Home/Knowledge Base/Core Concepts/What is Incident Mode? - Reactive Asset Truth for Audits
Back to Core Concepts

What is Incident Mode? - Reactive Asset Truth for Audits

6 min readbeginnerLast updated: January 2, 2026

What is Incident Mode?

Incident Mode is UniAsset's reactive truth system. When an asset fails, malfunctions, or experiences a critical event, Incident Mode captures an immutable snapshot of the asset's complete state at that exact moment.

The Core Concept

Incident Mode = Instant, Tamper-Proof Evidence

When you trigger Incident Mode on an asset:

  1. Snapshot captured - Complete asset state frozen in time
  2. Record locked - Cannot be edited, deleted, or modified
  3. Evidence preserved - Ready for audits and investigations

Why Reactive Matters

Preventive vs. Reactive

Preventive MaintenanceIncident Mode
Tries to avoid failuresHandles failures when they happen
Scheduled inspectionsTriggered by events
Reduces breakdownsDocuments breakdowns
Forward-lookingEvidence of the past

Both are essential. Preventive maintenance reduces failures. Incident Mode protects you when failures happen anyway.

The Problem Without Incident Mode

When an asset fails:

  • Records are scattered across systems
  • Maintenance logs may be incomplete
  • Spreadsheets have conflicting data
  • Changes made after the incident look suspicious
  • Investigators question everything
  • Blame spreads before facts emerge

The Solution With Incident Mode

When an asset fails:

  • One click captures everything
  • Snapshot is timestamped and locked
  • Complete maintenance history preserved
  • Document validity frozen
  • Clear accountability chain
  • Investigators receive defensible evidence

What Gets Captured?

When you report an incident, this data is frozen:

Asset Information

  • Name, serial number, status
  • Category and type
  • Manufacturer, model, vendor
  • Purchase cost and date
  • Warranty status (valid, expired, none)

Assignment

  • Assigned user (at incident time)
  • Assigned location
  • Department

Maintenance

  • Last maintenance record
  • Next due date (if scheduled)
  • Maintenance description and vendor

Documents

  • All attached documents
  • Document types (warranty, license, etc.)
  • Expiry status (valid or expired at incident time)

Timeline

  • Last 10 asset events
  • Who made changes and when
  • Complete activity history

When to Use Incident Mode

Use Incident Mode when:

  • Equipment fails - Machine breaks down, vehicle accident
  • Safety incident - Any event requiring documentation
  • Compliance issue - Regulatory violation discovered
  • Audit preparation - Creating defensible evidence
  • Insurance claim - Documenting asset state
  • Investigation - Any situation requiring truth

How to Report an Incident

  1. Navigate to the asset - Find the asset in your dashboard
  2. Click "Report Incident" - Button on asset detail page
  3. Enter details:
    • Title (required) - Brief incident description
    • Severity (required) - Low, Medium, High, Critical
    • Description (optional) - Additional context
  4. Submit - Snapshot captured and locked immediately

After Reporting

Once an incident is reported:

  • View the snapshot - See exactly what was captured
  • Add investigation notes - Document findings
  • Update status - Open → Investigating → Resolved → Closed
  • Export evidence pack - Generate audit-ready report

Key Benefits

For Operations Teams

  • Immediate evidence capture
  • No scrambling for records
  • Clear accountability

For Safety Officers

  • Regulatory compliance proof
  • Complete documentation
  • Audit readiness

For Management

  • Defensible decisions
  • Protected reputation
  • Reduced liability

Common Questions

Can the snapshot be edited?

No. The snapshot is immutable (unchangeable) once created. This is the core feature that makes it audit-proof.

What if I report an incident by mistake?

The incident remains but can be marked as "Closed" with a note explaining it was created in error. The integrity of the system requires that all records persist.

Who can report incidents?

Users with asset edit permissions can report incidents. The system tracks who reported each incident.

Can I add notes after the incident?

Yes. Investigation notes can be added at any time. Notes are timestamped and attributed to the user who added them.


Next: How UniAsset Creates Immutable Asset Snapshots

Need Help?

If you have questions not covered in this article, our support team is here to help.

Contact Support