gribitYour logbook →
← All guides

Contractor Management for Safety Records: A UK Guide

Published · gribit

Manager and contractor reviewing cellar access

Managing contractors for safety records comes down to three habits: ask for the right documents before work starts, check them against the job, and keep them somewhere you can find in minutes. The Health and Safety Executive (HSE) frames the whole job as five steps: plan the work, choose a contractor, manage them on site, keep a check, and review the work. Your records are the evidence that each step happened.

This guide is for owners and managers of small sites: pubs, shops, offices, salons and village halls. You may not have a safety department, but you do have a boiler engineer, an electrician, a fire alarm engineer or a window cleaner coming through the door.

Gribit
Keep Safety Records Together
Gribit helps small businesses record recurring safety checks, manage follow-ups and store certificates and documents in one digital logbook.
Explore Gribit

TL;DR

  • Employers must assess risks to anyone affected by their work, contractors included. If you employ five or more people, you must record the significant findings (HSE, HSG159).
  • Follow HSE’s five steps: plan, choose, manage on site, keep a check, review. Keep a record at each step.
  • Collect a short, fixed set of documents before work begins, and file them by contractor and by site.
  • Review documents by type and risk. Job-specific paperwork may need a fresh look before each project or when the scope changes.
  • One shared digital place beats email threads and paper folders, especially when staff change.

Table of Contents

What a contractor safety record actually is

A contractor safety record is the paper trail showing that you thought about the risks of a job, made responsibilities clear, and checked that the work could be done safely. It shows managers and clients what was agreed, checked or communicated (ACI Safety).

In practice that means a handful of items per contractor: proof they are competent for the job, their insurance, their risk assessment and method statement, what you told them about your premises, and a note of what happened when they were on site.

The reason to keep them is not only tidiness. The Management of Health and Safety at Work Regulations require employers to assess risks to employees and to other people who could be affected by their work. Contractors fall into that second group. If something goes wrong, or an inspector visits, the first question is what you did beforehand and whether you can show it.

The five steps and the record each one leaves

HSE’s guide to managing contractors, HSG159, sets out five steps. Here is each one, with the record worth keeping.

Step What you do Record to keep
1. Plan the work Define the job, the location, the hazards and the timing Short job brief, your own risk assessment for the area
2. Choose a contractor Check they have the competence for this specific work Evidence of competence, insurance, references or accreditations
3. Manage on site Share site information and rules, agree how the work will be done Signed-in visit, site briefing note, agreed method statement
4. Keep a check Confirm the work matches what was agreed Notes of any checks, issues and who dealt with them
5. Review Look at how it went and record lessons Completion certificate or report, follow-up actions

Notice that none of this is heavy. For a one-hour visit from a window cleaner, a few lines per step is enough. For a gas engineer or an electrician, the paperwork is more formal, because the risk and the legal requirements are higher.

Step 1: plan the work before you call anyone

Start with what needs doing and where. Which areas will the contractor enter? Will customers, staff or members of the public be nearby? Are there hazards they might not know about, such as a cellar hatch, a fragile roof, a shared fire escape or asbestos in an older building?

Write two or three lines on this and file them with the job. HSE guidance says you should give contractors site information before work begins, so it helps to have it written down rather than rely on a quick chat at the door.

Step 2: choose a contractor you can prove you checked

HSE says you should assess contractors’ competence, looking at whether they have the skills, knowledge and experience for the work, not only the cheapest quote. The level of checking should match the risk. A reputable local electrician for a rewire needs more checking than a delivery of stationery.

If you use consultants to advise on who is suitable, or you want a structured way to weigh up competence, some independent HR and people-focused diagnostics can help you frame the questions, such as selecting contractors and assessing competence with a consistent approach. Whatever method you use, keep the result with the contractor’s file.

