Contractor Compliance South Africa 2027: OHS Due Diligence Checklist Before You Appoint
Updated: 7 days ago
Hiring a contractor does not remove workplace risk.
A contractor may arrive with a company profile, quotation, insurance certificate and impressive-looking safety file and still be completely unprepared for the work they are about to perform.
For South African employers, procurement teams, project managers, safety officers and facilities managers, the important question is not simply:
“Did the contractor submit documents?”
The stronger question is:
“Can we demonstrate that the contractor, its workers, equipment and work method are suitable for the actual job?”
That is the purpose of contractor due diligence.
Quick Answer: What Should You Check Before Appointing a Contractor in South Africa?
A contractor compliance review should establish who the contractor is, what work will be performed, which hazards the work introduces, whether the contractor has suitable people and resources, what legal or client requirements apply, what evidence must be available before site access, and how compliance will be monitored after work starts.
There is no universal contractor pack that automatically makes every contractor compliant.
A plumbing contractor repairing a leaking basin does not present the same risk profile as a contractor conducting roof work, scaffold erection, excavation, electrical isolation or confined-space entry.
The compliance pack must therefore follow the scope and risk of the work.
Question the employer must answer | Evidence that may be relevant |
Who are we appointing? | Company and contact information, responsible persons, contractual details |
What exactly will they do? | Scope of work, quotation, work order, drawings or task description |
What can go wrong? | Risk assessment, hazard information, site conditions |
How will the work be controlled? | Method statement, safe-work procedure, permits and supervision |
Are the workers competent? | Relevant training, experience, licences or authorisations |
Is the equipment suitable? | Inspection records, registers, certificates where applicable |
What happens during an emergency? | Emergency arrangements, rescue planning where relevant |
How will we know compliance continues? | Inspections, audits, corrective actions and close-out records |
That is the difference between collecting paperwork and managing contractor risk.
Contractor Compliance South Africa: What Does the OHS Act Actually Require?
The Occupational Health and Safety Act places substantial duties on employers to provide and maintain, as far as reasonably practicable, a working environment that is safe and without risk to employees. Contractor arrangements do not make those underlying duties disappear. (Government of South Africa)
The Act also specifically addresses mandataries. A mandatary can include an agent, contractor or subcontractor performing work for another employer or user.
Section 37(2) is often misunderstood.
It does not say:
“Sign this document and responsibility transfers to the contractor.”
It deals with written arrangements and procedures between the employer or user and the mandatary to ensure compliance with the Act.
That makes the agreement an important part of contractor management.
It does not make the rest of contractor management unnecessary.
For the detailed legal explanation, keep the Section 37 search intent on the dedicated Section 37(2) Agreement South Africa guide rather than duplicating the entire subject here.
Before You Sign the Contractor: Start With the Scope of Work
Contractor vetting becomes weak when it begins with documents instead of the work.
Start by defining the job.
“Maintenance work” is too vague.
“Replace two damaged roof sheets approximately eight metres above ground level using an existing fixed access system” immediately tells the reviewer far more.
It raises questions about fall risk, access, rescue arrangements, weather, tools, material handling, supervision and Working at Heights competence.
Likewise, “electrical work” is less useful than identifying whether the contractor will isolate equipment, work on live systems, enter restricted areas or use elevated access.
The scope generates the compliance requirements.
Not the other way around.
Contractor Compliance Documents: What Should Be in the Pack?
The answer depends on the contractor and the work, but this is the employer framework I would publish.
