Contractor Compliance South Africa: OHS Due Diligence Checklist Before You Appoint
Updated: Oct 27
Hiring a contractor does not remove workplace risk.
A contractor may arrive with a company profile, quotation, insurance certificate and impressive-looking safety file and still be completely unprepared for the work they are about to perform.
For South African employers, procurement teams, project managers, safety officers and facilities managers, the important question is not simply:
“Did the contractor submit documents?”
The stronger question is:
“Can we demonstrate that the contractor, its workers, equipment and work method are suitable for the actual job?”
That is the purpose of contractor due diligence.
Quick Answer: What Should You Check Before Appointing a Contractor in South Africa?
A contractor compliance review should establish who the contractor is, what work will be performed, which hazards the work introduces, whether the contractor has suitable people and resources, what legal or client requirements apply, what evidence must be available before site access, and how compliance will be monitored after work starts.
There is no universal contractor pack that automatically makes every contractor compliant.
A plumbing contractor repairing a leaking basin does not present the same risk profile as a contractor conducting roof work, scaffold erection, excavation, electrical isolation or confined-space entry.
The compliance pack must therefore follow the scope and risk of the work.
Question the employer must answer | Evidence that may be relevant |
Who are we appointing? | Company and contact information, responsible persons, contractual details |
What exactly will they do? | Scope of work, quotation, work order, drawings or task description |
What can go wrong? | Risk assessment, hazard information, site conditions |
How will the work be controlled? | Method statement, safe-work procedure, permits and supervision |
Are the workers competent? | Relevant training, experience, licences or authorisations |
Is the equipment suitable? | Inspection records, registers, certificates where applicable |
What happens during an emergency? | Emergency arrangements, rescue planning where relevant |
How will we know compliance continues? | Inspections, audits, corrective actions and close-out records |
That is the difference between collecting paperwork and managing contractor risk.
Contractor Compliance South Africa: What Does the OHS Act Actually Require?
The Occupational Health and Safety Act places substantial duties on employers to provide and maintain, as far as reasonably practicable, a working environment that is safe and without risk to employees. Contractor arrangements do not make those underlying duties disappear. (Government of South Africa)
The Act also specifically addresses mandataries. A mandatary can include an agent, contractor or subcontractor performing work for another employer or user.
Section 37(2) is often misunderstood.
It does not say:
“Sign this document and responsibility transfers to the contractor.”
It deals with written arrangements and procedures between the employer or user and the mandatary to ensure compliance with the Act.
That makes the agreement an important part of contractor management.
It does not make the rest of contractor management unnecessary.
For the detailed Section 37(2) legal explanation, consult the dedicated SSA guide; this employer checklist focuses on the wider contractor-verification process.
Before You Sign the Contractor: Start With the Scope of Work
Contractor vetting becomes weak when it begins with documents instead of the work.
Start by defining the job.
“Maintenance work” is too vague.
“Replace two damaged roof sheets approximately eight metres above ground level using an existing fixed access system” immediately tells the reviewer far more.
It raises questions about fall risk, access, rescue arrangements, weather, tools, material handling, supervision and Working at Heights competence.
Likewise, “electrical work” is less useful than identifying whether the contractor will isolate equipment, work on live systems, enter restricted areas or use elevated access.
The scope generates the compliance requirements.
Not the other way around.
Contractor Compliance Documents: What Should Be in the Pack?
The documents below help employers verify the contractor against the actual job scope, workplace hazards and applicable legal duties.