Step 2: choose a contractor you can prove you checked

Which documents to collect before work begins

There is no single legal checklist that suits every trade, so treat this as a sensible baseline for small sites and add to it for higher-risk work:

  1. Proof of competence. Relevant registration or accreditation for the trade (for example gas or electrical registration where the work requires it), plus a note of recent similar jobs.
  2. Insurance. Public liability certificate with the cover dates visible. Employers’ liability too, if they employ staff.
  3. Risk assessment. Theirs for the task, which should cover people other than themselves.
  4. Method statement. How the work will be done, step by step, for anything with meaningful risk. Together these are often called RAMS.
  5. Health and safety policy or summary. Particularly where they work in your premises regularly.
  6. Subcontractor details. Whether they intend to bring anyone else, and who that is.
  7. Emergency and contact details. Who to call on the day.
  8. Your own site information. What you gave them: fire exits, assembly point, hazards, rules. Keep a copy of what you sent and when.

Asking for the same eight items every time makes the process quick for you and predictable for contractors. Most competent tradespeople have them to hand.

Step 3: manage the work on site

On the day, the aim is simple: the right person is on site, knows the rules, and does the work the agreed way. HSE guidance says to reinforce health and safety information and site rules, not only mention them once.

For small sites that usually means:

  • A sign-in with date, time, name and company.
  • A named person on your side who looks after the contractor.
  • A quick briefing: where the fire exits are, where not to go, how to raise a problem.
  • Confirming the work will follow the method statement you accepted.

A signed-in visitor entry and a two-line briefing note are valuable records if there is ever a dispute about what was said.

Step 4 and 5: keep a check, then close the job

Checking does not need to mean standing over someone. Look at whether the work matches what was agreed, and note anything that did not. If a contractor leaves a hazard behind, such as an open ceiling tile or an unmade electrical connection, record it, assign it to someone and mark when it was fixed.

Open ceiling tile showing an unresolved hazard

At the end, file the completion paperwork: the certificate, report or invoice detail that shows what was done. Add a line on how it went. Would you use them again? Did anything need chasing? HSE’s fifth step is to review the work and record lessons, and those notes make your next selection faster.

Completion certificates matter most for recurring checks, such as fire alarm servicing, emergency lighting tests or electrical inspections. They tell you when the next one is due, which is where many small sites slip.

Storing contractors’ risk assessments and RAMS

Storing risk assessments is partly a legal point and partly a practical one. Employers with five or more employees must record the significant findings of their risk assessments (HSE). For a contractor’s own assessment, the practical rule is to keep it with the job it relates to, so you can show what you accepted and when.

It helps to understand what a good one contains. If you want an example of what a risk assessment must cover for a specialist activity, this article on what a risk assessment must cover shows how hazards, controls and responsibilities are documented for a particular job type. The same logic applies to any trade: identify what could go wrong, who could be harmed, and what controls are in place.

How often to review stored documents

Not all paperwork ages the same. Review documents according to their type and risk. Job-specific RAMS may need a check before each project or when the scope changes, while a general company policy can be reviewed less often (ACI Safety).

A workable pattern for a small site:

  • Insurance certificates: check the expiry date every time a contractor returns.
  • Registrations and accreditations: check at selection and when the contractor is re-engaged after a gap.
  • RAMS: review before each job, and again if the work changes.
  • Completion certificates: file immediately and diarise the next due date.

How long to keep records

Retention depends on the type of record. Health surveillance records and accident records, for example, have their own longer retention expectations, and the right period for a given document is best confirmed against HSE guidance at hse.gov.uk for your situation. As a habit, do not delete contractor paperwork the moment a job ends. Keep it in an archive you can search, and agree a retention period for each document type with your insurer or adviser.

Who should be able to see the records

Different people need different documents at different times. The person on reception needs the sign-in and contact details. The manager needs the full file. Whoever covers during holidays needs to find the insurance certificate without ringing you.

That last point is the real test of any system. If the only person who knows where the gas safety certificate is happens to be on leave, you do not have a system, you have a memory. Shared access, with clear roles, is what makes records usable when staff change.

