Who has to verify that a contractor is suitable for the work?

The client, as the organization that brings the contractor into its workplace. The duty to verify technical and professional suitability before the award comes from the national law transposing the European directives, which also sets its form and content. Directive 89/391/EEC establishes cooperation, coordination and mutual information between employers sharing a workplace, while ISO 45001 is a voluntary standard that, where it is adopted, asks for criteria for the selection of contractors. On construction projects, Directive 92/57/EEC assigns specific duties to the client or project supervisor, including the appointment of coordinators.

Is collecting the documents required by law enough?

It satisfies the formal part of the duty. What stays with the client is the judgment about whether the contractor's technical capacity matches the work awarded, which documents alone do not demonstrate.

What happens if a contractor loses a requirement during the contract?

The initial qualification remains on file while the current position changes. An expired insurance policy, a lapsed prequalification certificate, training that was not renewed or a measure ordered by the inspection authority all alter the contractor's status without the client being notified. This is why the check is dated and repeated, rather than performed once at the award.

How often should contractor documents be re-checked?

No general rule sets an interval. A workable approach is to attach the expiry date to each document and let that date drive the review, with a check at every entry for the requirements that have to hold on the day the work is performed, such as operator competence and equipment inspection.

Contractor safety management: people and equipment outside the payroll

When an external company starts work on site, part of the duty stays with the client and does not transfer with the contract: checking that the contractor is suitable for the work, informing it about the risks of the environment, cooperating and coordinating the protective measures with it. For an EHS manager, a site manager or whoever owns the contractor relationship, contractor safety management means controlling requirements that belong to people and equipment recorded in no internal register.

The check is performed when the work is awarded. The requirements behind it can lapse while the work is running, and the client is rarely told. What follows sets out what the client is expected to verify, what changes between the award and the day the work is actually performed, and where documentary evidence stops.

A contractor’s qualification starts aging the day it is issued

For internal staff, structural compliance links every worker to the contexts they work in, whether jobs, work phases or groups with a similar exposure. Each context generates the requirements to be met, and each requirement its own expiry date. With external companies the same structure has to cover organizations the client does not direct, whose hiring it is not told about and whose document dates it does not see.

The question is the one asked about internal staff: does this company hold the requirements the awarded work calls for, and does it still hold them today? What changes is where the answer comes from. It arrives from a third party, in the form of documents, and it is valid as of the date those documents were produced.

Five things commonly move after the award.

Insurance cover: the policies covering the contractor’s liability toward its own workers and toward third parties run to a renewal date set by its insurer.
Prequalification certificates: where a contractor is assessed by a third-party scheme or held on a client register, that assessment is valid for a limited period, often a year, so a contractor approved in good standing can fall outside it between one job and the next.
Operator competence: training and certificates of competence expire on a calendar managed by the operator’s employer, which may fall in the middle of a contract.
Equipment inspection: Directive 2009/104/EC requires periodic inspection for equipment exposed to conditions that cause deterioration, and for equipment whose safety depends on how it is installed. Those intervals run on a calendar the client does not see.
Enforcement action: a measure ordered by the inspection authority, up to the suspension of an activity, changes a contractor’s standing immediately and reaches the client only if someone passes it on.

Structural compliance on a supplier is set once, while operational compliance is verified at every entry, because that is what establishes whether the requirements collected are still satisfied.

Verification at award works on three levels

The duties behind the check come from two sources. Article 6(4) of the Framework Directive 89/391/EEC requires employers who share a workplace to cooperate, to coordinate their protective and preventive measures and to inform each other of the risks involved. The obligation to verify a contractor’s technical and professional suitability before the award, together with the form that verification takes and the evidence it calls for, is set by the national laws transposing the directives. ISO 45001:2018 turns workplace coordination into a management requirement, asking the organization to coordinate its procurement processes with contractors and to apply criteria for their selection. On construction projects Directive 92/57/EEC adds a further layer, with duties on the client or project supervisor, the appointment of coordinators and a safety and health plan prepared before the site opens.

In practice the check falls into three levels.

