Workplace Incident Report: How to Document an Accident with Certified Evidence
What a workplace incident report has to record, which evidence weakens within hours, and how to certify the scene before anyone repairs, cleans or moves anything.
A workplace incident report is only as strong as the record of the scene behind it, which is why the ILO code of practice on recording and notification of occupational accidents (1996) asks employers to leave an accident site undisturbed until the investigation starts, apart from first aid and preventing further harm. TrueScreen counters disputes over how a workplace accident happened by certifying what is captured at the scene with a patented forensic methodology, giving workers, employers and safety managers a record that after-the-fact reconstructions can be checked against.
Key takeaways
- Leave the accident site undisturbed until the investigation starts, apart from first aid and preventing further risk; if it must be disturbed, record it first with photographs, drawings and eyewitness names (ILO code of practice, 1996, paragraphs 10.2.4 and 10.2.5).
- A notification must cover the enterprise and employer, the injured persons and their injuries, and the workplace and circumstances of the accident, while the time limits are set by national law (ILO Protocol of 2002 to Convention 155, Articles 4 and 5).
- ISO 45001 clause 10.2 asks the organization to react to the incident, deal with its consequences and determine whether similar incidents have occurred.
- TrueScreen certifies photos, video, audio and witness statements at the source with a forensic methodology; the report attests how and when they were captured, not what caused the accident.
2.93 million
work-related deaths worldwide in 2019, up from 2.79 million in 2015
ILO estimates (2023), cited in ILO OSH Statistics Issue Paper, 2025
The first hour after a workplace accident is crowded: first aid, a machine to shut down, calls to the safety manager, colleagues already comparing notes. By the next morning the floor has been mopped and the guard is back on the press. Weeks later an inspector or an insurer asks what the scene looked like, and the workplace incident report rests on a few phone photos forwarded in a group chat and on statements written from memory.
Knowing how to write an incident report is half of the job; the other half is evidence that someone who was not there can check. TrueScreen takes care of that half at the source: photos, video and audio recorded on site are acquired in a controlled environment and documented in a technical report that states when and how each file was captured.
What to do in the first minutes after a workplace accident
Help the injured person and make the area safe first, then leave the scene exactly as it is until someone has recorded it.
Call emergency services when the injury needs them, give first aid and stop whatever caused the harm: isolate the machine, cut the power, close off the area. ISO 45001 opens clause 10.2 the same way: react to the incident and take action to control it (ISO/TC 283, ISO 45001 FAQ).
Once nobody is at risk, the priority changes. The ILO code of practice on recording and notification asks the employer to keep the site undisturbed until the investigation begins (paragraph 10.2.4). If first aid or safety forces someone to disturb it, a competent person should record the site before any intervention, “including where necessary photographs, drawings and the identities of eyewitnesses” (paragraph 10.2.5). Then notify the safety manager, the workers’ representatives, the insurer and, where national law requires it, the competent authority.
A few habits destroy evidence for good:
- restarting, repairing or adjusting the machine before it has been recorded;
- cleaning up spills, debris or broken parts;
- moving tools, ladders, PPE or materials when safety does not require it;
- leaving witness statements until the next day;
- treating photos forwarded in a chat as the only record of the scene.
Workplace incident report: who files it, when, and what it records
The employer records and reports the accident; national law sets the deadline and the authority, while international standards describe what the report has to contain.
A workplace incident report is the employer’s written record of an occupational accident, a dangerous occurrence or a near miss: who was involved, what happened, where and when, the injuries and the first actions taken. TrueScreen gives that record what it usually lacks, images of the scene whose time of capture anyone who receives them can check.
The ILO Protocol of 2002 to the Occupational Safety and Health Convention defines an occupational accident as “an occurrence arising out of, or in the course of, work which results in fatal or non-fatal injury” (Article 1). Under the Protocol, national procedures make employers responsible for recording occupational accidents, keeping the records for prevention and refraining from retaliation against a worker for reporting (Article 3).
