How to Onboard a New Contractor: A Step-by-Step Checklist

Getting a contractor on-site without a documented onboarding process is one of the more common compliance gaps in industrial and commercial operations. OSHA's multi-employer worksite policy (CPL 02-00-124) establishes that a host employer can be cited for hazards created or controlled by a contractor, which means the liability does not stay with the contractor alone. A controlling employer, typically the general contractor or host organization with supervisory authority over the site, is expected to exercise reasonable care to detect and prevent violations.

This checklist covers the steps from initial document collection through first-day authorization.

Pre-Arrival: Document Verification

Before a contractor arrives on-site, collect and verify the following:

Business licensing. Verify that the contracting entity holds a valid business license in the state where the work will be performed. For licensed trades (electrical, plumbing, HVAC, rigging, crane operation), confirm the specific license type required for the work scope. Licensing requirements vary significantly by state and by jurisdiction within states.

Certificate of Insurance. Request a current ACORD 25 Certificate of Liability Insurance with your company listed as the certificate holder. Confirm:

• General liability limits meet your contract's minimum requirements
• Workers' compensation coverage is in place for all states where the contractor's employees will work
• The policy expiration date extends past the anticipated project completion date
• Your company is named as an additional insured on the underlying policy

The ACORD 25 has a checkbox to note additional insured status, but checking that box does not confirm that an endorsement exists on the underlying policy. Request the actual endorsement pages: ISO CG 20 10 for ongoing operations and ISO CG 20 37 for completed operations are the standard forms. CG 20 37 matters because it extends coverage to claims that arise after the work finishes.

OSHA 300 Logs and safety record. For any contractor performing work that creates meaningful safety exposure, request three years of OSHA 300 Logs and the associated 300A Summary forms. Use these to calculate the Total Recordable Incident Rate:

TRIR = (number of recordable incidents x 200,000) / total hours worked

200,000 represents the equivalent of 100 full-time workers at 40 hours per week for 50 weeks. According to BLS data for 2024, the all-industry private-sector TRIR is 2.3 per 100 full-time workers. Construction averages approximately 3.1 and manufacturing approximately 3.4. A rate significantly above the BLS average for the contractor's primary industry classification warrants additional review before approval.

Experience Modification Rate. Request the current EMR letter from the contractor's workers' compensation carrier or broker. The EMR is calculated by NCCI (National Council on Compensation Insurance) in most states, and by state-specific bureaus in California (WCIRB, where it is called the X-Mod), New York, Pennsylvania, Texas, and several others. A baseline EMR of 1.0 represents the industry average for the employer's classification and payroll size. Values below 1.0 indicate a better-than-average loss history; values above 1.0 indicate worse. Many owner organizations require an EMR at or below 1.0 as a prequalification threshold for standard work, and at or below 0.85 for higher-hazard or higher-value contracts.

The EMR calculation uses a three-year rolling window and excludes the most recently completed policy year. An EMR effective in 2026 reflects claims data from the 2022, 2023, and 2024 policy years.

Safety programs and certifications. Depending on the scope of work, request written safety programs for relevant hazards: fall protection, confined space entry, lockout/tagout, hot work, and hazard communication are common examples. Confirm that key personnel hold required certifications (OSHA 10, OSHA 30, competent person designations, scaffolding, rigging) and that those certifications are current.

Site Orientation

OSHA's construction standard at 29 CFR 1926.20(b)(2) requires that competent persons conduct frequent and regular inspections of the job sites, materials, and equipment. Most liability programs and industry best practices go further and require a documented, site-specific orientation for every new contractor before they begin work.

A site orientation should cover, at minimum:

• The emergency action plan, including evacuation routes, muster locations, and alarm types
• Site-specific hazards, restricted areas, and any active permit programs
• PPE requirements by zone or task
• Chemical hazard communication, SDS locations, and labeling systems
• Incident and near-miss reporting procedures, and who to notify
• Hot work, confined space, and lockout/tagout permit requirements, if applicable

Have the contractor's site supervisor or foreman sign an acknowledgment that the orientation was completed. Retain these records. Generic orientation content that does not reflect actual site conditions has limited value as either a safety tool or a compliance record.

Training Assignment

Map required training to the contractor's specific scope of work. A contractor doing electrical maintenance has different training requirements than one doing concrete work or confined space entry. Generic training that ignores the actual work scope creates gaps that can be difficult to defend after an incident.

Training that is a condition of site authorization should be tracked to completion before the contractor begins work. Keep records of what training was required, when it was completed, and by whom.

Authorization and System of Record

Establish a documented authorization step before any contractor begins work. The authorization should confirm:

• All pre-arrival documents are on file and current
• Site orientation has been completed and signed
• Required training is complete and documented
• The contractor is assigned to the correct worksite(s)

Assign each contractor a designated contact within your organization. This person handles questions, permit approvals, incident notifications, and site rule violations. Without a clear point of contact, communication defaults to whoever is available, and important information tends to be missed.

Keep all records in a system that provides an audit trail. If an incident occurs, investigators and insurers will ask what was verified before the contractor started work. A timestamped system record is easier to produce and defend than a spreadsheet maintained by a single person.

Contractor onboarding requirements vary by industry, jurisdiction, and contract type. The steps above reflect common practice across construction, utilities, oil and gas, and manufacturing. Consult your legal counsel and insurance carrier to confirm requirements specific to your operations.