Missing one insurance certificate on a subcontractor file can halt a site for a week. Expired safety training can void a project’s insurance. A subcontractor who never returned their right-to-work paperwork can land you a five-figure penalty.
Construction compliance documents are the proof that the people on your site can legally be there, are insured if something goes wrong, and have been trained for the work they are doing. Treat them as paperwork and the first audit or incident will make the point for you.
This guide covers exactly which documents you need, when to collect them, and how to stop chasing paper every time a new subcontractor shows up.
The complete construction compliance document checklist
Copy this list. Cut what does not apply to your jurisdiction. Use it for every new subcontractor, supplier, or self-employed worker on your next project.
Company-level documents (collect once per subcontractor)
- Company registration certificate (Companies House, INSEE/SIRET, state business registration)
- Public liability insurance certificate — minimum cover varies by project; £10m is standard for UK construction
- Employers’ liability insurance — required in the UK for any business with employees
- Professional indemnity insurance — for design-and-build or specialist contractors
- Contractor’s all-risks insurance — for larger civil and structural work
- VAT registration certificate (if applicable)
- Tax clearance certificate — CIS registration in the UK, URSSAF certificate in France, state tax compliance in the US
- Bank account details — for payment, usually verified by recent statement
- Company health and safety policy — required for firms with five or more employees in the UK
- Environmental policy — often required on public sector or large commercial projects
- Modern slavery statement — required in the UK for firms with £36m+ turnover, requested from supply chain
- GDPR / data protection policy
Prequalification and accreditation
- CHAS, SMAS, Constructionline, SafeContractor or equivalent prequalification accreditation
- ISO 9001, 14001, 45001 certificates where required
- Trade body membership (FMB, NFB, NFRC, ECA, Gas Safe, NICEIC) — role-specific
- Site safety plan or method statement for the specific package
Project-specific documents
- Signed contract and scope of work
- Risk assessments and method statements (RAMS) — for every task with significant risk
- COSHH assessments — for any hazardous substances on site
- Lift plans — for crane and heavy lift operations
- Temporary works design certificates
- Permits to work — hot works, confined space, working at height, excavation
Worker-level documents (collect for every individual on site)
- CSCS / CPCS card (UK) or equivalent competency card — colour-coded by role
- Passport or national ID — right-to-work verification
- Visa or work permit — for non-citizen workers
- Photograph for site pass
- Emergency contact details
- Next of kin information
- Signed site induction record
- Signed acknowledgment of site rules and PPE requirements
Training and certifications
- SMSTS / SSSTS — site management or supervisor safety
- First aid certification — at least one qualified first aider per site
- Fire marshal / fire warden training
- Manual handling training
- Asbestos awareness training
- Working at height, confined space, PASMA, IPAF — task-specific
- Plant operator certificates — CPCS cards for each machine type
- Electrical competency certificates — 18th Edition, City & Guilds for electricians
- Gas Safe registration — for gas work
- Welding certifications — BS EN 287 / ISO 9606
Equipment and plant
- Plant inspection certificates — LOLER for lifting equipment, PUWER for work equipment
- PAT testing certificates — annual for portable electricals
- Vehicle insurance, MOT, and road tax
- Driver licences and CPC cards
- Calibration certificates — for testing and measurement equipment
Ongoing compliance (renew on a schedule)
- Insurance renewals — most policies are annual
- Training refreshers — first aid every 3 years, SMSTS every 5, asbestos annual
- Accreditation renewals — CHAS and similar typically annual
- Right-to-work re-verification — when visas are time-limited
- Competency card renewals — CSCS every 5 years
When to collect each document
Construction compliance is a sequence, not a single checklist drop. Collect the right documents at the right moment or you will end up blocking work at the last minute.
Before tender / prequalification
You want to rule out subcontractors who cannot meet baseline compliance before they spend time on a bid.
- Company registration
- Insurances (certificates in date)
- Prequalification accreditation
- Health and safety policy
- Financial standing (accounts, bank reference)
On award, before mobilisation
Once awarded, but before anyone sets foot on site.
- Signed contract
- Package-specific RAMS
- COSHH assessments
- Proof of CSCS cards for proposed team
- Training certificates for the scope of work
- Plant and equipment inspection certificates
At site induction
Every individual worker gets inducted and submits their documents before the first shift.