The company. Legal existence and scope of business, insurance, the safety arrangements it operates under, its incident record, references on comparable work.
The awarded task. The method of work and the risk assessment for that specific activity, the interface risks it introduces into the host environment, the coordination arrangements, any permit to work the task requires.
The people and equipment arriving on site. Evidence of competence for the individuals who actually turn up, identification on access so that the people present can be matched to the company engaged, inspection records for the equipment they bring with them. Work equipment used away from the undertaking has to travel with physical evidence that the last inspection was carried out, which is the document to ask for at the gate.

The three levels add up. A company qualified on paper can send operators whose competence has lapsed, and a company whose operators are all current can bring in a machine whose last inspection is out of date.

Where national law lists the minimum documents to be collected, that list is the floor of the check. If the nature of the work justifies it, the client can ask for more, including evidence no list names.

Documents prove less than the practice suggests

Collecting documents satisfies the formal part of the duty, the part that can be standardized, delegated and archived. Taken together, a complete file attests that the company exists and with what object, that it was insured and assessed as of the date of each document, that it declares it holds the requirements, and that no enforcement action was recorded against it at that moment.

What remains open is whether the company is suited to the work being awarded. ISO 45001 asks the organization to define and apply criteria for selecting contractors, and a criterion is a judgment about fit, which an archive does not produce on its own.

A comparable logic appears in US enforcement practice. The multi-employer citation policy, a directive addressed to OSHA’s own compliance officers, treats the employer controlling a site as expected to exercise reasonable care to prevent and detect violations by the other employers working there, with the standard measured against what it could have identified without specialist expertise. That employer is not expected to supervise every technical aspect of the work.

Three practices that keep contractor requirements current

Record the expiry date, not only the document. For every document collected from a supplier, note the date on which it ceases to be valid and treat it like the expiry of an internal training record. Sorted by expiry date, the file shows at once which suppliers are about to lose a requirement, early enough to ask for the renewal before they present themselves at the gate.
Let the supplier produce its own update. The renewed document is issued to the contractor, so the contractor is the one who can supply it first. It is worth checking whether the system in use allows a supplier to upload the new version itself as the previous one approaches expiry, instead of waiting for a request.
Start from the task being awarded. Before deciding which documents to ask for, describe the activity and the risks it introduces into the host environment. A statutory minimum list is where the check starts, and for some activities it is not where it ends.

An operational view

Whatever tool is adopted, what the client needs is for a third party’s expiry date to behave like an internal one, with a date, an owner and a warning that arrives before the deadline. As long as supplier documents sit in a folder of their own, separate from the rest of the management system, their review depends on the memory of whoever conducts it.

A system can make visible the distance between the initial qualification and the current situation: what has expired, what expires shortly, which document is missing against those expected for that type of award. The decision that follows belongs to whoever answers for the contract. Suspending an access, stopping an activity or accepting the risk for the time a renewal takes are judgments no automation replaces.

In 4HSE, for example, a supplier is an entity in the system, to which procedures are assigned, such as the delivery of an insurance certificate. The supplier attests that it has carried out the procedure with a dated certificate, which becomes valid only after a manager on the client side approves it. The resulting deadlines appear in the same planner as internal activities, with the same states and the same advance notice, and notifications reach the people who hold a role on that procedure.

References

Standards and legislation

ISO 45001:2018, clause 8.1.4.2, contractors — coordination of the procurement processes with contractors to identify hazards and to assess and control risks, and criteria for the selection of contractors.
ISO 45001:2018, clause 8.1.4.3, outsourcing — control of the outsourced functions and processes.
ISO 45001:2018, clause 7.2, competence — applied to persons performing work under the control of the organization.
Council Directive 89/391/EEC, Article 6(4) — cooperation, coordination of protective and preventive measures and mutual information where several undertakings share a workplace.
Council Directive 92/57/EEC on temporary or mobile construction sites — duties of the client and project supervisor, appointment of coordinators, safety and health plan, prior notice.
Directive 2009/104/EC on the use of work equipment, Article 5 — periodic inspection of equipment exposed to conditions causing deterioration or dependent on installation conditions, inspection after exceptional circumstances, and physical evidence of the last inspection for equipment used outside the undertaking.
OSHA, Multi-Employer Citation Policy, CPL 02-00-124 — an enforcement directive addressed to OSHA compliance officers: controlling employer and the reasonable care standard.

Further reading on 4HSE

Business

Roles

Sectors