Notification is a separate duty. The Occupational Safety and Health Convention, 1981 (No. 155) calls for procedures for notification “by employers and, when appropriate, insurance institutions” (Article 11(c)), and the Protocol leaves “the time limits for notification” to national procedures (Article 4). Check the deadline in the national law that applies to you, usually that of the country where the accident happened.
What the report should contain
Article 5 of the Protocol sets out what a notification contains: the enterprise, establishment and employer, the injured persons and the nature of their injuries, and the workplace and circumstances of the accident. An internal report worth having also records:
- the date, time and exact location;
- the people involved and the witnesses present;
- the task, equipment and materials in use;
- the sequence of events as each witness describes it;
- the first aid given and the actions taken to make the area safe;
- the evidence collected and where it is kept.
Clause 10.2 of ISO 45001 asks the organization to “deal with the consequences” of an incident (ISO/TC 283 FAQ); a complete report supports that step.
Why the sequence of events gets disputed
Everyone who reviews an accident later rebuilds the scene as it was in the first minutes, and that is the moment most companies record worst.
Labor inspectorates look hardest at serious cases: Convention 155 calls for inquiries where occupational accidents “appear to reflect situations which are serious” (Article 11(d)). The insurer decides whether the injury is work-related and covered, and in a damages claim or criminal case a judge weighs each party’s version. In workplace safety inspections the questions are always concrete: where the guard was, whether the harness was clipped on, what the floor looked like.
Work accidents cause about 330,000 deaths a year and 395 million workers suffer non-fatal work injuries, according to ILO estimates published in 2023, and every serious case sends someone back to the same first hour.
Two hypothetical cases show how fast a scene loses its value. A worker falls from a scaffold: the company says the guardrail was in place and the worker had unclipped his harness, while the worker says a section of guardrail had been missing since the morning. By the afternoon the scaffold has been completed, and the only images are three shots from a supervisor’s phone. In the second case an operator’s hand is crushed in a press, and maintenance repairs the guard interlock the next day so production can restart. From then on nobody can show whether the interlock had been bypassed, had failed or was working.
In neither case does the doubt go away: when the sequence of events stays uncertain, the uncertainty weighs on the claim, the inspection or the court case, and it can weigh against either side.
Which evidence to collect, and where it weakens
Each kind of evidence has a weak point the other side will look for, usually the gap between when it was created and the moment it claims to show.
A photo forwarded through a messaging app often loses its original metadata on the way, so nobody can say which phone took it or when, whereas a photo captured with TrueScreen is created inside a controlled acquisition and its report states the certified time of capture. A file imported later from the phone gallery gets a certain date from the moment of import, which helps, but it is not a forensic acquisition of the scene.
| Evidence | What it shows | Weak point | How to strengthen it |
|---|---|---|---|
| Photos and video of the scene | Equipment, guards, PPE, floor and lighting at the time | Taken after the cleanup or forwarded in a chat, so the date can be challenged | Capture live before anything moves, with certified date and time and, where the workflow records it, location |
| Witness statements | What people saw and heard | Written days later, after colleagues compared versions | Collect them in the first hours, one witness at a time, as audio or a signed statement |
| Supervisor’s notes and next-day memos | Timeline and first actions | No proof of when they were written | Certify the document when it is written |
| Risk assessment, maintenance logs, training and PPE records | Prevention measures before the accident | Can be edited afterward | Certify the version in force on the day |
| Medical and first-aid records | The injury and when it was treated | Say nothing about the scene | Tie them to the scene record through date and time |
| The scene as found | Everything, until it changes | Repaired or cleaned within hours | Record it first, as the ILO code of practice recommends |
Certified workplace safety records made before the accident, such as inspection photos or maintenance checks, show the prevention measures on a certified date, with any later change to the files detectable. On the day itself, a certified video shows where the machine guard was before anyone refitted it, which is usually the first detail to disappear.