Compliance area | Evidence to review | Why it matters |
Contractor identity | Correct legal/business details and responsible contacts | Establishes who has actually been appointed |
Scope of work | Clear task description and boundaries | Determines hazards and applicable controls |
Section 37 arrangements | Written agreement where applicable | Records agreed OHSA compliance arrangements |
Compensation Fund standing | Registration / valid Letter of Good Standing where applicable | Helps verify Compensation Fund standing |
Risk assessment | Task and site-specific risk assessment | Connects hazards to controls |
Work method | Method statement or safe-work procedure | Shows how work is intended to be executed |
H&S plan/file | Where required by the applicable construction framework or client system | Consolidates project safety evidence |
Training records | Relevant, current worker competence evidence | Helps establish whether people are prepared for the task |
Medical fitness | Where legally or operationally required | Checks worker suitability for applicable exposure |
Appointments | Relevant responsible or competent-person appointments | Identifies who carries specific duties |
Equipment records | Inspections, registers and certifications where applicable | Helps control equipment-related risk |
Operator competency | Licences, authorisations or competence records where required | Confirms authorised operation |
PPE | Issue records and task-specific requirements | Supports the selected control measures |
Site induction | Attendance and acknowledgement evidence | Shows site-specific information was communicated |
Permits | Hot work, confined space, isolation or other applicable permits | Controls defined high-risk tasks |
Emergency arrangements | Emergency response and rescue arrangements | Prevents improvisation during an incident |
Subcontractor controls | Approval and equivalent due diligence | Stops uncontrolled subcontracting |
Incident procedure | Reporting and escalation arrangements | Determines what happens when something goes wrong |
Monitoring | Inspection and corrective-action records | Shows compliance was checked after appointment |
Close-out | Final records, outstanding actions and handover evidence | Prevents unfinished safety obligations |
The important phrase throughout that table is “where applicable.”
A contractor pack should be risk-driven, not a ritual exercise where every supplier receives the same 60-document checklist.
Does a Contractor Need a Letter of Good Standing?
Compensation Fund guidance says employers or mandators using contractors should obtain a Letter of Good Standing from contractors to show that they are registered and their applicable assessments are up to date. Department guidance also explains that a Letter of Good Standing is linked to registration, returns and payment status and can be validated. (Department of Labour)
This is a major search opportunity because employers frequently ask for “contractor compliance documents” without knowing what each document proves.
A Letter of Good Standing does not prove:
that workers are trained, that a risk assessment is correct, that equipment is safe, or that the contractor can perform the specific job safely.
It proves something different.
That distinction should run throughout the article.
A Safety File Is Not the Same as Contractor Competence
One of the most common contractor-management mistakes is to confuse the existence of a file with the quality of the underlying controls.
A beautiful file can contain:
expired records, generic risk assessments, certificates belonging to employees who are not on site, incorrect appointments, copied method statements and registers that have never been updated.
The employer therefore needs to look through the file, not merely confirm that a folder exists.
Ask:
Does the evidence match the people, equipment, site and work happening today?
That question catches far more problems than asking whether the contractor “has a safety file.”
Construction Contractors Need Additional Attention
Where the work falls within the applicable Construction Regulations, additional construction-specific duties may apply.
Construction Regulation material addresses responsibilities of clients, principal contractors and contractors, including health and safety planning, safety files, contractor competence and resources, risk assessments and project-specific controls. Government-linked specifications applying the Construction Regulations also expressly require contractors to demonstrate the competencies and resources necessary to conduct construction work safely. (Government of South Africa)
The 2025 replacement regulations were issued by government as draft regulations for public comment. They should not simply be substituted for the 2014 requirements in an article as though the draft itself automatically became final law. (Government of South Africa)
That distinction gives this article considerably more credibility than generic competitor content.
Contractor Training Certificates: What Should You Actually Check?
Do not stop at:
“Certificate received.”
Check whether the training is relevant to the actual work.
A worker going onto a roof may require a completely different competence pathway from a worker doing basic housekeeping.
A worker entering a confined space has different risks from someone performing ordinary maintenance.
A person erecting a scaffold has different responsibilities from someone inspecting one.
The contractor review should therefore connect:
worker → task → hazard → required competence → evidence.
What Changes Depending on the Contractor's Work?
This section can dramatically expand impressions because it captures the long tail Google is already testing.
