SafeContractor Guide: Requirements, Costs and SSIP Recognition

What does SafeContractor actually assess?

For the health and safety element, the assessment is a desktop review of how your organisation manages risk before a buyer appoints you. The evidence should match what your business really does: security guarding, facilities management, commercial cleaning, electrical or mechanical services, construction trades, maintenance, or another contracted activity. The assessor is looking for a functioning system, not a folder of generic templates.

At SSIP level, the assessment covers core organisational capability: health and safety policy and responsibilities, competent advice, workforce training and competence, monitoring, consultation, accident and enforcement history, subcontracting controls where relevant, and risk assessment leading to safe systems of work. Construction applicants can have additional evidence requirements linked to CDM dutyholder roles.

Is SafeContractor SSIP accredited, and how does Deem to Satisfy work?

Yes. SafeContractor is listed by Safety Schemes in Procurement as a registered member that assesses suppliers against the SSIP Core Criteria. That makes its health and safety assessment mutually recognisable within the SSIP framework for eligible scheme relationships.

Deem to Satisfy (DtS) is the mechanism used to avoid repeating the same core health and safety assessment. If you already hold a current, valid assessment from an eligible SSIP member scheme, another eligible member can verify that certificate on the SSIP Portal and use it to satisfy the common SSIP Core Criteria instead of starting a full duplicate assessment.

DtS is not the same as an automatic free badge transfer. A receiving scheme can still charge a registration or membership fee and can request scheme-specific information. In SafeContractor's case, SSIP currently identifies risk-profile questions as additional information that may be requested at the DtS stage. Buyer-specific checks can also sit outside SSIP mutual recognition.

Procurement point: SSIP recognition covers the common health and safety pre-qualification threshold. It does not remove a buyer's responsibility to check project-specific competence, nor does it automatically satisfy unrelated commercial, environmental, quality or social-value requirements.

If a tender says “SafeContractor or equivalent SSIP”, a valid SSIP certificate may be enough for the health and safety element. If the buyer insists on the SafeContractor platform or a SafeContractor-branded certificate, DtS may be the practical route. Check the tender wording before paying for duplicate assessments.

What documents do you need for SafeContractor accreditation?

The exact questionnaire adapts to your size, activities and risk profile, but most contractors should expect to prepare the following evidence before submission.

Do you need a written Health & Safety Policy with fewer than five employees?

Every employer has health and safety duties, but the written-record requirement changes with size. If you employ five or more people, UK law requires your health and safety policy to be written down. If you employ fewer than five, the policy does not have to be written, although you still need to manage health and safety and be able to explain how you do it.

For SSIP assessment, small organisations are treated proportionately rather than excused from risk management. A microbusiness may be able to describe arrangements that the law does not require it to document, but the assessor still needs enough evidence to judge organisational capability. SafeContractor also states that sole traders and micro companies can be assessed using an approach suited to their size.

In practice, a concise written policy is often worthwhile even below five employees because tender clients frequently expect documentary evidence. A useful policy should include:

• a signed statement of intent from the most senior person;
• clear roles and responsibilities for health and safety;
• arrangements covering the real risks in your business;
• a practical review process when people, work, equipment or legislation changes.

What do SafeContractor assessors expect from RAMS and COSHH?

RAMS are one of the most common failure points because assessors are looking for evidence of how your business controls actual work, not just whether you own a risk-assessment template. Current SSIP criteria ask for site or project-specific risk assessments created for a project within the previous 12 months and, where applicable, corresponding safe systems of work or method statements.

What should a strong risk assessment contain?

• the task and work location or project context;
• credible hazards associated with the activity;
• employees, contractors, visitors or members of the public who could be harmed;
• risk evaluation appropriate to your chosen methodology;
• specific control measures that can actually be implemented on site;
• responsibility for controls and a review trigger.

What should the method statement add?

The method statement should explain the safe sequence of work: arrival and sign-in, site checks, isolation or segregation, equipment, PPE where necessary, step-by-step activity, supervision, emergency arrangements, waste or chemical handling, and completion/handover. A method statement that simply repeats the risk assessment does not demonstrate the safe system clearly.

When is COSHH evidence required?

