SafeContractor Application Requirements: What They Actually Check Before Approval

If a main contractor has told you to "get SafeContractor" before you set foot on site, the SafeContractor application requirements are not one fixed list you can print off and tick. They are two layers stacked on top of each other: a fixed health and safety floor set by SSIP, and a variable set of questions generated by the work categories you select. Most first-time applications don't fail because a document is missing. They fail because a document exists but is the wrong age, unsigned, or generic.

TL;DR

The SafeContractor assessment is built on the SSIP core criteria — the HSE-approved threshold standard that every SSIP member scheme assesses against — plus a dynamic question set tailored to the work activities you tick. The fixed floor covers your health and safety policy, arrangements, competent advice, training, individual qualifications, monitoring, workforce consultation, accident and enforcement history, subcontractor vetting, risk assessment and method statements, co-operation with others, and welfare. Several of those documents carry a date rule: your policy statement of intent must be signed by the MD and dated within the previous 12 months, and your example risk assessment and method statement must come from a real project in the last 12 months. Certification runs for 12 months, so the whole cycle repeats annually. If you already hold a valid certificate with another SSIP scheme, the deem-to-satisfy route can cover the health and safety element rather than repeating the full audit.

What are the SafeContractor application requirements, in layers?

SafeContractor's assessment is not one questionnaire — it is three separable things, and knowing which is which stops you gathering paperwork nobody asked for.

The first layer is public and you can read it in full. Safety Schemes in Procurement publishes the SSIP core criteria as numbered standards, last updated 24/02/2026 on the SSIP site, and the Health and Safety Executive confirms on its conformity assessment schemes page that SSIP member schemes apply core criteria approved by HSE. That is the useful part: the floor is not SafeContractor's private invention, so you can prepare against a published document before you pay anyone.

The second layer is where the guesswork lives. SafeContractor states that its question set is dynamic and only asks questions relevant to the activities you select, and that contractors choose the activities they have actually undertaken in the last 12 months (SafeContractor on how its audits work, checked 06/08/2026). SafeContractor's own guidance lists trade-specific qualifications, method statements, asbestos awareness, construction phase plan and COSHH assessment as typical activity-driven items.

What documents does the SafeContractor audit ask for?

The table below maps the published SSIP core criteria to the thing you actually have to upload. Every row here comes from the SSIP core criteria standards, not from a scheme sales page.

Additional criteria apply if you act as a designer, principal designer or principal contractor. Principal contractors and sole contractors on site are also asked for an example construction phase plan from a project in the previous 12 months, according to the SSIP core criteria.

What actually fails a SafeContractor application?

In our reading of the published criteria, the recurring trip-hazard for small firms is not absence — it's dates and specificity. Four requirements in the SSIP core criteria carry an explicit time window, and a document that sits outside it is treated as no document at all.

The second trip-hazard is the generic template. The criteria ask for site or project specific documents — a blank RAMS template downloaded off the internet with no site address, no job, and no named operatives answers a different question from the one being asked. The third is the enforcement declaration: SSIP states that member schemes verify your answer against the HSE Register of Convictions and Enforcement Notices, including any name your company previously traded under. That is a cross-check, not a trust exercise, so an honest declaration with the corrective action described is always the stronger answer.

It's worth being fair about the intent here. SafeContractor's auditors say they aim to pass contractors wherever the evidence allows, and report that in 2025 over 1,100 audits were quality-checked internally at an average quality score of 97.6% (SafeContractor's own audit quality figures, checked 06/08/2026). The assessment isn't designed to catch you out — but it is evidence-based, and undated evidence is thin evidence.

Worked example: what a 12-engineer M&E firm needs

Say you run a 12-engineer electrical and mechanical firm doing commercial maintenance and small fit-out, no design work, and you occasionally sub out drainage. Working from the published criteria, your bundle looks like this:

1. 1
   Policy pack. H&S policy with the statement of intent re-signed and re-dated by you as MD — do this the week you apply, not the week you wrote the policy three years ago.
2. 2
   Competent advice. Either your own NEBOSH-qualified person or your retained H&S consultant's credentials, plus evidence they know CDM 2015.
3. 3
   Training matrix and certificates. In-date cards for all 12 engineers, plus anyone you use labour-only — the criteria apply the same standard to both.
4. 4
   One live job's paperwork. A risk assessment and method statement from a real job in the last 12 months, with the site named, plus COSHH assessments for anything you carry in the van.
5. 5
   Accident and enforcement history. Three years of RIDDOR figures (zero is a perfectly good answer), five years of enforcement history.
6. 6
   Subcontractor vetting. How you check the drainage firm before appointing them, and how you monitor them on site.