Contractor type | Additional questions |
General maintenance contractor | Tools, task risk assessment, isolation, PPE, supervision |
Construction contractor | Construction H&S plan/file, appointments, risk assessments, construction-specific controls |
Roof / Working at Heights contractor | Fall prevention, fall arrest where applicable, equipment, anchors, competence and rescue |
Confined-space contractor | Entry controls, atmospheric risks, rescue, communication and authorised workers |
Scaffolding contractor | Erection/inspection competence, handover, registers and scaffold controls |
Electrical contractor | Isolation, authorisation, electrical competence and equipment |
Welding / hot-work contractor | Hot-work controls, fire risk, ventilation, PPE and emergency readiness |
Fibre / telecom contractor | Excavations, poles, chambers, traffic exposure, height work and site access requirements |
Mining vendor or subcontractor | Client-specific onboarding plus applicable statutory, medical, competence and operational controls |
That directly answers the kind of Google query your page has already started appearing for around fibre contractor onboarding and mining-vendor compliance.
Contractor Vetting Should Happen Before Site Access
Do not allow procurement to award the job and leave safety to discover the problems at the gate.
A stronger sequence is:
Stage | What happens |
Before appointment | Define scope, assess contractor capability and identify required evidence |
Before mobilisation | Verify workers, documents, training, equipment and site controls |
Before work starts | Complete induction, permits, interfaces and final task controls |
During the work | Inspect, supervise, record deviations and close corrective actions |
After completion | Close permits, record incidents/issues, recover documentation and assess contractor performance |
This is contractor management, not contractor paperwork.
The Most Dangerous Contractor Pack Red Flags
A contractor should trigger deeper investigation when evidence is generic, inconsistent or obviously disconnected from the work.
A particularly weak pack might contain old certificates, risk assessments copied from unrelated projects, missing employee names, equipment records that cannot be connected to actual equipment, subcontractors nobody approved, expired Compensation Fund evidence, unidentified supervisors, unsigned documents, workers arriving who were never vetted, or emergency procedures that nobody on site understands.
The response should not automatically be “reject the contractor.”
The response should be:
Stop. Verify. Correct the gap before exposure begins.
Section 37(2) Should Not Become the Entire Contractor System
This is where we deliberately avoid cannibalising your separate Section 37 page.
A Section 37(2) agreement is one component.
The contractor compliance page should own the wider system:
contractor selection, Compensation Fund evidence, scope, hazard identification, risk assessment, competence, training, equipment, site access, permits, supervision, inspections, subcontractor controls, incident reporting and close-out.
Then internally link the reader who specifically needs the legal agreement explanation into your dedicated Section 37(2) article.
That creates a proper semantic cluster instead of two pages fighting for the same query.
Contractor Due Diligence Is Not a Once-Off Event
A contractor can be compliant at tender stage and unsuitable three months later.
People change.
Certificates expire or require review.
Equipment changes.
Subcontractors change.
Work scope changes.
Site conditions change.
An incident may expose weaknesses that were not visible during onboarding.
The employer therefore needs trigger-based review.
Important triggers include a changed scope, new employees, new equipment, new subcontractors, expired documentation, a serious incident or near miss, poor inspection results and material changes to the work environment.
Do not invent a universal “review every 30 days” rule unless a particular regulation, contract or client standard actually requires it.
Contractor Compliance Checklist South Africa: The Final Pre-Mobilisation Test
Before the contractor receives unrestricted permission to begin the relevant work, management should be able to answer yes to the core questions below.