How TrueScreen certifies the incident scene at the source
TrueScreen certifies the incident scene at the moment it is recorded, so the photos, video and statements in the report carry their own proof of when and how they were captured.
With the TrueScreen App, the supervisor or safety manager captures photos, video and audio live at the scene. The forensic acquisition prevents alteration while it is under way and makes any later change detectable. Photos are marked as live captures, video is certified in full, and every file gets a SHA-256 fingerprint. Location is recorded when the workflow is set to capture it (it can be off, optional or mandatory), and the device clock is checked, with any drift declared in the report. Certification needs a network connection, so check coverage in basements or remote yards.
Witness statements and documents join the same record through TrueFlow, a guided collection opened from its own link. A colleague who saw the accident can give a statement while it is fresh, in their own voice, and sign it with TrueScreen’s digital signature service, without an account when the flow does not require a login. The link can be set to single use, can carry an expiry date and can require an SMS code.
Every certification produces a package with a sealed XML file, a PDF report and the original files. Only as the last step does TrueScreen apply a qualified electronic seal and a qualified timestamp under the eIDAS framework (Regulation (EU) No 910/2014): the seal carries a legal presumption of the integrity and origin of the data, and the qualified timestamp fixes the time of the certification. Content certified with TrueScreen carries full legal and evidentiary value worldwide, and its weight in a given case is for the judge to assess. Anyone can verify the package without TrueScreen and without trusting whoever hands it over, for instance with the EU’s public DSS validator.
A certification attests how and when content was captured, not what happened: it does not prove the sequence of events, the causes, the truth of a statement or who the people on camera are, and a staged scene would be certified as an authentic recording of a staged scene. It does not replace the accident investigator or a technical expert, it cannot promise the outcome of an inspection, a claim or a trial, and it does not make a company compliant with ISO 45001 or any safety law.
Picture a hypothetical workshop where an operator’s hand is crushed in a press. After first aid, the safety manager records the press, the removed guard and the controls with TrueScreen before maintenance touches anything, and the supervisor sends the two colleagues present a statement flow with a voice recording and a signature. The package goes to the inspector and the insurer as it is, and each can check it alone.
How to write an incident report after a workplace accident, step by step
A report that holds up follows the order of events: safety, scene, witnesses, records, notification and one package that others can verify.
-
Make the area safe and help the injured person
Give first aid, call emergency services when needed, stop the equipment and close off the area. Note the time of the accident and the time help arrived, because those two times anchor the rest of the report.
-
Certify the scene before anything is touched
Record the place, the machinery and the equipment as they are: wide shots of the whole area first, then guards, controls, ladders, anchor points, PPE, floor and lighting. With the TrueScreen App you can certify a photo of the point where the worker fell before the area is cleaned up, then walk the scene on video.
-
Collect statements while memories are fresh
Talk to each witness separately within the first hours and ask what they saw and heard, not what they think caused it. A certified audio recording fixes the witness’s words as they are spoken, and a TrueFlow sent to their phone can add a written statement and a signature to the same record.
-
Gather the company’s own records
Pull the risk assessment, maintenance and inspection logs, training records and PPE issue records. Scan paper documents into the certified record as they stand on the day, so the version in force that day is documented.
-
File the report and notify within the national deadline
Complete the internal workplace incident report and send the notification that national law requires to the competent authority and the insurer. The ILO Protocol of 2002 leaves time limits to each country (Article 4), so check the local rule.
-
Keep one package for inspectors, insurers and the court
Keep the report, files, statements and records together. With TrueScreen, inspectors, insurers and judges receive the same package and can verify the certification on their own, without taking anyone’s word for it. Record near misses with the same care: ISO 45001 asks you to determine whether similar incidents have occurred (clause 10.2), and the next investigation may depend on them.
