What this is
What is contractor onboarding?
What is contractor onboarding?
The process of approving a contractor organisation to work on site and preparing for their people to arrive: verifying competence and documentation, exchanging hazard information in both directions, and completing induction and site-specific briefing before work begins.
What is the controlling employer concept?
Under OSHA's multi-employer citation policy, an employer with general supervisory authority over a worksite can be cited for hazards affecting other employers' workers, based on whether it exercised reasonable care through periodic inspections and a system for correcting hazards. Every US circuit has now recognised that authority.
Scope
When is a contractor onboarding checklist required?
This covers approval and first arrival. The permit and the work itself sit separately.
Use this template when
- Approving a contractor organisation before engagement
- Verifying insurance, competence, accreditation and safety performance
- Exchanging hazard information in both directions before work begins
- Inducting the individuals who will attend, before their first day
- Re-verification on renewal, ownership change or a change of key personnel
Do not use it for
- The permit to work, authorising a specific activity on a specific day
- Contractor work orders, which define the work to be performed
- Site visitor arrangements, which cover people not performing work
- Procurement and commercial terms, which allocate liability rather than manage risk
- Ongoing supervision and monitoring, which follow onboarding
Compliance mapping
Which ISO 45001 cl.8.1 requirements does this satisfy?
Contractor management combines coordination duties, multi-employer liability and standard-specific information exchange requirements.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1.4.2 | Coordination of the procurement process with contractors to identify hazards and control risks | Before approval |
| OSHA CPL 02-00-124 | Multi-employer citation policy: creating, exposing, correcting and controlling employer categories | Header |
| 29 CFR 1910.147(f)(2) | Energy control information exchange between host and contract employers | Before first day |
| 29 CFR 1910.146(c)(8) | Confined space information exchange in both directions | Before first day |
| 29 CFR 1910.119(h) | Process safety management contractor obligations for host and contract employers | Documents |
| ISO 45001 cl.7.4 | Communication with persons who are not workers but are affected by the organisation's activities | Before first day |
| CDM Regulations 2015 | Duties on clients, principal designers and principal contractors for construction work (GB) | Before approval |
| ISO 45001 cl.9.1 | Monitoring and measurement, including contractor performance evaluation | Result |
What it does not cover
- The permit to work, authorising a specific activity on a specific day.
- Contractor work orders, defining the work to be performed.
- Visitor arrangements, covering people who are not performing work.
- Commercial terms and indemnities, allocating liability without reducing risk.
- Ongoing supervision, which follows onboarding rather than forming part of it.
How to complete it
How to complete a contractor onboarding checklist, step by step
Verify the company, exchange information both ways, and check the people at the gate.
Approve the organisation once, with insurance, accreditation, competence evidence and safety performance. Admit individuals separately, each time, with induction, task competence and confirmation that they have been briefed on your hazards. Collapsing the two produces a file about a company and no knowledge of who is on site.
Your hazards to them, and theirs to you. The second direction is required explicitly in several standards and is nearly always missing, which is how a contractor's hot work, chemical use or isolation activity introduces a hazard the site has not planned for and does not know about.
A verified contractor supplying labour through an agency introduces people no part of your process has examined. Requiring disclosure, and applying the same individual checks to subcontracted labour, closes the gap that most reliably defeats contractor management.
Where you are the controlling employer, the position depends on having exercised reasonable care: periodic inspections of the work, a system for correcting hazards found, and enforcement. That is an activity record. A thorough approval file with no evidence of anyone having looked at the work does not demonstrate it.
What auditors find
Most common contractor onboarding checklist findings
Contractor findings concentrate on the individuals and on evidence of oversight.