Check | Yes / No |
Is the contractor identity clear? | ☐ |
Is the scope of work specific? | ☐ |
Have the hazards been identified? | ☐ |
Have applicable OHSA arrangements been addressed? | ☐ |
Has Compensation Fund evidence been checked where applicable? | ☐ |
Is the risk assessment relevant to this job? | ☐ |
Is there an appropriate work method? | ☐ |
Are responsible persons identified? | ☐ |
Are the workers known? | ☐ |
Is competence evidence relevant to their tasks? | ☐ |
Are medical requirements addressed where applicable? | ☐ |
Is equipment identified and suitable? | ☐ |
Are required inspections current? | ☐ |
Are task-specific permits identified? | ☐ |
Is site induction required and completed? | ☐ |
Are emergency arrangements understood? | ☐ |
Is rescue planning addressed where relevant? | ☐ |
Are subcontractors controlled? | ☐ |
Is supervision clear? | ☐ |
Is there a process for stopping unsafe work? | ☐ |
Frequently Asked Questions
What documents should I get from a contractor in South Africa?
There is no single universal pack for every contractor. Documents should follow the work and risks involved. Common evidence can include contractor details, scope of work, applicable OHSA arrangements, Compensation Fund evidence, risk assessments, procedures, training records, equipment records, appointments, permits, emergency arrangements and subcontractor controls.
What is contractor compliance?
Contractor compliance is the process of ensuring that an external contractor meets the legal, contractual, workplace and task-specific requirements that apply to the work it performs.
What is a contractor compliance pack?
A contractor compliance pack is the organised set of documents and evidence used to support contractor onboarding and ongoing control. The value of the pack depends on whether its contents actually match the contractor, workers, equipment, work and site.
Is a Section 37(2) agreement enough?
No. It addresses written compliance arrangements between an employer or user and a mandatary within the Section 37 framework. It does not replace the employer's other duties or the contractor-management controls appropriate to the work. (Government of South Africa)
Does every contractor need a health and safety file?
Not every contractor in every industry automatically requires the same construction-style health and safety file. Construction work may trigger specific requirements under the applicable Construction Regulations, while employers and clients may impose additional file requirements through their own contractor-management systems.
Should I check a contractor's Letter of Good Standing?
Department of Employment and Labour guidance tells mandators using contractors to obtain contractor Letter of Good Standing evidence and provides mechanisms for confirming Compensation Fund standing. (Department of Labour)
Are contractor training certificates enough to prove competence?
No single certificate proves that every aspect of a worker's competence or the entire contractor operation is compliant. The employer should establish whether the evidence is relevant to the worker, task, hazards and applicable requirements.
How often should contractor compliance documents be reviewed?
There is no sensible universal answer for every document and contractor. Review should follow expiry periods, contractual requirements and risk-based triggers such as changes in scope, workers, equipment, subcontractors, incidents or site conditions.
Who should verify contractor compliance?
Responsibility depends on the organisation. Procurement, operational management, SHEQ, facilities, project management and other appointed personnel may each control part of the process. The important requirement is that responsibilities are defined rather than assumed.
Can a contractor start work while documents are still outstanding?
That depends on what is outstanding and what the work involves. Where missing evidence is necessary to establish competence, legal compliance or critical risk controls, permitting work to begin can defeat the purpose of contractor due diligence.
Authoritative Sources
Authoritative Source | Official Link |
Occupational Health and Safety Act 85 of 1993 | |
Occupational Health and Safety Act 85 of 1993 — Section 37 / Mandataries | |
Construction Regulations 2014 | |
Compensation for Occupational Injuries and Diseases Act 130 of 1993 (COIDA) | |
Compensation Fund — Employer Obligations, Letters of Good Standing & Contractors | |
Draft Construction Regulations 2025 — Department of Employment and Labour |
Read More
Related Guide | Link |
Section 37(2) Agreement South Africa: What Employers and Contractors Need to Know | |
Training Matrix Template: Mandatory Safety Refresher Training | |
Workplace Hazard Identification Checklist South Africa |
Final Word
A contractor pack should answer a simple question:
Why was this contractor allowed to perform this work?
A strong answer is supported by scope, risk controls, competence, training, equipment, responsible people and evidence that the contractor was monitored after appointment.
A weak answer is:
“They sent us a safety file.”
That is the transformation I want from this page.