Conclusion
A workplace incident report is written once and read many times: by the safety manager working to prevent the next accident, by the inspector, by the insurer and sometimes by a judge, often months later. All of them go looking for the scene as it was in the first minutes. TrueScreen puts that moment on record with a forensic methodology, so the report rests on evidence anyone can verify rather than on memories and forwarded photos.
FAQ
What should be included in a workplace incident report?
A workplace incident report should record when and where the accident happened, who was involved and who saw it, the task and equipment in use, the sequence of events, the injury and the first actions taken. The ILO Protocol of 2002 to Convention 155 sets out what a notification contains: the enterprise and employer, the injured persons and their injuries, and the workplace and circumstances (Article 5).
How soon should an incident report be written?
Start it on the day of the accident. The ILO code of practice on recording and notification (1996) asks employers to leave the site undisturbed until the investigation begins, apart from first aid and preventing further risk. The legal deadline for notifying the authorities is set by national law, as Article 4 of the ILO Protocol of 2002 confirms, and it varies from country to country.
Are photos enough as evidence of a workplace accident?
Photos help, but ordinary ones are easy to challenge: a picture forwarded in a chat rarely shows which device took it or when, and the other side can argue it was taken after the scene changed. TrueScreen certifies photos and video captured live at the scene with a forensic methodology, and the report states the certified time of capture. Even certified images show how and when they were taken, not what caused the accident.
What is the difference between an incident report and an incident investigation?
An incident report records the facts: what happened, where, when, who was involved and what was done immediately. According to the ILO code of practice on recording and notification (1996), investigations should establish what happened, determine the causes and identify the measures needed to prevent a recurrence (paragraph 10.2.6).
Should near misses be reported?
Yes. The ILO code of practice on recording and notification (1996) asks employers to investigate all reported accidents, dangerous occurrences and incidents (paragraph 10.2.1), defining an incident as an unsafe occurrence in which nobody is hurt or only first aid is needed. ISO 45001 also asks organizations to determine whether similar incidents have occurred (clause 10.2). A near miss recorded with photos and a short statement is often the first warning of a serious accident.
Sources and verification
Every figure and principle cited here links to its source, listed with type and date. Links checked on the publication date.
| Source | Type | Date | What it supports |
|---|---|---|---|
| ILO code of practice: Recording and notification of occupational accidents and diseases | Document | 1996 | Leaving the site undisturbed and recording it before any intervention (paragraphs 10.2.4 and 10.2.5); scope and aims of investigations; definition of incident |
| ILO Protocol of 2002 to the Occupational Safety and Health Convention, 1981 (P155) | Law | 2002 | Definition of occupational accident, employer’s duty to record, national time limits and content of the notification (Articles 1, 3, 4 and 5) |
| ILO Occupational Safety and Health Convention, 1981 (No. 155) | Law | 1981 | Notification procedures by employers and insurance institutions, inquiries into serious cases (Article 11) |
| ISO 45001:2018, clause 10.2 (ISO/TC 283 FAQ) | Standard | 2018 | Reacting to the incident, dealing with the consequences, determining whether similar incidents have occurred |
| ILO News: Nearly 3 million people die of work-related accidents and diseases | Survey | 26/11/2023 | 330,000 deaths from work accidents and 395 million non-fatal work injuries a year |
| ILO OSH Statistics Issue Paper | Survey | 2025 | 2.93 million work-related deaths in 2019 (ILO estimates, 2023) |
| Regulation (EU) No 910/2014 (eIDAS) | Law | 2014 | Qualified electronic seal and qualified timestamp applied as the last step of certification |
Certify your next site inspection
Record your next site inspection or incident with the TrueScreen App: photos, video and audio certified on site, in a package anyone can verify.

TrueScreen editorial team
Published on · Updated on
This section is edited by the TrueScreen editorial team, which brings together expertise in digital forensics, the law of digital evidence and regulatory compliance. Every article is checked against primary sources: legislation, published rulings, technical standards and official documentation, always cited in the text.
Editorial Team and Methodology →


