Health and Safety File South Africa: Legal Requirements, OHS Records, Checklist & Free Template
A health and safety file can be 300 pages thick and still prove almost nothing.
A thick file can still contain irrelevant appointments, expired records, copied risk assessments, unresolved inspection findings and policies employees have never seen. A smaller evidence system can be stronger if it clearly shows the hazards, controls, responsibilities, training, inspections, incidents, corrective actions and verification that actually apply.
That is the purpose of this health and safety file South Africa guide: not to create thicker files, but to build stronger, traceable evidence.
Quick Answer: What Must Be in a Health and Safety File in South Africa?
There is no single universal safety-file index containing exactly the same documents for every South African employer.
The Occupational Health and Safety Act 85 of 1993 places duties on employers to identify hazards, establish precautions and provide the information, instruction, training and supervision necessary to protect employees. Various regulations then create additional requirements depending on matters such as employee numbers, incidents, machinery, hazardous substances, construction work and other workplace risks. Labour.gov.za
Construction work is different.
The Construction Regulations 2014 expressly require a principal contractor to open and keep on site a health and safety file containing documentation required under the Act and those Regulations. Contractors performing construction work have corresponding file duties, and the principal contractor must ultimately hand a consolidated health and safety file to the client. South African Government
So the correct question is not:
“What 40 documents does every company need?”
It is:
“What legal, hazard, workforce, activity, project and contractual triggers apply to this workplace — and what evidence proves they are being controlled?”
Health and Safety File South Africa at a Glance
Management question | Correct approach |
Does every South African company legally need the identical safety file? | No |
Must employers be able to demonstrate applicable OHS controls? | Yes |
Does construction work have explicit health and safety file requirements? | Yes |
Is there one statutory 30-, 50- or 100-document universal index? | No |
Should documents follow actual hazards and activities? | Yes |
Are all client-requested documents automatically statutory requirements? | No |
Does a training certificate automatically prove competence? | No |
Does a signed risk assessment prove controls are working? | No |
Should expired and superseded records be controlled? | Yes |
Should findings lead to corrective action and verification? | Yes |
Is a Health and Safety File Legally Required for Every Company in South Africa?
This is where much of the online advice becomes dangerously simplistic.
The OHS Act creates legal duties.
The regulations create additional duties.
Some of those duties require records.
Some require appointments.
Some require inspections.
Some require assessment, reporting, investigation, medical surveillance, training or other documented evidence.
But that does not mean the legislation creates one generic folder called:
“The Mandatory Safety File Every South African Company Must Have.”
For example, the General Administrative Regulations require an employer with five or more persons in employment to have a copy of the Act and relevant regulations readily available at the workplace. They also establish specific recordkeeping requirements for health and safety committees and workplace incidents. South African Government
That is quite different from saying:
“Every business must use this 75-tab safety-file template.”
The stronger management approach is to identify the actual legal trigger first.
Safety File vs OHS Evidence File vs Construction Safety File
These terms are often used as though they mean exactly the same thing.
They should be separated.
General Workplace OHS Evidence File
A company may choose to organise applicable OHS evidence into a central physical or digital system.
That evidence might include risk assessments, appointments, inspections, training records, incident investigations, emergency records and other documents relevant to the workplace.
The file itself is a management system.
The legal significance comes from the duties and records it contains.
Construction Health and Safety File
Construction work has a more specific legal position.
Under Regulation 7 of the Construction Regulations 2014, the principal contractor must open and keep on site a health and safety file containing the documentation required by the Act and Regulations and make it available to specified parties on request. Contractors performing construction work must similarly maintain a relevant file. South African Government
This is not simply an internal filing preference.
It is an express construction requirement.
Client or Procurement Safety File
A customer, mine, principal contractor, municipality, industrial facility or corporate client may impose additional documentation requirements before contractors are admitted.
Those requirements can be commercially important.
But:
A client requirement should not automatically be described as a universal statutory OHS requirement.
What Should a Health and Safety File Actually Prove?
A strong file should allow management to move through one evidence chain:
HAZARD → CONTROL → RESPONSIBILITY → IMPLEMENTATION → EVIDENCE → CORRECTIVE ACTION → VERIFICATION
Suppose a workplace has forklift traffic.