| Finding | Clause | What fixes it |
|---|---|---|
| Company approved but attending individuals not inducted. | ISO 45001 cl.8.1.4.2 | Induction attaches to people; check at the gate, every time. |
| Subcontracting not disclosed or not subject to the same checks. | ISO 45001 cl.8.1.4 | Require disclosure; agency-supplied labour is the gap that defeats the process. |
| Hazard information exchanged in one direction only. | 1910.147(f)(2) | Both directions are required; the contractor's hazards reach your people too. |
| No periodic inspection of contractor work by the site. | OSHA CPL 02-00-124 | Reasonable care as a controlling employer is evidenced by looking, not by filing. |
| Hazards found in contractor work with no system for correction. | OSHA CPL 02-00-124 | An effective system for correcting hazards is part of the reasonable care test. |
| Competence verified at company level for task-specific work. | ISO 45001 cl.7.2 | Task competence attaches to individuals; verify for the work being performed. |
| Approval not re-verified after ownership or key personnel change. | ISO 45001 cl.8.1.4 | Capability sits with people; both are re-verification triggers. |
| Familiar contractors admitted without the check being performed. | ISO 45001 cl.8.1.4 | Familiarity is the failure mode; the van is recognised and the check is skipped. |
| Contractor incidents and near misses not captured in site reporting. | ISO 45001 cl.10.2 | They perform much of the higher-risk work; their events are the ones you need. |
| Insurance and accreditation lapsing between reviews. | ISO 45001 cl.8.1.4 | Track expiry rather than reviewing annually; cover lapses mid-cycle. |
Case in point
Case in point: the controlling employer test
OSHA's multi-employer citation policy identifies four categories: the employer who created the hazard, the one whose employees were exposed, the one responsible for correcting it, and the controlling employer with general supervisory authority over the site. Every US circuit has now recognised the agency's authority to cite on this basis.
For a site engaging contractors, the controlling employer test is the one that matters, and it does not turn on documentation. OSHA considers whether the employer conducted periodic inspections of the work, implemented an effective system for correcting hazards found, and enforced compliance by other employers on the site.
A comprehensive approval file, insurance certificates, accreditations and signed method statements, does not answer any of those three questions. They are answered by evidence that somebody went and looked.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
5 sections
- Reference
- CON-040
- Archetype
- Checklist
- Record ID
- CON-2026-000
- Scoring
- Steps complete
- Direction
- High is good
- Singleton
- Yes
- Basis
- ISO 45001 cl.8.1
- Links
- Links Prequalification, Induction, Insurance
- Tags
- Contractor, Onboarding
- Sections
- 5
- Fields
- 40
- Follow up fields
- 3
- Repeating sections
- 0
- Links out
- 3
Header
9 fieldsChecklist ID*
Auto sequence. Format CON-2026-0000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Contractor*
Vendor ID*
Format VEN-0000.
Links to FDN-005 Vendor ID
The List That Stops An Urgent Breakdown Becoming An Unapproved Contractor
Under time pressure people skip steps. Having the whole sequence on one page makes the gap visible before somebody walks through the gate.
Before approval
6 fieldsNeed Defined And Scope Written*
- Yes3 pts
- Partly1 pt
- No0 pts
Risk Tier Assigned*
- Low3 pts
- Medium2 pts
- High1 pt
- Critical0 pts
Prequalification Questionnaire Sent*
- Yes3 pts
- Partly1 pt
- No0 pts
Questionnaire Returned And Reviewed*
- Yes3 pts
- Partly1 pt
- No0 pts
Safety Statistics Reviewed*
- Yes3 pts
- No0 pts
References Taken*
- Yes3 pts
- No0 pts
Documents
6 fieldsInsurance Certificates Verified*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Workers Compensation Clearance Obtained*
- Yes3 pts
- Partly1 pt
- No0 pts
Safety Programme Reviewed*
- Yes3 pts
- Partly1 pt
- No0 pts
Subcontractor Declaration Received*
- Yes3 pts
- Not applicable3 pts
- No0 pts
Method Statement Received*
- Pass2 pts
- Partial1 pt
- Fail0 pts
- N/Aexcluded from denominator
Contract And Indemnity Signed*
- Yes3 pts
- Partly1 pt
- No0 pts
Before first day
6 fieldsApproval Record Completed*
- Yes2 pts
- No0 pts
- N/Aexcluded from denominator
Added To Approved List*
- Yes3 pts
- No0 pts
Security And Reception Notified*
- Yes3 pts
- No0 pts
Induction Booked*
- Yes3 pts
- Partly1 pt
- No0 pts
Competency Evidence Received*
- Yes3 pts
- Partly1 pt
- No0 pts
Pre Work Meeting Held*
- Yes3 pts
- Partly1 pt
- No0 pts
Result
13 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Contract Owner*
Signature*
Procurement*
Second Signature*
CON-040 · record IDs look like CON-2026-000 · Links Prequalification, Induction, Insurance
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
Onboarding approves a company and admits people. What fails is the individual nobody checked and the work nobody looked at.