Compliance area | Evidence to review Why it matters |
Contractor identity | Evidence to review Correct legal/business details and responsible contacts Why it matters Establishes who has actually been appointed |
Scope of work | Evidence to review Clear task description and boundaries Why it matters Determines hazards and applicable controls |
Section 37 arrangements | Evidence to review Written agreement where applicable Why it matters Records agreed OHSA compliance arrangements |
Compensation Fund standing | Evidence to review Registration / valid Letter of Good Standing where applicable Why it matters Helps verify Compensation Fund standing |
Risk assessment | Evidence to review Task and site-specific risk assessment Why it matters Connects hazards to controls |
Work method | Evidence to review Method statement or safe-work procedure Why it matters Shows how work is intended to be executed |
H&S plan/file | Evidence to review Where required by the applicable construction framework or client system Why it matters Consolidates project safety evidence |
Training records | Evidence to review Relevant, current worker competence evidence Why it matters Helps establish whether people are prepared for the task |
Medical fitness | Evidence to review Where legally or operationally required Why it matters Checks worker suitability for applicable exposure |
Appointments | Evidence to review Relevant responsible or competent-person appointments Why it matters Identifies who carries specific duties |
Equipment records | Evidence to review Inspections, registers and certifications where applicable Why it matters Helps control equipment-related risk |
Operator competency | Evidence to review Licences, authorisations or competence records where required Why it matters Confirms authorised operation |
PPE | Evidence to review Issue records and task-specific requirements Why it matters Supports the selected control measures |
Site induction | Evidence to review Attendance and acknowledgement evidence Why it matters Shows site-specific information was communicated |
Permits | Evidence to review Hot work, confined space, isolation or other applicable permits Why it matters Controls defined high-risk tasks |
Emergency arrangements | Evidence to review Emergency response and rescue arrangements Why it matters Prevents improvisation during an incident |
Subcontractor controls | Evidence to review Approval and equivalent due diligence Why it matters Stops uncontrolled subcontracting |
Incident procedure | Evidence to review Reporting and escalation arrangements Why it matters Determines what happens when something goes wrong |
Monitoring | Evidence to review Inspection and corrective-action records Why it matters Shows compliance was checked after appointment |
Close-out | Evidence to review Final records, outstanding actions and handover evidence Why it matters Prevents unfinished safety obligations |
The important phrase throughout that table is “where applicable.”
A contractor pack should be risk-driven, not a ritual exercise where every supplier receives the same 60-document checklist.
Does a Contractor Need a Letter of Good Standing?
Older Compensation Fund employer guidance describes mandators and contractors. The amended COIDA Section 89, effective 23 January 2026, now addresses contractors and subcontractors, including subcontractor registration and assessment obligations. Confirm which role each entity occupies and verify required Compensation Fund or licensed-insurer standing. A Letter of Good Standing does not establish training, equipment safety or competence.
Current COIDA Section 89 is a separate obligation from the Occupational Health and Safety Act Section 37(2) written-arrangements framework. Section 37(2) does not automatically transfer every employer health-and-safety duty.Read the amended COIDA Section 89.
This is a major search opportunity because employers frequently ask for “contractor compliance documents” without knowing what each document proves.
A Letter of Good Standing does not prove:
that workers are trained, that a risk assessment is correct, that equipment is safe, or that the contractor can perform the specific job safely.
It proves something different.
That distinction should run throughout the article.
A Safety File Is Not the Same as Contractor Competence
One of the most common contractor-management mistakes is to confuse the existence of a file with the quality of the underlying controls.
A beautiful file can contain:
expired records, generic risk assessments, certificates belonging to employees who are not on site, incorrect appointments, copied method statements and registers that have never been updated.
The employer therefore needs to look through the file, not merely confirm that a folder exists.
Ask:
Does the evidence match the people, equipment, site and work happening today?
That question catches far more problems than asking whether the contractor “has a safety file.”
Construction Contractors Need Additional Attention
Under Construction Regulation 7(1)(c), a principal contractor must check contractor competence and resources, verify Compensation Fund or licensed-insurer good standing before the work starts, appoint contractors in writing and monitor site compliance. Regulation 7(1)(c)(vii) requires audits and document verification at least once every 30 days. These are construction-specific duties, not an identical rule for every service contractor.Read Construction Regulation 7.
Where the work falls within the applicable Construction Regulations, additional construction-specific duties may apply.
Construction Regulation material addresses responsibilities of clients, principal contractors and contractors, including health and safety planning, safety files, contractor competence and resources, risk assessments and project-specific controls. Government-linked specifications applying the Construction Regulations also expressly require contractors to demonstrate the competencies and resources necessary to conduct construction work safely. (Government of South Africa)
The 2025 replacement regulations were issued by government as draft regulations for public comment. They should not simply be substituted for the 2014 requirements in an article as though the draft itself automatically became final law. (Government of South Africa)
For construction work, the distinction between the operative 2014 Regulations and an uncommenced proposal is essential when deciding which contractor duties apply.
Contractor Training Certificates: What Should You Actually Check?
Do not stop at:
“Certificate received.”
Check whether the training is relevant to the actual work.
A worker going onto a roof may require a completely different competence pathway from a worker doing basic housekeeping.
A worker entering a confined space has different risks from someone performing ordinary maintenance.
A person erecting a scaffold has different responsibilities from someone inspecting one.