A weak file contains:
Forklift Risk Assessment.pdf
A stronger evidence system connects the risk assessment with the people exposed, traffic-management controls, authorised operators, inspections, maintenance, pedestrian segregation, incidents, corrective actions and verification.
The document is not the control.
It is evidence of the control.
That difference should underpin the entire file.
The 5 Types of Safety-File Records South African Employers Must Separate
1. Core OHS Evidence
These are records or information arising from the general workplace health-and-safety system.
Examples may relate to applicable legislation, hazards, risk controls, responsibilities, incidents, emergency arrangements and evidence of implementation.
2. Workforce-Triggered Evidence
Certain requirements arise only after a workforce threshold or another prescribed trigger is reached.
Health and safety representative and committee requirements are examples.
Do not create appointments simply because another company's safety-file template contains them.
Use the actual trigger.
3. Hazard- or Activity-Triggered Evidence
Additional requirements can arise because the company works with particular machinery, substances, processes, environmental exposures or high-risk activities.
The file for a fabrication workshop should therefore not look identical to the file for a small office.
4. Construction-Specific Evidence
Construction work brings its own regulatory architecture, including health and safety specifications, plans, files, appointments, risk assessments, contractor controls and other project records where applicable. South African Government
5. Contractual or Procurement Evidence
A client may request items such as particular insurance records, supplier documents, policies, project templates or forms.
These may be mandatory for the contract.
That does not necessarily make each item a statutory requirement under the OHS Act.
Health and Safety File Checklist South Africa: The Trigger-Based Structure
Instead of copying a generic index, build the file around the following logic.
Evidence family | What management should establish |
Workplace identity | Which employer, workplace, department, project or site does the file cover? |
Legal framework | Which Act, regulations and specific provisions apply? |
Risk assessment | What hazards and credible harmful events have been identified? |
Controls | What eliminates, reduces or manages those risks? |
Responsibility | Who owns each applicable duty or operational control? |
Appointments | Which written appointments are actually triggered? |
Competence | What competence is required for specialist work? |
Training | What information, instruction or training is required? |
Induction | What workplace-specific safety information has been communicated? |
PPE | What PPE is required by the actual residual risks? |
Inspection | What must be inspected and at what appropriate frequency? |
Maintenance | What plant, machinery or equipment requires maintenance evidence? |
Emergency readiness | What emergencies are credible and what arrangements exist? |
Incidents | What incidents must be recorded, reported or investigated? |
Corrective action | What failed, who owns the fix and when is it due? |
Contractors | What contractor controls and records apply? |
Occupational health | Are specialist assessments or surveillance triggered? |
Document control | Which version is current and which records are expired or superseded? |
Review | What change, incident or finding requires the system to be reviewed? |
Verification | Can somebody prove that the controls actually exist? |
Use this structure to make every file section traceable to a real workplace requirement.
Not:
Section A — miscellaneous PDFs.
Start the File With the Workplace — Not the Template
Before deciding what goes inside the file, define what the file applies to.
Record:
Company → Workplace → Department → Activities → Employees → Machinery → Substances → Contractors → High-risk work → Applicable regulations
This prevents one of the most common document-control failures:
A business downloads somebody else's safety-file template and then tries to make its own workplace fit the template.
The process should work in the opposite direction.
The workplace determines the evidence.
HIRA Should Drive the Safety File
A strong safety file is downstream from hazard identification and risk assessment.
If the HIRA identifies:
working at height, the evidence trail may require height-specific controls.
If it identifies:
hazardous chemicals, chemical-control requirements may apply.
If it identifies:
machinery, machinery-related controls and inspections may become relevant.
If it identifies:
knowledge or competence gaps, training may become part of the corrective action.
If it identifies:
contractor interfaces, contractor-control documentation may be needed.
The file should therefore be partly generated by the risk-control system.
How serious is the risk and what must we do?
What evidence shows that we did it?
Which OHS Records Have Specific Retention Requirements?
Do not invent one universal retention period.