- Photo ID
- Right to work
- Competency card scan
- Signed induction record
- Signed site rules acknowledgment
- Emergency contact
Throughout the project
- Permits to work issued for specific tasks
- Toolbox talk attendance records
- Incident reports
- Inspection records
- Variation and change control documents
On project completion
- As-built drawings
- Operation and maintenance manuals
- Test certificates
- Warranties
- Final payment application documents
- Waste transfer notes
Why email and spreadsheets fail at construction compliance
Most small and mid-sized contractors run their subcontractor files like this: a spreadsheet tracking which subbies owe which documents, a shared drive for the files themselves, and an admin who emails everyone every few weeks asking for the updates.
Here is why it falls apart on every project over about 15 workers.
Expiration dates go untracked. An insurance certificate valid today expires in six months. Nobody is watching it. The renewal lands in the subbie’s inbox, not yours. You find out the day of an incident.
Version control is a mess. Is the insurance certificate on the drive the current one or last year’s? The filename does not always tell you.
Inductions are not linked to documents. The induction happens on paper, the documents live in an email thread from three weeks ago, and the site manager cannot pull up either when asked.
Subcontractors send documents by WhatsApp and email. Some to the office, some to the site agent, some to the project manager. Nothing is centralised.
The audit trail is missing. When the HSE or your insurer asks who was inducted and when, you have a spreadsheet and a folder. That is not an audit trail.
Document collection eats admin time. A typical construction admin spends 10-15 hours per week chasing subcontractor documents. None of those hours are billable. They just keep the compliance plate spinning.
How automated construction document collection works
Purpose-built document collection platforms replace the spreadsheet-and-email process with a workflow the subcontractor runs themselves.
Here is the shape of it:
- Build the subcontractor onboarding workflow once. List every document you need from a new subcontractor, with instructions and a template where relevant. This is your prequalification template.
- Send each new subcontractor a branded link. They click, see a clear checklist, and upload each document directly. No account creation, no password friction.
- Automatic validation where possible. Some documents (insurance certificates, tax compliance) can be validated automatically against official registries. Others flag for manual review.
- Expiry tracking on every document. Each uploaded insurance certificate, training record, or prequalification logs its expiry date. The system reminds the subcontractor to renew before it lapses.
- Reminder automation. Missing or expiring documents trigger reminders on a schedule. You stop manually chasing.
- Centralised view for every project. The project manager can see, at a glance, which subcontractors are fully compliant, which have missing documents, and which have something expiring in the next 30 days.
- Per-worker document collection. Individual workers get their own mini-workflow (photo ID, right-to-work, CSCS scan, signed induction) done before they arrive on site.
- Audit-ready export. When an auditor, insurer, or client asks for proof of compliance, you export a ZIP file with everything organised by subcontractor and date.
How to pick a construction compliance platform
Your usual options fall into three buckets.
Generic file-sharing tools (Dropbox, Google Drive). Cheap, familiar, but no workflow, no expiry tracking, no reminders, no audit trail. Fine as a backup storage layer. Not fine as a compliance system.
Enterprise construction management platforms (Procore, Viewpoint, Autodesk Build). Document compliance is one module inside a much bigger tool. Powerful if you already run the whole platform, heavy-handed and expensive if you just want to collect documents.
Purpose-built document collection tools (Superdocu, ContentSnare, FileInvite). Designed specifically for collecting documents from external parties. Cheaper than the enterprise platforms, more structured than generic storage, and built to handle the expiry tracking and reminder workflows that construction compliance needs.
When you evaluate a dedicated tool, look for:
- Expiry date tracking per document — not optional for construction
- Automatic reminders — before and after expiry
- Repeatable workflows — so you can onboard each new subbie with the same template, and re-onboard them annually for renewals
- Per-worker as well as per-company collection — you need both views
- Automatic validation for common documents (insurance, tax compliance)
- Branded portal — subcontractors should see your brand, not the vendor’s
- Audit logs — who uploaded what, when, and who approved it
- Bulk actions — sending onboarding packs to 30 subcontractors at once
How Superdocu fits construction compliance
Superdocu is a document collection platform used by construction firms, subcontractors, and facilities managers across the UK, France, and the rest of Europe.
