New: Missing a mandatory risk? Then no access

Twind Product Team · August 3, 2026

Add-on · Contact your Customer Success manager to activate it.

Until now, there was no way to automatically require that a worker have a specific risk assigned before accessing your facilities to carry out the contract's work. With Mandatory Risks, Client Admins can specify which risks are mandatory for each activity — and Twind automatically blocks access if the contractor company's worker doesn't have them.

In Parameters > Risks, two new columns appear when the add-on is active: Mandatory (badge) and Mandatory for (chips with the associated activities). When creating or editing a risk, you can select the activities for which it's mandatory. If the change affects active contracts, a confirmation modal lets you choose whether it applies only to new contracts or also to existing ones — with a warning showing how many workers will be affected in each case.

The same applies in Parameters > Activities: a new column shows the mandatory risks linked to each activity, with a mirror form to associate them from the other side.

Before confirming a worker's assignment, a real-time preview shows, per contract activity, which mandatory risks are covered and which aren't. Saving isn't blocked — the Client Admin can proceed anyway. If any risks remain uncovered, the worker's access status is automatically set to Not allowed.

Both the client team and the contractor company can see which risks are missing, which activity requires them, and which contract they're associated with. Contractors also get direct shortcuts to upload documentation or assign resources.

The Access Control panel now includes a new Missing Mandatory Risks section — above the existing blocking requirements. It lists each uncovered risk with its name, the activity requiring it, and the associated contract.

Both the Client Admin and the Contractor Admin see this section. Contractors also see it in their compliance view, with direct shortcuts to upload documentation or assign resources.

Mandatory risks are evaluated per subcontracting node. A worker assigned to two different contracts must meet the mandatory risks of each one separately — compliance on one contract doesn't automatically extend to the other.

Every creation, modification, or deletion of activities and risks is logged in a read-only Changelog — with actor, timestamp, and modified values. Mandatory risk assignments are also logged, including whether the change was manual or a consequence of deleting an activity or risk.