Different records can have different requirements.
Two particularly useful examples come from the General Administrative Regulations.
Health and Safety Committee Records
Where a health and safety committee has been established, the regulations require the relevant records contemplated in section 20(2) of the Act to be kept for at least three years. South African Government
Incident Records
The General Administrative Regulations require specified incident records to be kept at the workplace or relevant section of the workplace for at least three years.
They also require applicable recorded incidents to be investigated, with findings entered into the prescribed record and corrective action followed up. South African Government
That is much stronger guidance than:
“Keep everything for five years because someone on the internet said so.”
Other regulations may impose different recordkeeping requirements.
Always follow the requirement applicable to the specific record.
Incident Records Should Feed Corrective Action
A good safety file does not archive incidents and move on.
The General Administrative Regulations create a clear operational sequence around applicable incidents:
RECORD → INVESTIGATE → FIND CAUSE → RECOMMEND ACTION → IMPLEMENT → REVIEW
The regulations require specified incidents to be investigated and findings recorded, while the health and safety committee, where applicable, must examine relevant records and ensure reasonably practicable actions are implemented and followed up. South African Government
That gives employers a powerful test:
Show me what changed because of the incident.
An incident form without corrective action is an incomplete management story.
OHS Appointments: Do Not Fill the File With Roles That Do Not Apply
Appointment letters are one of the biggest sources of safety-file theatre.
A company downloads a pack.
It contains dozens of templates.
Management signs all of them.
The file now looks impressive.
But what triggered those appointments?
Some OHS responsibilities arise directly from legislation.
Others arise only because of workforce numbers, machinery, construction activities or specific hazards.
Others may be operational appointments created by the company itself.
The correct sequence is:
TRIGGER → ROLE → COMPETENCE → APPOINTMENT → FUNCTION → EVIDENCE → REVIEW
Use the dedicated SSA guide:
Training Records: A Certificate Is Not the Entire Evidence Trail
Training belongs in the file when it is relevant to the work, hazard, role or required competence.
But avoid the dangerous leap:
Certificate exists = employee is automatically safe and competent forever.
A stronger training evidence trail can connect:
Question | Evidence |
Who received the training? | Employee identity |
Why was it required? | Role / HIRA / workplace requirement |
What was completed? | Course / programme |
When? | Training date |
Who provided it? | Provider |
Was assessment required? | Assessment evidence |
What certificate or record exists? | Evidence reference |
Does a review or renewal trigger exist? | Legal / provider / client / risk basis |
Has the employee's job changed? | Role review |
Is workplace supervision still required? | Supervisor verification |
Do not automatically give every certificate the same expiry period.
The review basis should come from the actual requirement.
First Aid, Fire and Emergency Records
Emergency evidence should follow credible workplace emergencies.
The relevant records could differ depending on the workplace.
A small office may need a very different system from a fabrication workshop, chemical facility, warehouse or construction project.
Your file may therefore need to connect emergency arrangements to matters such as:
first aid, evacuation, fire, chemical release, electrical incidents, confined-space emergencies, machinery incidents or rescue from height.
Again:
Do not create an emergency record because it appeared in someone else's template.
Create it because the workplace needs it.
Contractor Records Belong in Their Own Evidence Chain
Contractor documentation should not become a random subsection labelled:
“Contractor paperwork.”
The stronger sequence is:
SCOPE → CONTRACTOR → HAZARDS → COMPETENCE → INDUCTION → AUTHORISATION → CONTROL → MONITOR → CLOSE OUT
Contractor Safety Checklist South Africa: Pre-Work Verification, Site Entry & OHS Records
And:
The resulting contractor records should sit inside the employer's wider OHS evidence system so that site-entry, competence, authorisation, monitoring and close-out can be verified.
