Localización que el equipo de seguridad puede defender en una auditoría.

Reguladores y aseguradoras miran el tiempo hasta el conteo verificado, rutas de escalado ensayadas y logs de zona inmutables — no la cosmética del mapa. Un programa de localización se gana el sitio cuando los marshals cierran un muster en minutos y una alerta de duress de trabajador solo llega a alguien que sabe qué hacer.

Eso implica sync de roster (incluidos contratistas), honestidad de cobertura en sótanos y zonas Faraday, y hardware certificado para el peligro (ATEX/IECEx cuando aplique).

Musters con portapapeles, sensibilidad man-down opcional que llora al lobo, y geocercas que ignoran permisos en vivo. Crean falsa confianza — peor que no tener sistema.

Separamos reunión, acceso a zonas y trabajador solo como trabajos relacionados pero distintos — para que no compre un producto y espere tres resultados. Ver reunión, seguridad del trabajador solo y acceso a zonas.

Diseñar la exportación de auditoría el día uno: quién estaba dónde, cuándo, bajo qué permiso, y cuánto hasta el muster verificado. Si solo vive en una GUI del vendor, pierde el argumento de auditoría.

Ejemplos compuestos en minería, energía y utilities muestran el patrón de medición — luego baselinamos sus sedes.

Empezar por el deber de cuidado y el calendario de drills. RF y elección de vendor vienen después. La independencia importa: no ganamos margen con el hardware que se quedará en zona peligrosa.

Partir del deber de cuidado y del calendario de drills: tiempo hasta conteo verificado, árbol de escalado a las 02:00, sync de inducción de contratistas y logs de zona inmutables. Radios y vendors después. El hardware en áreas peligrosas necesita certificación donde sea obligatoria — UWB de folleto sin eso no es arquitectura de seguridad.

Separamos reunión, acceso a zonas y trabajador solo como trabajos relacionados pero distintos — para que no compre un producto y espere tres resultados.

EHS leaders buy faster accountability and audit evidence — not another badge novelty. Criteria for lone-worker, mustering and zone programmes:

• Use-case clarity — SOS/man-down, restricted-zone alerts, automated mustering, contractor control — each with mandated response times.
• Drill-proven performance — worst-zone detection, false-alarm rates and muster latency measured in live drills.
• Integration to EHS and access — escalation into the systems you already run; PPE/training checks at geofences where required.
• Hazardous-area and offline behaviour — certifications and failover that match the site, not the brochure.
• Privacy-aware design — purpose limitation agreed with the DPO before continuous staff location is enabled.

Safety vendors sell wearables; RTLS vendors sell coverage; SIs sell install. EHS should buy evidence packs that survive an auditor and a night drill.

• Mustering that works in a tabletop and fails when contractors and shift changes are present.
• Man-down sensitivity tuned in an office, flooding the control room with false alarms on the floor.
• No works-council or employee notice path where staff location is identifiable.
• Battery and charging rituals that leave tags dead at the worst moment.
• Alerts without closed-loop response ownership and timestamps.

• Show muster verification time and missing-person detection from a real drill at similar headcount.
• What are false-positive rates for man-down under our motion profiles?
• How do alerts escalate into our EHS/incident platform — and what if the network is degraded?
• Retention, access and purpose limitation: defaults that match our DPIA, not product marketing.
• Hazardous-area certifications for every wearable and gateway in scope.

We design locating for safety outcomes and audit evidence first — vendor-neutral on UWB, BLE, RFID or hybrid. No hardware margin means we will not upsell badges you do not need. Drill criteria and privacy constraints are written before radios are ordered.

Lone-worker and mustering vendors emphasise wearables, man-down sensors and dashboards. RTLS vendors emphasise sub-metre location. SIs emphasise coverage maps and install speed. Safety leaders should discount any pitch that cannot show drill evidence: muster verification time, missing-person detection, false-alarm rates and escalation latency under realistic headcount — including contractors and night shift.

Regulatory pressure (process safety, lone-worker rules, evacuation accountability) makes audit trails as important as live maps. A system that cannot produce time-stamped response evidence will not survive the next investigation. Pair that with privacy: continuous staff location for safety needs a documented purpose and DPIA path, especially in EU works-council jurisdictions.

Hazardous-area certification, battery life under continuous monitoring, and offline or degraded-network behaviour belong in the shortlist matrix — not as footnotes after award.

Prioritise outcomes EHS can defend: automated mustering that shrinks verification from tens of minutes toward minutes; lone-worker SOS with known location; restricted-zone alerts tied to training or PPE state; and incident replay for learning. Choose RFID chokepoints where presence is enough; choose UWB/BLE where room-level or sub-metre response matters. TRACIO remains vendor-neutral so the radio follows the hazard profile — not a catalogue push.