Maintenance

Contractor safety documents: what to request, when they expire and who reviews them

Asking a subcontractor for their documents once is easy. The hard part is knowing what has expired on the day they show up to work in your building or at your customer’s plant. Documents expire quietly, and nobody notices until someone asks for them.

In this article
  1. What contractor safety coordination is, and who it affects
  2. Which documents to request
  3. Every document has its own validity
  4. Who reviews them, and what happens on rejection
  5. The reminder, before it expires
  6. What to do with a job when a document is missing
  7. Common mistakes
  8. How to tell it is working

What contractor safety coordination is, and who it affects

When workers from several companies share the same site, someone has to coordinate safety between them. In Spain this is a legal duty called CAE, short for the Spanish term for coordination of business activities.

Spain regulates it in article 24 of its Occupational Risk Prevention Act, developed by Royal Decree 171/2004. Other countries set similar requirements through their own safety rules, insurers and customer contracts.

In practice it affects two kinds of company. Owners or operators of a building or plant that let in maintenance, cleaning or security contractors. And companies that maintain other people’s facilities and subcontract part of the work themselves.

This article does not replace your safety advisor or your lawyer. It is about the part that fails most often day to day: keeping the documents current.

Which documents to request

What you request depends on the activity, its risks and what your safety advisor says. These are the ones that come up most often in practice:

  • From the company: the risk assessment and safety plan for its activity, how it organizes safety, and its liability insurance.
  • From each worker: safety training and information for their role, medical fitness where required, and proof that they are on the payroll.
  • For the specific job: any permits or procedures the site requires, such as work at height or hot work.

Separate what is mandatory, without which nobody gets in, from what is recommended. If everything is mandatory, nothing is, and the list ends up in a drawer.

Every document has its own validity

The most common mistake is treating documents as an onboarding step: requested at the start and never looked at again. But each document expires at its own pace.

Document typeValidity (example)
List of workers on the payrollOne month
Liability insurance certificateOne year, until renewal
Worker’s medical fitnessWhatever their last exam states
Risk assessment for the activityUntil the activity or its risks change

These are examples to show the method: your safety advisor sets the validity of each type.

What matters is that each type has its own validity, in months, and that every uploaded document carries its expiration date. Without a date, no reminder is possible.

Who reviews them, and what happens on rejection

Uploading a PDF is not the same as having the document. Someone has to open it and check that it is what was requested, that it belongs to that company and that it is current.

  • One owner, or a small group that reviews documents for all suppliers. If “whoever is free” reviews them, nobody does.
  • Accept or reject, always with a reason. “Certificate from a different company” or “expired last month” tells the subcontractor what to fix.
  • A review deadline. A document waiting three weeks for review is the same as not having it.

The reminder, before it expires

A reminder on the day a document expires is too late: the worker is already on the way. A useful reminder leaves time to renew it, for example thirty days.

And it has to reach whoever can fix it, which is the subcontractor. Your team should only hear about it if the date passes and no new document has been uploaded.

What to do with a job when a document is missing

There are no shortcuts here: the decision belongs to the company, not the software. Some cases are clear, such as work at height without the training that covers it. Others are judgment calls, such as renewed insurance whose certificate has not arrived yet.

What is worth writing down is the rule: which documents block a job, who can approve an exception and where it is recorded.

Common mistakes

  • A shared folder with no dates. All the PDFs are there, but nobody knows which ones are still valid.
  • The PDF nobody opens. Documents are assumed fine because they were uploaded, not because they were reviewed.
  • A reminder that arrives after expiry, or that reaches your team instead of the subcontractor.
  • The same list for every activity. The landscaper is asked for the electrician’s paperwork, and the list stops being taken seriously.
  • Reviewing only when the supplier is onboarded. Today’s documents are not the ones you will have in six months.

How to tell it is working

  1. Suppliers with all mandatory documents current, out of all those working this month.
  2. Documents waiting for review, and how many days they have been waiting.
  3. Documents expiring in the next thirty days with no renewal uploaded.
  4. Jobs assigned with documents not current, and who approved each exception.

The fourth number does not have to be zero. It is a problem only if nobody knows why. For the rest of working with subcontractors, see how to work with subcontractors without losing control of the service.

Last updated:

Keep reading

More on maintenance

Field service

Working with subcontractors without losing control of the service

The work you subcontract is still your service in the customer’s eyes. What gets lost is not the work itself. It is knowing whether the job was accepted, when it will happen and what was used. A few simple rules bring that back, without burying anyone in paperwork.

6 min read

Processes and compliance

Periodic controls: how to prove they were done

Doing a control and being able to prove it are two different jobs. The second one usually surfaces on audit day, when someone spends a week hunting for emails, screenshots and signatures.

4 min read

All blog articles

Request a demo

Shall we look at it with your operation?

Tell us how you work today and we will show you attendo with your own data. If it is not a fit, we will say so.

  • With your operation, not a generic demo
  • A real person from our team replies
  • No cold calls afterwards

Would you rather talk first?

Which area do you want to see in the demo?

With your work email we prepare the demo around your case.

In one or two sentences.

If you chose Maintenance (CMMS)

If you chose Field work (Field Service)

If you chose Facility Management

If you chose any other area

Only if you would rather we call you.

Data protection. Controller: AxisOne Group SL. Purpose: preparing the demo you request and replying to you. Legal basis: your consent and the request you make. Recipients: we do not disclose your data; Cloudflare (website) and Brevo (email notices and confirmation) process it on our behalf. Rights: access, rectification, erasure, objection, restriction and portability, at privacy@attendo.me. More information in the privacy policy.

What happens when you send it. Someone from our team reads what you tell us and writes to you to agree on a time for the demo. Our hours: Monday to Thursday 9:30 AM to 6:30 PM and Friday 9:30 AM to 2:30 PM, Spain time.