If your service uses hazardous substances, the assessment should include relevant COSHH evidence. This is especially common in commercial cleaning, FM maintenance, painting, engineering and some construction activities. A manufacturer's safety data sheet is an input to a COSHH assessment; it is not a substitute for assessing how your staff actually store, dilute, use and dispose of the substance.

How much Public Liability and Employers’ Liability insurance do you need?

There is no single Public Liability limit that applies to every UK business by law. The required level is normally driven by your client, contract and risk exposure. For larger commercial and public-sector contracts, £5 million Public Liability is a common procurement benchmark and some buyers require £10 million.

Employers’ Liability is different. Where compulsory insurance applies, the legal minimum is £5 million. In practice, many insurers provide £10 million and many tenders ask for that level. So a contractor preparing for SafeContractor and tender work will often hold £5 million Public Liability and £10 million Employers’ Liability, but those figures should be treated as common commercial levels rather than universal SafeContractor statutory minimums.

Before uploading certificates, verify:

• the insured name matches the legal entity applying for certification;
• the policy is current and will not expire during a critical tender window;
• the business description covers the activities you selected in SafeContractor;
• the indemnity limits meet the buyer's specification;
• any material exclusions have been checked against the work you actually perform.

What training records and subcontractor controls are checked?

A training matrix should let an assessor see, quickly, who is competent to do what and when a qualification or refresher expires. It should be backed by evidence rather than existing as a spreadsheet with no supporting certificates.

The training needed depends on your scope. A security contractor may evidence site induction, conflict-management or role-specific safety instruction alongside relevant licences and training. A cleaning contractor may need chemical handling, manual handling and equipment competence. Electrical, mechanical and construction businesses may need trade qualifications, plant or access training, asbestos awareness, working-at-height training, or other task-specific competence depending on the work.

Subcontracting needs the same discipline. If you appoint bona-fide subcontractors or consultants, the assessor can look for documented appointment criteria and monitoring. That normally means deciding what you check before appointment, retaining evidence, communicating site rules and RAMS requirements, monitoring performance, and controlling any further subcontracting.

A frequent audit problem is an application that says no subcontractors are used when purchase records, projects or staffing arrangements show otherwise. Be accurate about labour-only subcontractors and bona-fide subcontractors because SSIP treats them differently in parts of the assessment.

How do you apply for SafeContractor step by step?

How much does SafeContractor cost in the UK?

SafeContractor's current contractor pricing page publishes plan entry prices for smaller businesses and states that the final annual subscription is calculated using the number of employees. It does not publish a simple turnover-based band table for these contractor plans. A one-off joining fee also applies.

The official “starting from” figures are not a full cost for every applicant. Your employee count can move the SafeContractor subscription above the entry price, and consultancy support is a separate commercial service. For consultancy, the main cost drivers are the number and quality of documents already in place, the number of work activities, whether RAMS or COSHH assessments need to be built from scratch, subcontractor complexity, and how urgent the tender deadline is.

Why does SafeContractor reject documents or raise audit actions?

Most audit actions are not caused by obscure legislation. They are caused by evidence that is missing, outdated, generic or inconsistent with the application. Four recurring problems deserve particular attention.

1. Incomplete or generic RAMS

A risk assessment copied from a template with no site, task, people-at-risk or realistic controls does not demonstrate how you manage the selected activity. Update it around a real recent project and make the method statement explain the actual sequence of work.

2. Policies with missing signatures, dates or review control

A strong policy can still be queried when the statement of intent is not signed by the senior responsible person or the date is outside the assessment expectation. Check document-control fields before upload.

3. Training matrices with no evidence behind them

Listing “trained” is not the same as proving competence. Keep certificates, licences, induction records and refresher dates aligned to the roles and work categories in the questionnaire.

4. Uncontrolled subcontractor use

If subcontractors deliver part of your service, define how they are selected and monitored. Evidence can include competence checks, insurance, RAMS approval, site induction, performance monitoring and rules governing further subcontracting.

Other preventable actions include expired insurance, inconsistent company names across documents, missing accident statistics, COSHH evidence that consists only of safety data sheets, and policies that describe arrangements the business does not actually operate.

SafeContractor accreditation FAQs