Select a classification scheme and level. This appears on the cover page and as a header/footer marking on every page of the document.
This marking will appear on all pages and the cover page of the exported document.
Skip the full assessment and set the overall risk level directly. The badge in the Situation tab will update immediately.
| Insignificant (1) |
Minor (2) |
Moderate (3) |
Major (4) |
Catastrophic (5) |
|---|
No hazards added yet. Click "+ Add hazard" above.
lat,lng (e.g. -27.4698,153.0251) or a place name. Map link is optional for in-app preview.
Define safe houses, rally points, and RV locations. For each, specify the conditions under which it is to be used.
| Type / description | Registration | Driver | Fuel type | Pax capacity | Est. range (km) | Role / notes |
|---|
List each role required for this activity and the person assigned to fill it.
PACE = Primary, Alternate, Contingency, Emergency. Define each method in order of preference. When a method fails, escalate to the next.
Tick Recipient to include on the distribution list. Import pulls emails from Recipients tab. Push checked sends emails to Recipients tab.
| Recipient | Name | Role / call sign | Phone | Preferred comms |
|---|
Paste a comma, semicolon, or newline-separated list of email addresses.
Export contacts from Google Contacts (export as CSV or vCard), Outlook (File → Open & Export → Export to CSV), or Apple Contacts (File → Export → Export vCard). Then import the file here.
The Contact Picker API is only supported on Chrome for Android and Samsung Internet. On desktop or iOS, use one of the options above instead.
All recipients — added manually, imported, or synced from the contact register. Click ✕ to remove. ✓ = also in contact register.
No saved groups yet.
Plain text — for preview, download, and encrypted sending.
Preview the full plan as plain text. Copy it, print it, or save it to a file manually.
mailto:.Never send the password via the same app you used for the plan.
Each recipient receives a uniquely fingerprinted copy of the plan. Their email address is encoded in binary and embedded as a sequence of invisible zero-width Unicode characters scattered through the document text. These characters are completely invisible when reading the document but survive copy-paste and most editing. If a leaked copy is found, paste the plain text above to decode whose copy it was.
Note: The fingerprint can be defeated by retyping the document from scratch, or by stripping Unicode characters with a dedicated tool. It is a deterrent and forensic aid, not a guarantee.
Required for route maps, turn-by-turn directions, and location maps in exported PDFs.
Get a free token at mapbox.com → Account → Access tokens → Default public token.
The free tier includes 50,000 map loads/month.
⚠ Security: Before going live, restrict your token to your domain in the Mapbox dashboard:
Account → Access tokens → edit token → URL restrictions → add https://yourdomain.com.
This prevents others from using your token from other websites.
SMEAC is a structured briefing format used by military, emergency services, and security professionals to communicate operational orders clearly and completely. Each letter represents a section:
OnTask uses AES-256-GCM encryption — the same standard used by governments and militaries worldwide. Your plan is encrypted entirely in your browser; no data is ever sent to any server.
The encrypted text is meaningless without the password. Send the encrypted plan via one channel (email, WhatsApp, Signal) and the password via a completely separate channel (SMS, phone call). This is called two-channel security.
Each recipient receives a uniquely fingerprinted copy. If a copy is leaked, the Forensics tab can identify which recipient it came from.
Enter route start and end points as lat,lng coordinates (e.g. -27.4698,153.0251) for full turn-by-turn directions and Mapbox map images in your printed/PDF plan.
To get coordinates: open Google Maps, right-click your location, and the coordinates appear at the top of the context menu. Copy them in lat,lng format.
Map images appear in the printed plan via the Print button. The PDF export (jsPDF) currently shows route links rather than images — use Print → Save as PDF in Chrome for the best result.
Type a plan name in the Draft bar at the top and click Save. Plans are stored on this device only — they are never uploaded anywhere. Auto-save runs every 60 seconds if a name is entered.
Click Load to see all saved plans and restore one. Click New to start fresh.
Important: Clearing browser data or using a different browser/device will lose your saved plans. For critical plans, always export an encrypted copy.
1. Acceptance
By using OnTask you agree to these terms. If you do not agree, do not use the application.
2. No warranty
OnTask is provided "as is" without warranty of any kind. Atlas Risk makes no representations about the accuracy, reliability, or suitability of this tool for any particular purpose.
3. Operational use
OnTask is a planning aid only. It is the sole responsibility of the user to verify all operational information, routes, contacts, and risk assessments before acting on them. Atlas Risk accepts no liability for decisions made based on plans created with this tool.
4. Encryption
OnTask uses AES-256-GCM encryption implemented in your browser. All encryption and decryption occurs entirely on your device — no plan data is transmitted to or stored on any Atlas Risk server. The security of your plans depends on the strength of your password and the security of your device.
5. No liability for data loss
Plans saved locally can be lost if browser data is cleared, the device fails, or the application is updated. Always export encrypted copies of important plans.
6. Not for classified information
OnTask is not certified for use with officially classified government information. Do not use this application to plan, store, or transmit information classified under any government security framework.
7. Lawful use only
You agree to use OnTask only for lawful purposes. You must not use this application to plan, coordinate, or execute any illegal activity.
8. Third-party services
OnTask uses Mapbox for mapping (subject to Mapbox Terms of Service) and OSRM for routing. These services are provided by third parties and their availability is not guaranteed.
9. Changes
These terms may be updated at any time. Continued use of the application constitutes acceptance of updated terms.
10. Governing law
These terms are governed by the laws of New South Wales, Australia.
© 2025 Atlas Risk Pty Ltd. OnTask is a product of Atlas Risk. All rights reserved.