Construction Safety Files Require Special Treatment
Under the Construction Regulations 2014, a principal contractor must provide the client with a suitable site-specific health and safety plan and open and keep on site a health and safety file containing the documentation required by the Act and Regulations. South African Government
A contractor performing construction work must similarly provide an appropriate health and safety plan before performing that work and keep its required health and safety file on site. South African Government
The principal contractor must also hand a consolidated health and safety file to the client on completion, including specified information concerning the completed structure. South African Government
Construction Safety File Legal Chain
Party / process | Evidence concept |
Client | Health and safety specification and client duties |
Principal contractor | Site-specific health and safety plan |
Principal contractor | Health and safety file |
Contractors | Relevant health and safety plans and files |
Risk assessment | Forms part of construction health and safety planning |
Contractor controls | Competence, resources and applicable project records |
Audits | Periodic site audits and document verification |
Completion | Consolidated file handed to client |
This is the legal architecture.
Not:
“Every construction file must contain exactly 351 documents.”
Important Current Position on the 2025 Draft Construction Regulations
Do not present the 2025 draft as though it automatically replaced the 2014 Regulations.
The Department of Employment and Labour published replacement Draft Construction Regulations 2025 for public comment in March 2025 and expressly described them as intended to replace the Construction Regulations 2014. One proposed change was explicit recognition of electronic health and safety files. South African Government
The Department's 2025/26 planning material continued to list the Construction Regulations 2014 among regulations under review. Labour.gov.za
Therefore, before relying on construction-specific requirements, employers and contractors should verify the latest promulgated position rather than treating draft wording as operative law.
Company Documents: Not Everything in the File Comes From the OHS Act
Safety-file checklists commonly include:
tax documents, B-BBEE certificates, public-liability insurance, company-registration documents and customer-specific supplier information.
Those records may be entirely appropriate for a tender or client onboarding process.
But do not describe each one as though the OHS Act universally prescribes it for every employer.
Instead classify the record correctly:
Record | Possible basis |
Risk assessment | OHS / applicable risk-control duty |
Incident record | Regulatory requirement where triggered |
Construction H&S file | Construction Regulations |
Legal appointment | Applicable Act/regulation trigger |
Training evidence | Hazard/role/regulatory requirement |
Tax compliance | Procurement / tax requirement |
B-BBEE certificate | Commercial / procurement requirement |
Public liability insurance | Contractual / risk-management requirement |
Client-specific declaration | Contractual requirement |
Internal policy | Company governance / legal or operational context |
A file becomes much easier to defend when management knows why each document exists.
Build a Safety File Legal-Trigger Register
Every serious employer should be able to add one field beside each file section:
WHY IS THIS HERE?
Use a register like:
Record | Trigger | Source | Owner | Evidence location | Review trigger | Status |
Risk assessment | Workplace hazard | Applicable OHS duty | ___ | ___ | Change / incident | Current |
H&S Rep appointment | Employee threshold | OHS Act | ___ | ___ | Workforce change | ___ |
Incident record | Recordable incident | GAR 9 | ___ | ___ | Incident | ___ |
Construction file | Construction work | CR 7 | ___ | ___ | Project changes | ___ |
Training certificate | Role / risk | Applicable requirement | ___ | ___ | Defined review | ___ |
Client insurance | Contract | Client specification | ___ | ___ | Expiry | ___ |
That one page could transform the download from a checklist into a management system.
The Safety File Should Have a Document-Control Register
Without document control, the file slowly becomes unreliable.
Track:
document name, reference number, version, owner, issue date, approval date, review basis, next review, expiry date where applicable, replacement version and status.
Possible statuses:
CURRENT | REVIEW DUE | EXPIRED | SUPERSEDED | OUTSTANDING | NOT APPLICABLE
The important one is:
NOT APPLICABLE
A professional evidence system should be able to explain why a record does not apply.
Blank spaces create uncertainty.
A documented N/A decision creates traceability.
Do Safety Files Expire Every Year?
There is no sound basis for telling every employer:
“Your entire safety file expires after 12 months.”
Individual documents may expire.
Certificates may have particular validity or review arrangements.
Client requirements may impose renewal periods.
Risk assessments may require review after workplace changes or incidents.
Construction health and safety plans must be reviewed and updated as work progresses. South African Government
But the correct model is:
DOCUMENT-SPECIFIC REVIEW TRIGGERS
rather than:
EVERYTHING EXPIRES ON THE SAME DATE.
What Should Trigger an Immediate Safety-File Review?