What a contractor compliance app should do

There is no shortage of software labelled contractor management, and much of it is built for large construction projects with hundreds of subcontractors. A small site needs less, but it needs it to work well. Look for:

  • One place for documents. Certificates, insurance, RAMS and reports stored together, not scattered over inboxes.
  • Organisation by site, item and location. So you can find the fire alarm certificate for the back building, not just every PDF with the word fire in it.
  • Reminders. Automatic prompts before something expires or a recurring check falls due.
  • Follow-up tracking. A way to log an issue, assign it and see it closed.
  • Staff access. Different people can see and update records without sharing a single login.
  • Export. The ability to produce records for an insurer, landlord or inspector quickly.
  • A price that fits. Small businesses should not need an enterprise contract to keep tidy records.

Why paper and spreadsheets struggle

Folders and spreadsheets work until they do not. A paper binder goes missing. A spreadsheet shows an expiry date but nobody is nudged to act on it. An email attachment is buried when a new manager takes over. The failure is rarely dramatic. It is usually a certificate nobody could find on the day it was needed.

Our view

We built Gribit around a simple observation: most small businesses do not fail at safety checks because they do not care. They fail because the checks and paperwork live in someone’s head, a drawer or an old email thread.

Contractor visits are a good example. The engineer comes, does the work, leaves a certificate, and the next due date is a vague memory. Our approach is to put recurring checks, follow-up actions and the supporting certificates and documents in one logbook, with reminders that do the remembering for you.

We think automation should take the admin so that you can spend your time fixing issues. And we think handover should be easy: when a manager leaves or a new member of staff joins, the records stay put and the next person can pick up where the last one stopped.

That is why we focus on shops, pubs, offices, salons and village halls. These are the places where one person often does everything, and where a clear, simple record matters more than a complicated system.

Jon

Keeping contractor records in Gribit

Gribit is a digital logbook for small businesses. You schedule recurring safety checks, record results, manage follow-up actions and store the certificates and documents that go with them, such as a fire alarm servicing certificate or an inspection report. You can assign staff access, set automatic reminders, export records, and organise everything by site, item or location.

The annual plan is £49 per site per year.

Gribit

If you want your contractor certificates and recurring checks in one place, you can start with the Gribit site logbook.

A simple routine to start this week

You do not need to rebuild everything at once. Try this:

  1. List every contractor who visits your site in a year, from the fire alarm engineer to the cleaner.
  2. For each, note which of the eight documents you already hold.
  3. Fill the gaps, starting with insurance and anything tied to a legal check.
  4. Set a diary date or reminder for each expiry and each recurring service.
  5. Agree who can see and update the records, and make sure a second person knows where they are.
  6. After each visit, add a one-line review: what was done, any follow-up, and when it is next due.

Once the habit is in, a typical new contractor takes ten minutes to onboard and the file is ready if anyone asks.

FAQ

What contractor compliance documents should I ask for?

At minimum, ask for proof of competence for the trade, public liability insurance, a risk assessment and method statement for the task, and details of any subcontractors. Add trade-specific registrations where the work needs them. Keep a copy of the site information you gave them too.

Do I have to keep a written risk assessment for contractors?

Employers must assess risks to people affected by their work, including contractors. If you have five or more employees, you must record the significant findings (HSE). Even with fewer, a written note is the easiest way to show what you considered.

How do I choose between contractors on safety grounds?

Compare their competence for the specific job, not just price. Ask for evidence such as accreditations, relevant experience, insurance and sample method statements. HSE guidance says to focus on the competence the work requires and to ask for evidence.

How often should I review contractor paperwork?

It depends on the document. Job-specific RAMS may need a review before each project or if the scope changes, while general policies can be reviewed less often. Always check insurance dates when a contractor returns.

Is a spreadsheet enough for contractor records?

It can work for a short list, but it relies on someone remembering to check it. A system that stores the documents beside the checks and sends reminders makes handover and inspections easier.

Sources