Everything else — asbestos awareness, working at height, permits — hangs off which activities you selected. Nothing on that list needs a consultant to produce it; most of it already exists in your job files and needs finding, not writing. If you want the wider evidence list that also serves other schemes, our CHAS documents checklist covers substantially the same core-criteria ground, and the documents hub sets out what carries across.

Do the requirements change if you're a sole trader or under five staff?

Yes, and this is the concession most guides skip. The SSIP core criteria state that a supplier employing four or fewer personnel who does not have written arrangements should be able to describe how they identify hazards and complete risk assessments and safe systems of work. That is proportionality written into the standard.

That sits alongside the underlying law. The Health and Safety Executive's guidance on preparing a health and safety policy states that you must write your policy down if you have five or more employees; below that, writing it down is useful but not legally required. SafeContractor also says it has developed a questionnaire specifically for sole traders and micro companies. So a two-man firm is not held to a 12-engineer firm's paperwork — but a scheme assessment is a document-based process, and "I could describe it" is a harder sell than a one-page arrangement you actually wrote.

What happens after you submit, and how often does it repeat?

SafeContractor's published process is: build your profile and select work categories with a Technical Support Officer, complete the questionnaire and upload documents, have the submission reviewed, then go to an auditor for detailed assessment — with certification issued for 12 months once the auditor is satisfied (SafeContractor contractor certification process, checked 06/08/2026). SafeContractor says contractors engaged with the process usually certify in fewer than two audits, though timing depends on how fast you return information.

The part nobody warns you about is that this is an annual cycle, not a one-off. Twelve months later the statement of intent needs re-signing, the RAMS example needs to be from a newer job, the training certificates need to still be in date, and the accident window has rolled forward a year. If you also hold Constructionline or the Common Assessment Standard, you are running two or three renewal clocks with overlapping evidence — the pain that SSIP mutual recognition genuinely does not solve. Our guide to accreditation renewal deadlines covers how to keep those dates from creeping up on you; TradeComply is building a renewal and evidence tracker for exactly this, which is coming soon.

Can you skip the full audit if you already hold CHAS or SMAS?

Possibly. The HSE states plainly on its conformity assessment schemes page that as a supplier you should only need to be assessed against one SSIP member scheme, and that where a buyer insists on a second, you can apply for a deem-to-satisfy certificate giving full recognition of the health and safety elements of the first scheme. SafeContractor operates that route and has advertised a discount for members joining via deem to satisfy — check the current terms directly with the scheme before assuming a figure.

What deem to satisfy does not cover is the sustainability/PAS 91-aligned layer, which asks for things like anti-bribery, data protection, environmental, equality and diversity and modern slavery policies, plus financial information — SafeContractor notes that sole traders and partnerships provide relevant pages from their latest tax returns, and that abbreviated accounts are not accepted. If you're weighing whether one certificate covers you, see what SSIP mutual recognition does not cover and the fee comparison in our SafeContractor cost guide.

Frequently Asked Questions

How long does a SafeContractor application take?

SafeContractor states that the timescale depends on the plan you choose and how quickly you supply documents, and that engaged contractors usually certify in fewer than two audits. SSIP's own FAQ notes that member schemes typically aim to complete an initial assessment within ten working days of having what they need, so the realistic bottleneck is your document-gathering, not the scheme's queue.

Do I need a written health and safety policy if I only employ three people?

Under HSE guidance, you must write your health and safety policy down only if you have five or more employees. The SSIP core criteria also allow suppliers with four or fewer personnel and no written arrangements to describe how they identify hazards and produce safe systems of work. In practice, a short written policy still makes the assessment quicker.

Will a past accident or HSE enforcement notice fail my application?

Not automatically. The SSIP core criteria require you to declare RIDDOR statistics for the previous three years, summarise your last two incidents with the action taken to prevent recurrence, and declare HSE prosecutions or enforcement over the previous five years with the corrective action. Schemes cross-check declarations against the HSE Register of Convictions and Enforcement Notices, so an accurate declaration with remedial action described is the safer answer.

Can I use my existing CHAS or SMAS certificate instead of a full SafeContractor audit?

For the health and safety element, usually yes, via the SSIP deem-to-satisfy route. The HSE states that a supplier should only need assessing against one SSIP member scheme, and that a deem-to-satisfy certificate gives full recognition of the health and safety elements of the first scheme. Anything outside SSIP health and safety — sustainability, financial checks, client-specific PQQs — still has to be answered separately.

How often do I have to redo the SafeContractor assessment?

SafeContractor issues certification for 12 months, so the assessment is an annual cycle. Because several core-criteria items are time-bound — the signed statement of intent and the project-specific RAMS both reference the previous 12 months — you cannot simply re-upload last year's file set unchanged.