A safety file is not finished after the lever-arch folder receives a label.
Review it when the system changes.
Strong triggers include a new activity, new process, different machinery, new substance, significant staff changes, new contractor, role change, new project phase, incident, inspection finding, failed control, legal change, client requirement, changed workplace layout or identified training gap.
The principle is simple:
If the risk or control system changes, ask whether the evidence must change too.
The 15-Minute Safety-File Readiness Test
Management should be able to answer these questions without spending two hours searching cabinets and inboxes.
Test | Question |
1 | What are our most significant workplace hazards? |
2 | Where is the current assessment? |
3 | What controls are supposed to manage each major risk? |
4 | Who owns those controls? |
5 | Which legal appointments genuinely apply? |
6 | Can we produce the current appointment evidence? |
7 | What safety training is required for each relevant role? |
8 | Can we retrieve the evidence quickly? |
9 | Which certificates or records require review soon? |
10 | What inspections are currently overdue? |
11 | What open corrective actions exist? |
12 | What incidents remain unresolved? |
13 | Which contractors are currently authorised? |
14 | Which records are contractual rather than statutory? |
15 | Can management prove that the controls described in the file operate in practice? |
If management cannot answer half of these:
The problem is not the index.
The problem is the system.
Common Health and Safety File Mistakes in South Africa
Weak practice | Stronger approach |
Copy another company's index | Start with your own risks and triggers |
Sign every appointment template | Establish whether each role actually applies |
Keep expired certificates | Track validity and review basis |
Treat every client request as legislation | Separate statutory and contractual requirements |
File generic HIRAs | Assess actual workplace activities |
Record inspections without action | Link findings to corrective action |
Store certificates without role mapping | Connect competence to work performed |
Keep incident reports with no close-out | Verify corrective action |
Assume every certificate expires annually | Follow actual review/validity requirement |
Add documents without owners | Assign control responsibility |
Delete superseded versions without control | Maintain version history appropriately |
Treat the file as proof of compliance | Verify the real-world system |
What Happens When an Inspector Asks for Evidence?
The file should not require a theatrical performance.
Management should be able to retrieve relevant evidence quickly.
The General Administrative Regulations give inspectors access powers and allow an inspector to require an employer or user to make available somebody with full knowledge of workplace hazards to accompany the inspection. South African Government
That tells employers something important:
An impressive index is not enough.
Someone should understand:
the workplace, the hazards, the controls and the evidence.
The strongest safety file therefore allows management to answer:
“Show me.”
Not:
“I think our consultant has that somewhere.”
Free Workplace OHS Evidence & Safety File Management Pack — South Africa
The free download is a 45-page fillable employer management system designed to turn safety-file administration into a repeatable evidence-control process.
The 45-page pack follows:
DEFINE → IDENTIFY → TRIGGER → CONTROL → RECORD → ASSIGN → VERIFY → REVIEW
The pack includes:
Tool | Purpose |
Employer start-here guide | Explain how to use the pack |
Workplace profile | Establish scope |
Legal-trigger matrix | Determine what applies |
Safety-file master index | Control file architecture |
HIRA evidence map | Connect hazards to evidence |
Appointment register | Track applicable roles |
Training & competence register | Identify gaps |
Certificate review tracker | Prevent missed reviews |
PPE evidence register | Track applicable PPE |
Inspection register | Track inspection evidence |
Corrective-action register | Assign and close findings |
Emergency-readiness evidence | Track emergency controls |
First Aid evidence section | Track applicable readiness |
Incident register | Record applicable incidents |
Incident corrective-action page | Verify learning and closure |
Contractor evidence register | Control contractor files |
Specialist assessment screen | Identify occupational-hygiene triggers |
Machinery / equipment evidence index | Control relevant records |
Document-control register | Track current versions |
Expiry / review dashboard | 30 / 60 / 90-day visibility |
Missing-document register | Identify gaps |
Management assurance page | Executive verification |
15-minute readiness test | Rapid audit |
Monthly review record | Maintain the system |
Evidence-location index | Find documents quickly |
Use the pack to test each record through five stages:
REQUIRED → PRESENT → CURRENT → IMPLEMENTED → VERIFIED
Frequently Asked Questions About Health and Safety Files in South Africa
Is a health and safety file mandatory for every company in South Africa?