The contractor review should therefore connect:
worker → task → hazard → required competence → evidence.
What Changes Depending on the Contractor's Work?
This section can dramatically expand impressions because it captures the long tail Google is already testing.
Contractor type | Additional questions |
General maintenance contractor | Tools, task risk assessment, isolation, PPE, supervision |
Construction contractor | Construction H&S plan/file, appointments, risk assessments, construction-specific controls |
Roof / Working at Heights contractor | Fall prevention, fall arrest where applicable, equipment, anchors, competence and rescue |
Confined-space contractor | Entry controls, atmospheric risks, rescue, communication and authorised workers |
Scaffolding contractor | Erection/inspection competence, handover, registers and scaffold controls |
Electrical contractor | Isolation, authorisation, electrical competence and equipment |
Welding / hot-work contractor | Hot-work controls, fire risk, ventilation, PPE and emergency readiness |
Fibre / telecom contractor | Excavations, poles, chambers, traffic exposure, height work and site access requirements |
Mining vendor or subcontractor | Client-specific onboarding plus applicable statutory, medical, competence and operational controls |
That directly answers the kind of Google query your page has already started appearing for around fibre contractor onboarding and mining-vendor compliance.
Contractor Vetting Should Happen Before Site Access
Do not allow procurement to award the job and leave safety to discover the problems at the gate.
A stronger sequence is:
Stage | What happens |
Before appointment | Define scope, assess contractor capability and identify required evidence |
Before mobilisation | Verify workers, documents, training, equipment and site controls |
Before work starts | Complete induction, permits, interfaces and final task controls |
During the work | Inspect, supervise, record deviations and close corrective actions |
After completion | Close permits, record incidents/issues, recover documentation and assess contractor performance |
This is contractor management, not contractor paperwork.
The Most Dangerous Contractor Pack Red Flags
A contractor should trigger deeper investigation when evidence is generic, inconsistent or obviously disconnected from the work.
A particularly weak pack might contain old certificates, risk assessments copied from unrelated projects, missing employee names, equipment records that cannot be connected to actual equipment, subcontractors nobody approved, expired Compensation Fund evidence, unidentified supervisors, unsigned documents, workers arriving who were never vetted, or emergency procedures that nobody on site understands.
The response should not automatically be “reject the contractor.”
The response should be:
Stop. Verify. Correct the gap before exposure begins.
Section 37(2) Should Not Become the Entire Contractor System
This is where we deliberately avoid cannibalising your separate Section 37 page.
A Section 37(2) agreement is one component.
The contractor compliance page should own the wider system:
contractor selection, Compensation Fund evidence, scope, hazard identification, risk assessment, competence, training, equipment, site access, permits, supervision, inspections, subcontractor controls, incident reporting and close-out.
For written OHSA contractor arrangements, consult SSA's separate Section 37(2) Agreement South Africa guide.
Separate legal topics into their appropriate guides while using this checklist for scope-specific employer due diligence.
Contractor Due Diligence Is Not a Once-Off Event
A contractor can be compliant at tender stage and unsuitable three months later.
People change.
Certificates expire or require review.
Equipment changes.
Subcontractors change.
Work scope changes.
Site conditions change.
An incident may expose weaknesses that were not visible during onboarding.
The employer therefore needs trigger-based review.
Important triggers include a changed scope, new employees, new equipment, new subcontractors, expired documentation, a serious incident or near miss, poor inspection results and material changes to the work environment.
There is no universal 30-day document-review rule for every kind of service contractor. For covered construction work, however, Regulation 7(1)(c)(vii) requires principal contractors to conduct periodic site audits and document verification with their contractors at agreed intervals of no more than 30 days. Other reviews should follow applicable regulations, expiry periods, contract terms and changes in risk.
Contractor Compliance Checklist South Africa: The Final Pre-Mobilisation Test
Before the contractor receives unrestricted permission to begin the relevant work, management should be able to answer yes to the core questions below.
