification within 24 hours, partial information included
  • A downloadable data sheet for procurement — and we fill in your own questionnaire too

NIS2 supplier compliance

Security

On exit you get everything back — with checksums, and a certified deletion

A supplier is easy to choose when it is easy to leave. Your full data set can now be handed over: EVERY data table in machine-readable (NDJSON) and spreadsheet-openable (CSV) form, with an inventory of stored files and a SHA-256 checksum per file, so you can verify the package is intact. The package also names whatever is deliberately left out of it, and why. If you then ask for deletion, we issue a certificate: what was deleted, the result of the post-deletion check, and the fingerprint of the export we handed over first. Data leaves the backups with the rotation, within 90 days at the latest — we say that plainly, because backups are taken of the whole database.

  • Every data table, not just the shift log — with a file inventory
  • A SHA-256 per file: the package can be verified as intact
  • A deletion certificate carrying the fingerprint of the prior export

NIS2 supplier compliance

Security

We restore-tested the backups end to end

A backup is worth what has been restored from it — so we did it. From the off-site backup (every 6 hours, to EU storage) we restored the entire database into a separate instance and counted: every table, every row and every user account came back intact. We checked the canonical shift-log PDFs separately: every one of them has its backed-up file, byte-for-byte identical to the original. The data itself restores in seconds. The full recovery time — which includes rebuilding a machine — is still being measured, and we will only state it once we can back it with a number.

  • Every table and every user account came back intact — counted, not assumed
  • Every canonical shift-log PDF is in the backup, byte-identical
  • What we have not measured, we say so — the full recovery time is not established yet

Security & trust

Improvement

Archived PDFs now record HOW their fingerprint is verified

Every archived shift-log and analytics PDF has always carried a fingerprint (hash) that reveals whether the document was altered afterwards. From now on the record also states HOW that fingerprint is to be verified — because they are not all produced the same way. This matters in an audit: the wrong procedure would report a "mismatch" on a perfectly intact document, with nothing to reveal that the fault is in the method, not the document. We classified the existing archive retroactively too — by measurement, not assumption.

  • The record states the verification procedure — no guessing from the file name
  • Where the file alone cannot prove it, we say so instead of reporting a "mismatch"
  • The entire existing archive classified, by measurement

Security & trust

Feature

PTW phase ③: permit metrics in analytics

With the third phase, Permit to Work data flows into Operations Analytics: permits issued, gate-blocked attempts and throughput by type — broken down by site, plant and period. The data sits where the decision is: you can see which checkpoint stops work, and where.

  • Issued, gate-blocked attempts, throughput by type — on the dashboard
  • Site / plant / period breakdown, in one view with the other modules
Security

Operations Analytics — full security review

The module went through a comprehensive, multi-dimensional review, on real data too. No critical issue surfaced; the items found were fixed per good practice.

August 2026

3
Improvement

A clearer dashboard editor

You pick saved views from a dropdown, and templates appear only on a button press — so the editing canvas sits right at the top. Tile settings show only what actually applies to that tile; the rest moved behind an “i”.

  • Saved-view dropdown
  • Template library on demand
  • Consistent width across every tab
Feature

New module: Operations Analytics

Turn the data you already log into metrics and dashboards — trends, breakdowns, rankings, completeness. Any recorded data point can become a metric, and every number shows how complete it is.

  • A toggleable module with its own subscription
  • Every figure shows its data completeness
  • Targets and thresholds per metric
Feature

Data export and scheduled reports

Download your reports to CSV or Excel — per period and per plant, with a separate column flagging missing data. Recurring reports can also go out by email automatically to the addresses you set.

  • CSV and Excel, with a completeness column
  • Scheduled email reports
  • Saved export presets
Newsletter

Follow how OPEREX evolves

New modules, industrial shift-log tips and ISO 45001 practices — once a month at most, no spam.

You can unsubscribe anytime — the link is at the bottom of every email.