There is no single universal generic file containing an identical set of documents that every employer must maintain. Employers do, however, have OHS duties and specific records may be required under the Act and applicable regulations. Construction work has explicit health and safety file requirements under the Construction Regulations. Labour.gov.za
What must be in a health and safety file in South Africa?
The contents should follow the employer's applicable legal duties, workplace hazards, workforce triggers, machinery, substances, activities, contractor arrangements and project requirements. For construction, Regulation 7 requires the file to include documentation required under the Act and Construction Regulations. South African Government
What is the difference between a health and safety plan and a safety file?
In construction, the health and safety plan describes how project health and safety requirements will be implemented. The health and safety file holds the applicable documentation and evidence generated or required for the work. They are related but are not the same thing. South African Government
Does every contractor need a safety file?
Do not state that as a universal rule for every contractor performing every kind of service. Construction contractors have express file duties under the Construction Regulations. Other contractor documentation can arise from the OHS Act, applicable regulations, the work being performed or client requirements.
How long must safety-file records be kept?
There is no single retention period for every OHS document. For example, applicable health and safety committee records and incident records under the General Administrative Regulations have minimum three-year retention requirements. Other records can have different requirements. South African Government
How often must a health and safety file be updated?
There is no universal rule that every file simply expires once a year. Review should follow legal requirements, changes to work or hazards, incidents, document validity, project progress and other relevant triggers.
Can a safety file be electronic?
Electronic document control can be useful, but employers should distinguish general workplace evidence management from specific construction requirements. The 2025 Draft Construction Regulations proposed explicit acceptance of electronic health and safety files, but draft provisions should not be treated as operative requirements without confirming the current promulgated position. South African Government
Should training certificates be kept in the safety file?
Relevant training and competence evidence can form an important part of an employer's OHS records. But the presence of a certificate does not automatically prove that the person remains competent for every task or that the workplace's other risk controls have been satisfied.
Does having a safety file mean a company is OHS compliant?
No. A file is evidence. Actual compliance depends on whether applicable legal duties and workplace controls are identified and implemented in practice.
What is the biggest safety-file mistake employers make?
Treating the file as the safety system itself.
A well-organised folder cannot compensate for uncontrolled hazards, untrained employees, defective machinery, expired evidence, unmanaged contractors or corrective actions that were never completed.
Authoritative Sources & Regulatory References
Authoritative Source | What It Supports |
Establishes the general employer health-and-safety duties underpinning hazard identification, precautionary measures, information, instruction, training and supervision. | |
Supports requirements concerning access to OHS legislation, health and safety committee records, incident recording, investigation and applicable record-retention duties. | |
Establishes construction-specific health and safety plans, principal-contractor and contractor safety files, audits, document verification and project handover requirements. | |
Confirms that replacement Construction Regulations were issued for public comment as draft regulations and included proposed changes such as explicit recognition of electronic health and safety files. |
Read More
Read More | Why Read It |
Build the risk-assessment process that should generate many of the controls, corrective actions and evidence managed inside the safety-file system. | |
Establish which OHS appointments genuinely apply before filling the file with unnecessary or incorrectly triggered appointment letters. | |
Go deeper into contractor scope, competence, induction, authorisation, site-entry controls and the records employers should verify before work starts. |
Final Word: A Safety File Should Be Able to Survive One Question
A safety file is not valuable because it is thick.
It is not valuable because every tab is colour-coded.
And it is not valuable because someone sold the company a template containing 100 documents.
Its value comes from whether management can answer one question:
Can we prove that the health-and-safety system described by these documents actually exists in the workplace?
That means connecting:
hazards to controls;
controls to responsible people;
people to competence;competence to evidence;
inspections to corrective action;
incidents to learning;
and every important record to verification.
That is how a health and safety file South Africa becomes more than paperwork.
It becomes a management system.
And that is what protects people.
Swift Skills Academy — Safer People, Stronger Industries.