Separates company approval from person admission, tracks document expiry rather than annual review, and requires subcontracting disclosure.
Runs the two-way hazard exchange and records periodic inspection of contractor work, which is the reasonable care evidence.
Holds induction and task competence per individual, including agency-supplied labour arriving at short notice.
Captures contractor incidents and near misses in site reporting, where much of the higher-risk work sits.
This template lives in KnowContractor — contractor management. Prequalification, approval, induction, permits and performance.
Meet KnowContractor→Glossary
Contractor Onboarding Checklist definitions and key terms
- Controlling employer
- An employer with general supervisory authority over a worksite, including power to correct hazards or require correction.
- Multi-employer citation policy
- OSHA's framework under which creating, exposing, correcting and controlling employers may each be cited.
- Reasonable care
- The controlling employer defence, evidenced by periodic inspection, a correction system and enforcement.
- Information exchange
- The two-way transfer of hazard information between host and contract employers, required explicitly in several standards.
- Company approval
- Verification of an organisation's insurance, accreditation, competence and safety performance.
- Person admission
- Verification that an individual attending has been inducted and is competent for the work, performed each visit.
- Subcontracting disclosure
- Requirement that a contractor declares labour supplied by others, which the onboarding process must then examine.
- Prequalification
- Assessment of a contractor before engagement, distinct from what is verified on the day.
FAQ
Frequently asked questions about contractor onboarding checklist
What is the difference between approving a company and admitting a person?+
Evidence and frequency. Company approval verifies insurance, accreditation, competence systems and safety performance, and is done periodically. Person admission verifies that this individual has been inducted, is competent for this task and knows your hazards, and is done every time. Contractor management systems are built for the first because organisations produce documents.
What is the controlling employer test?+
Under OSHA's multi-employer citation policy, whether an employer with general supervisory authority exercised reasonable care: periodic inspections of the work, an effective system for correcting hazards found, and enforcement of compliance by other employers. Every US circuit has recognised the authority to cite on this basis, and the test is about activity rather than documentation.
Why does the information exchange matter in both directions?+
Because the contractor's work introduces hazards to your people as well as the reverse. Hot work, chemical use, isolation, excavation and lifting all affect the surrounding site. Several standards require the exchange explicitly, and the contractor-to-site direction is the one nearly always missing from onboarding processes built around telling contractors your rules.
What defeats contractor management most often?+
Subcontracting and agency supply. A verified contractor engages labour at short notice through an agency, and people arrive whom no part of the process has examined. Requiring disclosure and applying individual checks to subcontracted labour closes it, and most systems do not ask.
Do indemnity clauses help?+
Commercially, sometimes. For regulatory liability, no. A controlling employer cited under the multi-employer policy is cited for its own failure to exercise reasonable care, and a contract allocating risk between the parties does not affect that. Periodic inspection of the work is both the better arrangement and the one that answers the question.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Contractor Onboarding and Management
Contractor Prequalification Questionnaire
Collects a contractor's safety, insurance, training and performance information before they are approved
Contractor Safety Statistics Review
Reviews a contractor's injury rates, citations and experience modifier over recent years
Contractor Risk Classification
Classifies a contractor by the risk of the work they do, from low risk services to high risk construction
Contractor Approval Record
Records the decision to approve a contractor to work on site
Contractor Safety Program Review
Reviews the contractor's own written safety programme against your requirements
Subcontractor Declaration
Records any subcontractors a contractor intends to use
More in Commercial
Emergency Contractor Engagement Record
Records engagement of a contractor outside the normal approval route because of a genuine emergency, with the minimum checks done
Service Level Agreement Record
Holds the response times, availability and performance standards agreed with a contractor
Contractor Rate and Invoice Verification
Verifies contractor invoices against agreed rates, hours recorded on site and work actually completed
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- OSHA multi-employer citation policy, directive CPL 02-00-124
- ISO 45001:2018 clause 8.1.4, procurement, contractors and outsourcing
- 29 CFR 1910.147(f)(2) and 1910.146(c)(8), contractor information exchange, OSHA
- 29 CFR 1910.119(h), process safety management contractors, OSHA
- Construction (Design and Management) Regulations 2015 (GB)
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.