Updated 4 October 2026 · Planning guidance for workflow, connectivity, integration, records and acceptance decisions.
Shift handover is one part of a site's wider safety-management system. A digital workflow can make assigned actions, acknowledgements and unresolved items easier to review, but the form or app must not replace permits, isolation procedures, supervision or other controls required by the operation.
Start with the handover decisions
Map what the outgoing and incoming crews must understand and act on before choosing screens or automation. A discovery session can identify:
- which roles prepare, review and acknowledge each handover item;
- how active hazards, isolations, permits, defects and unfinished work are represented and assigned;
- what information is essential, who may see or change it, and what must be escalated;
- what happens when information is incomplete, disputed, duplicated or overdue; and
- which existing safety, maintenance and records systems remain authoritative.
These decisions should be reviewed against the site's safety-management system and applicable current requirements. See the official Western Australian Work Health and Safety (Mines) Regulations and, for Queensland coal mining, the Coal Mining Safety and Health Act 1999. These links are starting points for the current rules, not an interpretation of site obligations.
Assess connectivity and offline requirements
List where the workflow must operate, the devices and app runtime in use, and what users must be able to do without a connection. Offline behavior depends on the selected app and data design. Microsoft's documentation distinguishes Dataverse mobile offline from patterns for other connectors and describes limitations for offline-enabled canvas apps.
- test the chosen workflow on target devices and in representative connectivity conditions;
- show users which changes are saved locally, waiting to sync, rejected or in conflict;
- define safe retry, duplicate prevention and reconciliation for interrupted sync; and
- test device loss, account changes, access removal, attachments and recovery.
Review Microsoft's current guidance for mobile offline in canvas apps and offline limitations before selecting an architecture. Do not assume that every connector, flow or browser continues to work offline.
Design data, integrations and failure handling
A data model should reflect the site's real records and decisions rather than force every work type into one generic form. Identify the owner, source of truth, status changes, access roles, required evidence and retention rule for each record.
If a maintenance or enterprise system integration is in scope, first confirm its supported interface, authentication, available fields, licensing, environment, error responses and support owner. Define what users should do when a request is not accepted, and how to reconcile retries without creating duplicate work orders. Keep safety-critical release or isolation decisions within the site's approved process.
Related technical services include Power Apps and Dataverse consulting, Power Automate workflow consulting and Power BI reporting.
Set records, privacy and retention rules
Decide which handover information is a business or safety record, who owns it, who can access it, and how long it must be kept. The appropriate period depends on the record, site policy, legal obligations and any hold; do not apply a generic retention period without review.
Where personal information is involved, the OAIC's APP 11 guidance explains security and destruction or de-identification considerations, including exceptions where retention is required. Microsoft Purview supports configurable retention labels and, where set up, disposition review; product configuration does not decide the site's legal retention obligations.
Use a staged pilot with explicit acceptance
Sequence the work so site owners can review each decision before the next phase:
- Map: document user roles, current handover records, safety controls, systems and exceptions.
- Prototype: test the form, permissions and integration boundaries with non-operational or approved test data.
- Validate: exercise offline use, sync failures, duplicate submissions, device recovery, access changes and audit history.
- Pilot: have the site nominate accountable reviewers, acceptance evidence, training, rollback and the conditions for any later rollout.
Measure an agreed baseline before evaluating a change. Useful measures may include handover completion, overdue acknowledgements, missing information, sync exceptions and integration failures. Report the observation window and sample size; do not treat a prototype or a modelled estimate as a measured safety or productivity outcome.
Dataverse Mobile Offline Architecture & Sync Conflict Resolution
Designing digital handovers for remote Australian mining operations—such as open-cut iron ore pits in the Pilbara or underground nickel operations in the Goldfields—requires engineering for intermittent or completely severed network connectivity. In these environments, workers cannot rely on cloud-connected web browsers.
The solution architecture must employ Dataverse Mobile Offline profiles with explicit data synchronization rules:
- Scoped Profile Filters: Configure mobile offline filters to download only the active shift's operational records, open hazard reports, active permits, and asset rosters relevant to the logged-in supervisor's functional location, preventing multi-gigabyte sync delays over satellite links.
- Tamper-Proof Local Caching: All offline records are stored in an encrypted local database on the ruggedized field tablet, protected by Microsoft Intune Mobile Application Management (MAM) policies enforcing biometric authentication and remote wipe capabilities.
- Delta Synchronization: When the tablet re-enters Wi-Fi range (such as at the crib room or pit-top office), background synchronization uploads queued JSON payloads using incremental delta tokens rather than full table re-fetches.
| Failure Mode | Operational Risk | Architectural Mitigation |
|---|---|---|
| Network Disconnect During Submission | Handover record stuck in local queue; incoming crew unaware of pending updates. | Local visual indicators ("Pending Sync"); Bluetooth peer-to-peer verification or mandatory verbal verbalization confirmation gate before crew release. |
| Concurrent Edit Conflict | Incoming supervisor overwrites outgoing crew hazard log before sync finishes. | Immutable shift log partitioning; each shift creates a dedicated record. Edits to past shifts append timestamped addendums rather than overwriting fields. |
| Unacknowledged Critical Hazard | Incoming crew commences work without reviewing High-Potential Incidents (HPIs). | Automated Power Automate SMS/Teams escalation to Site Senior Executive (SSE) if critical hazard acknowledgment is overdue by >15 minutes post-shift start. |
| Field Tablet Hardware Failure | Loss of unsynced pre-start notes and inspection photos during vehicle rollover or drop. | Standard operating procedure requiring immediate verbal brief, manual backup paper logbook, and secondary supervisor sign-off on replacement unit. |
Frequently asked questions
Can a Power Apps handover form work offline?
Sometimes. Offline support depends on the app type, data source and runtime. Review Microsoft's current guidance and test the selected design on target devices, including queued changes, sync errors and recovery.
Does a digital handover app by itself meet mine safety requirements?
No. Map the workflow to the applicable jurisdiction, mine type and site safety-management requirements, then have its controls and records reviewed by competent site and legal advisers.
Can it connect to a maintenance system?
Potentially, after confirming supported interfaces, identity, data fields, licensing, error handling, duplicate prevention and operational ownership.
How long does implementation take?
Timing depends on workflow scope, devices, connectivity, integrations, security, records requirements and site acceptance. Define those inputs during discovery before estimating a pilot or rollout.
Related mining workflow example
The Metro Mining case study documents a procurement requisition workflow. It is a separate use case and is not evidence of a mine-site safety or shift-handover deployment.
Planning a mine-site workflow?
Discuss the current process, user groups, devices, systems and acceptance constraints before selecting a digital design.