Who needs help, where they are, and who is responding.
WillowCreek turns real-time location into operational awareness, then acts on it. A duress-and-response safety runtime at its heart, a vendor-neutral location engine beneath it, and every part of it running on infrastructure you control.
- Zone
- Corridor, unzoned
- Observed by
- 0 locators
- Source
- angle of arrival
- t+0sNearest responder
- +30sTeam and supervisor
- +60sDuty manager
- +120sSite broadcast
An illustration of the mechanism, not a live feed and not customer data. The ring is the uncertainty on the fix, and it tightens as more locators observe the subject. We do not put a distance on it here, because accuracy is a property of your positioning infrastructure and its RF design as much as of the platform, and it is commissioned and verified per site.
Not another asset-tracking product
Real-time location is one enabling technology inside WillowCreek, not its purpose. The platform is a complete operational layer over people, assets, equipment, environments and events. Not just where things are, but what is happening, why, and what should happen next.
Duress & life-safety
Raise, route, escalate. Every duress is priority one from the moment it is raised, no configuration can downgrade it, and closed-loop escalation ladders never silently lapse.
How the safety runtime works →Location intelligence
Vendor-neutral by design. BLE, UWB, Wi-Fi, RFID and GNSS feeds normalise to one canonical fix, with quality, freshness and provenance attached to every position.
Inside the location engine →Rules that explain themselves
Every rule states what it does in plain language. The explanation is generated from the rule itself, so it can't drift from what the rule actually does. Test in the included lab before anything goes live.
Rules, simulation and the lab →Every screen answers the same five questions
Location without context is just noise. Whether you're an operator at 3am, a responder on a handset or an executive in a briefing, WillowCreek is built so you can answer:
What is happening?
A ranked live queue of what matters now, not a wall of dots.
Where is it happening?
Site, floor and zone: the right room rather than a confidently wrong dot.
Who is involved?
People and things, not device IDs. You never see a MAC address.
What do I need to do?
The response path is on the screen, not in a binder.
What happens next?
Escalation is visible, closed-loop, and never silently lapses.
Consolidation without lock-in
Keep the hardware you already own
WillowCreek is ingest-first. It doesn't sell you a proprietary location engine, so you're never pushed toward particular hardware to make the platform work. Every positioning technology attaches through an adapter, and incompatible vendor dialects normalise to the identical canonical fix.
No per-adapter charge, ever. An adapter is work we do with you, not an item picked from a shelf.
The adapter catalogue →Every technology, one canonical fix, with provenance attached.
We track the person, not the gadget
Identity-first tracking means the platform reasons about people and things, with any number of devices bound to them. Operators see names and roles. The plumbing of tags, badges and MAC addresses stays where it belongs, out of sight.
Identity-first tracking →One person, many devices. The customer never sees a MAC address.
Your infrastructure. Your data. Your control.
WillowCreek deploys as signed container images on your own hypervisor or bare metal. No Windows hosts, and no dependency on someone else's cloud between an alarm and the people responding. Site equipment connects locally, so a WAN problem never sits in the alarm path.
A database standby is mandatory at every scale. Backups run on a schedule, are encrypted at rest with AES-256, and are physical copies that preserve the tamper-evident audit chain byte for byte. Every backup carries an integrity manifest that is checked before any restore, and the restore path has been exercised end to end with the chain verified afterwards, because a backup that has never been restored is a hope, not a backup.
Architecture & deployment →One central installation, one compact appliance per site. No servers in the facilities.
Guarantees, not features
On a life-safety platform, the interesting engineering is what the system refuses to do.
- Nothing can downgrade a duress. No client field, rule, configuration, policy or administrative state can reduce a priority-one classification.
- No de-duplication, no inference in the alarm path. Every raise reaches a human decision.
- Escalation never silently lapses. Ladders are closed-loop and tiered; an exhausted ladder triggers an out-of-band failsafe.
- Acknowledge once, stand down everywhere. Acknowledgement stands the escalation down platform-wide: every recipient, every channel, immediately.
- Life-safety is never gated by commercial state. A licence check on a life-safety route is a startup failure, not a runtime warning.
- Honest gaps, never plausible numbers. A capability without a backend shows a visible gap. A convincing invented figure is worse than a question.
An AI-native company, with the receipts. WillowCreek is designed, built and verified with AI-accelerated engineering, and every change must clear an executable life-safety assurance gate before it ships. Product AI is being built the same way we build everything: explainable, human-supervised, and never alone in the alarm path. It will propose; people decide. How we build →
From one site to an estate
WillowCreek Guardian
The platform running at a single operating site: ingest, positioning, supervision, rules, incidents, escalation and notification, with Control Room as its live operator workspace. The site is the only hard isolation boundary in the system.
Operator surfaceWillowCreek Control Room
The staffed live-operations surface inside Guardian: a ranked alarm queue, incident detail, live map, history and replay. Dark-themed by default, because it's built for a 24-hour room.
Estate consoleWillowCreek Command Centre
The console your organisation logs into to run its own estate of sites, self-service, up to licensed capacity. Sites, policy, standards, users and roll-up reporting in one place.
Operator surfaceWillowCreek Mobile
The native staff handset app. Raise duress on the move, respond to incidents, and carry your own position with you, so responders are part of the picture rather than outside it.
Industry-agnostic by design
Terminology, object types, workflows and screens are configuration, not code. Healthcare is the reference implementation, never a hard-coded assumption.
Healthcare
Staff duress and location safety across wards, EDs and campuses. This is the platform's reference implementation.
Available todayAged care
Resident safety, wandering response and the evidence providers must show regulators. With dignity, never covert confinement.
Available todayCorrections
Officer duress and custodial accountability that will withstand coronial and oversight review.
Running todayTwelve more industries
Logistics, warehousing, retail, museums, government, mining, manufacturing, education, hospitality, smart cities, airports and ports. Specified in full, 712 use cases across all fifteen, none of them running yet.
What a real-time location system actually does
A real-time location system, RTLS, answers one question continuously: where is this person or this thing, right now. Fixed locators observe a tag, each measures its own range or bearing, and the position is whatever those measurements agree on. WillowCreek consumes that resolved position rather than computing it, which is why you keep the engine and the tags you already own.
Locators ranging on one subject. Where the measurements agree is the fix, and how well they agree is the confidence that travels with it. An illustration of the mechanism.
RTLS is the enabling layer, not the product
Most RTLS platforms stop at the dot. The map shows you where something is and leaves the rest to you. That is the gap this platform exists to close: a position on its own does not tell you whether somebody is in trouble, who is nearest, whether the fix can still be trusted, or what should happen in the next thirty seconds.
- Every technology, one model. Bluetooth angle of arrival, ultra wideband, Wi-Fi, satellite, passive RFID and long-range wide-area radio all normalise to a single canonical fix.
- Accuracy follows the question. Pooled equipment needs the right room. Telling two identical tools apart on one bench needs far more. The technology is chosen per zone and per use case rather than fixed across a site.
- Indoors and outdoors are one track. A subject crossing an entrance changes source, not identity, and the handover is a recorded event rather than a gap.
- A fix carries its own quality. Accuracy, confidence, freshness and which vendor produced it, so an aged or low-grade fix degrades to the zone rather than lying about the room.
See it answer the five questions on your site
A demonstration takes an hour. Bring your hardest floor plan.