For a construction use case, the relevant features are:
- Repeatable subcontractor onboarding workflows. Define your compliance pack once and reuse it across every new subcontractor.
- Document expiration tracking. Every insurance certificate, training record, and accreditation has an expiry date. Subcontractors get reminded before their documents lapse — you get a dashboard of what is about to expire.
- Automatic insurance and tax validation. For French companies, Superdocu validates URSSAF, KBIS, and transport licences against official registries.
- Per-contact and per-worker collection. Collect company-level documents from the subcontractor, and individual documents from each worker they send to site.
- Branded portal. Subcontractors see your branding, not Superdocu’s.
- Bulk onboarding. Send compliance packs to multiple subcontractors at once for a new project.
- ZIP export. Pull a full compliance record for any project or audit on demand.
- EU-hosted, GDPR compliant. Data stays in Europe, with per-subcontractor access controls.
See the Superdocu construction solution or read how construction compliance software compares to spreadsheets.
A worked example: onboarding a new subcontractor
Here is what this looks like end-to-end for a single new subcontractor joining a project.
Day 1 — Tender invite Project manager adds the subcontractor to the onboarding workflow with a few clicks. They receive a branded email with a magic link.
Day 1-3 — Document upload The subcontractor opens the link, sees a checklist organised by category (company registration, insurance, accreditation, policies). They upload each document. Insurance certificates are auto-validated against the issuer’s registry. Other documents queue for manual review.
Day 4-5 — Review and approval The compliance team reviews anything that did not auto-validate. Rejections come with a note explaining what is wrong. The subcontractor gets the message and re-uploads.
Day 5 — Worker-level onboarding Once the company is approved, each worker coming to site gets their own link — photo ID, right-to-work, CSCS, signed induction. Done before the first shift.
Month 11 — Renewal reminder A month before the public liability insurance expires, the subcontractor gets an automatic reminder to upload the new certificate. The renewal lands without the admin team chasing.
Year 2 — Annual re-onboarding At contract renewal, the subcontractor runs a lighter version of the workflow to refresh anything that has expired, plus any new documents you have added.
Total admin time per subcontractor: minutes, not hours. No spreadsheets to update, no emails to chase.
Frequently asked questions
What insurance documents do construction subcontractors need?
At minimum: public liability (usually £10m on UK construction sites), employers’ liability if they have employees, and, for design-and-build or specialist trades, professional indemnity. Larger projects often require contractor’s all-risks cover. Always collect a dated certificate, not just a confirmation email.
How long do I need to keep construction compliance documents?
UK HSE guidance and CDM 2015 regulations require health and safety records to be retained for the duration of the project and for an appropriate period afterwards — typically 6 years for general records and up to 40 years for asbestos and similar long-latency hazards. Insurance and tax records: at least 6 years. Keep retention rules written down so you can defend them.
What is the difference between CHAS, SMAS, and Constructionline?
All three are Safety Schemes in Procurement (SSIP) accreditations. They verify that a subcontractor has a compliant health and safety management system. Most main contractors accept any SSIP-approved scheme — ask which your client requires rather than assuming.
Can I automate right-to-work checks for construction workers?
You can automate the collection and timestamping of right-to-work documents, which satisfies the audit trail requirement. The verification itself — checking that the passport or visa is genuine and belongs to the person in front of you — still needs a human or a certified digital identity service provider. A document collection tool handles the paper side; the face-to-document check is separate.
How do I track document expiry across 50+ subcontractors?
Not with a spreadsheet. A document collection platform with per-document expiry fields and automatic reminders will give you a dashboard of what is expiring in the next 30, 60, 90 days across every subcontractor. This is the single biggest efficiency gain for a construction admin team.
Do I need a separate system for worker-level documents and company-level documents?
No. A workflow-based platform can handle both: a company-level onboarding for the subcontractor business, then a per-worker onboarding for each individual they send to site. Keep them linked so you can see the full compliance picture for any project in one view.
Ready to retire the compliance spreadsheet? Start a free Superdocu trial and automate your next subcontractor onboarding. No credit card required.