Check | Yes / No |
Is the contractor identity clear? | ☐ |
Is the scope of work specific? | ☐ |
Have the hazards been identified? | ☐ |
Have applicable OHSA arrangements been addressed? | ☐ |
Has Compensation Fund evidence been checked where applicable? | ☐ |
Is the risk assessment relevant to this job? | ☐ |
Is there an appropriate work method? | ☐ |
Are responsible persons identified? | ☐ |
Are the workers known? | ☐ |
Is competence evidence relevant to their tasks? | ☐ |
Are medical requirements addressed where applicable? | ☐ |
Is equipment identified and suitable? | ☐ |
Are required inspections current? | ☐ |
Are task-specific permits identified? | ☐ |
Is site induction required and completed? | ☐ |
Are emergency arrangements understood? | ☐ |
Is rescue planning addressed where relevant? | ☐ |
Are subcontractors controlled? | ☐ |
Is supervision clear? | ☐ |
Is there a process for stopping unsafe work? | ☐ |
Frequently Asked Questions
What documents should I get from a contractor in South Africa?
There is no single universal pack for every contractor. Documents should follow the work and risks involved. Common evidence can include contractor details, scope of work, applicable OHSA arrangements, Compensation Fund evidence, risk assessments, procedures, training records, equipment records, appointments, permits, emergency arrangements and subcontractor controls.
What is contractor compliance?
Contractor compliance is the process of ensuring that an external contractor meets the legal, contractual, workplace and task-specific requirements that apply to the work it performs.
What is a contractor compliance pack?
A contractor compliance pack is the organised set of documents and evidence used to support contractor onboarding and ongoing control. The value of the pack depends on whether its contents actually match the contractor, workers, equipment, work and site.
Is a Section 37(2) agreement enough?
No. It addresses written compliance arrangements between an employer or user and a mandatary within the Section 37 framework. It does not replace the employer's other duties or the contractor-management controls appropriate to the work. (Government of South Africa)
Does every contractor need a health and safety file?
Not every contractor in every industry automatically requires the same construction-style health and safety file. Construction work may trigger specific requirements under the applicable Construction Regulations, while employers and clients may impose additional file requirements through their own contractor-management systems.
Should I check a contractor's Letter of Good Standing?
Yes. Verify the correct contractor entity's current Compensation Fund or licensed-insurer standing where legally required, especially for construction work. Older Department guidance uses mandator terminology, but amended COIDA Section 89 effective 23 January 2026 addresses contractors and subcontractors. A Letter of Good Standing does not prove task-specific competence.
Are contractor training certificates enough to prove competence?
No single certificate proves that every aspect of a worker's competence or the entire contractor operation is compliant. The employer should establish whether the evidence is relevant to the worker, task, hazards and applicable requirements.
How often should contractor compliance documents be reviewed?
Review records when they expire or when workers, subcontractors, scope, equipment or risks change. There is no universal 30-day rule for every service contractor. For construction work, Construction Regulation 7(1)(c)(vii) requires the principal contractor to arrange contractor site audits and document verification at agreed intervals of at least once every 30 days.
Who should verify contractor compliance?
Responsibility depends on the organisation. Procurement, operational management, SHEQ, facilities, project management and other appointed personnel may each control part of the process. The important requirement is that responsibilities are defined rather than assumed.
Can a contractor start work while documents are still outstanding?
That depends on what is outstanding and what the work involves. Where missing evidence is necessary to establish competence, legal compliance or critical risk controls, permitting work to begin can defeat the purpose of contractor due diligence.
Authoritative Sources & Regulatory References
Authoritative Source | Official Link |
Occupational Health and Safety Act 85 of 1993 | |
Occupational Health and Safety Act 85 of 1993 — Section 37 / Mandataries | |
Construction Regulations 2014 | |
Compensation for Occupational Injuries and Diseases Act 130 of 1993 (COIDA) | |
Compensation Fund — Employer Obligations, Letters of Good Standing & Contractors | |
Draft Construction Regulations 2025 — Department of Employment and Labour | |
COIDA Section 89 — Current contractor/subcontractor obligations (2026) | |
Construction Regulation 7(1)(c)(vii) — Contractor audits |
Read More
Related Guide | Link |
Section 37(2) Agreement South Africa: What Employers and Contractors Need to Know | |
Training Matrix Template: Mandatory Safety Refresher Training | |
Workplace Hazard Identification Checklist South Africa | |
Contractor Safety Checklist South Africa | |
Health and Safety File South Africa | |
Construction Safety Training Requirements South Africa |
Final Word
A contractor pack should answer a simple question:
Why was this contractor allowed to perform this work?
A strong answer is supported by scope, risk controls, competence, training, equipment, responsible people and evidence that the contractor was monitored after appointment.
A weak answer is:
“They sent us a safety file.”
The strongest contractor approval record shows what was checked, which risks were controlled, who authorised the work and how follow-up findings were resolved.
