Skip to content
LobbyExpress
Search

Guide

Contractor management: inductions, permits and insurance

A practical guide to managing contractors through the front desk: checking documents before arrival, running inductions, linking sign-in to permits to work, tracking expiry dates and keeping on-site rules enforceable.

By LobbyExpress Editorial

Photo: wocintech (microsoft) - 116 by wocintechchat.com, CC BY 2.0

Contractors are not visitors with a toolbox. A visitor comes for a meeting and leaves. A contractor may be on site for weeks, working at height, isolating electrical supplies or cutting into fire-stopping, and the organisation that let them in shares responsibility for how that work is done.

That is why contractor management is often the part of a visitor system that gets a purchase approved. The front desk becomes the last checkpoint between a contractor whose paperwork is in order and one whose insurance lapsed last month, who never completed the induction or who is about to start hot work without a permit.

This guide sets out how to organise that checkpoint so it works on a busy morning, without turning reception into a compliance office.

The duty behind the process

In Great Britain, the Health and Safety at Work etc. Act 1974 means organisations owe duties to people who are not their employees, including contractors and anyone affected by their work. The Health and Safety Executive publishes guidance on managing contractors, and construction work may also fall under the Construction (Design and Management) Regulations 2015, which set out their own duties for clients, designers and contractors. Other countries have their own frameworks.

None of these tells you to use visitor software. They do expect you to select competent contractors, share information about site risks, control high-risk work and keep an eye on how the work is carried out. A well-run contractor sign-in process provides much of the evidence that you did. Your health and safety adviser should define the rules; the front desk enforces them.

Three layers of contractor record

Most confusion in contractor management comes from treating every document as the same kind of thing. In practice there are three layers, each with its own owner and its own rhythm.

Three layers of contractor recordThree columns. Company level, checked once at approval and on renewal: insurance certificates, health and safety policy, relevant accreditations. Person level, checked per individual: identity, site induction, training and competence evidence. Job level, checked per piece of work: risk assessment and method statement, permit to work, agreed work area and dates.COMPANYPERSONJOBChecked at approvaland on each renewalChecked per individualbefore first visitChecked per piece of workbefore work startsInsurance certificatesHealth and safety policyRelevant accreditationsOwner: procurementIdentitySite induction completedTraining and competenceOwner: contractor managerRisk assessment, methodPermit to work, if neededAgreed area and datesOwner: site or works lead
Each layer has a different owner and expires on a different cycle. A good system lets each owner maintain their layer, and gives reception a single combined status at sign-in.

The owners will differ between organisations, but naming them matters. If nobody is responsible for chasing a renewed insurance certificate, the system will dutifully flag it as expired and the contractor will be turned away at 7am, with nobody available to resolve it.

Check documents before arrival, not at the desk

The worst place to check an insurance certificate is at reception, with a queue behind the contractor and nobody qualified to judge whether the cover is adequate. Move the checking upstream.

Where the system supports it, the contractor’s company uploads documents to a portal before work is booked. Someone with the right knowledge reviews them, records the expiry dates and approves or rejects. Individuals then complete any online induction before their first visit. By the time anyone arrives, reception sees a simple status: approved, approved with conditions, or not approved.

The contractor journey and where each check happensA timeline in four stages. Before arrival: the company is approved, documents are uploaded and reviewed, and individuals complete the induction. At arrival: identity is confirmed, the system shows a combined status, and a badge is issued. On site: a permit to work is issued where needed and the contractor works in the agreed area. At departure: any permit is handed back and closed, and the contractor signs out. A bracket shows that most of the checking happens before arrival.BEFORE ARRIVALAT ARRIVALON SITEDEPARTURECompany approvedDocuments reviewedExpiry dates loggedInduction completedIdentity confirmedCombined status shownSite rules acceptedBadge issuedPermit issued if neededWork in agreed areaSupervisor informedPermit handed backArea made safeBadge returnedSigned outMost of the checkingdone away from the desk
Reception’s job at arrival is to confirm identity and read a status that someone else has already decided. That keeps the morning queue moving and puts judgement where the expertise is.

Inductions that mean something

A site induction is meant to make sure a contractor knows the hazards, the emergency procedures and the rules of your site before they start. It often becomes a video played to an empty chair.

Some practical ways to keep it useful:

  • Keep it site-specific. Generic health and safety content belongs in the contractor’s own training. Your induction should cover your fire alarm, your assembly points, your restricted areas and your permit system.
  • Check understanding. A handful of questions at the end, with answers recorded, gives you better evidence than a tick box saying “I have watched the video”.
  • Set a validity period. Decide how long an induction remains valid before it must be repeated, and repeat it when the content changes significantly.
  • Cover the people who arrive unannounced. A replacement engineer sent at short notice should not bypass the induction because they were not on the original booking.

High-risk activities such as hot work, work at height, work in confined spaces and electrical isolation are commonly controlled through permits to work. A permit sets out the work, the hazards, the precautions and the time it is valid for, and it must be formally closed when the work is finished.

The permit system and the sign-in system are often separate, which creates a gap: a contractor can be signed in without the permit they need, or sign out leaving a permit open and a fire alarm zone still isolated.

Permit to work lifecycle linked to sign-in and sign-outA lifecycle of six steps around a central label reading permit to work: request, assess and authorise, issue, do the work, hand back, then close or cancel. Two dashed links connect it to the visitor system. A sign-in check beside the issue step means a permit is only issued to someone signed in that day. A sign-out check beside the hand-back step prompts reception if a permit is still open when the contractor leaves.Permitto work1. Request2. Authorise3. Issue4. Do the work5. Hand back6. CloseSign-in checkPermit only forsomeone signed inSign-out checkPrompt if a permit isstill open at departure
The two dashed links are the point of integration. Whether they are automated or a manual step at the desk, they close the gaps between being on site and being authorised to work.

If the permit system and visitor system cannot be linked directly, a manual step at the desk still helps. At sign-out, reception asks whether the contractor holds an open permit, and if so, contacts the issuer before the contractor leaves.

Track expiry dates before they bite

Every document in the company and person layers has an expiry date or a review date. Insurance policies run for a fixed term; training certificates and inductions have their own cycles. Tracking them on a spreadsheet works until the person who maintains it is on leave.

Example expiry tracking for one contractorAn illustrative timeline for one contractor company across several months, with a vertical line marking today. The public liability insurance certificate expires soon, so a first reminder has been sent and a second is due before expiry. An individual’s site induction is valid well beyond today. A training certificate has already expired, and is flagged for review before that person can sign in.EXAMPLELiability insuranceSite inductionTraining certificateTODAYExpires soonExpired: flag before next sign-inMonths agoNowMonths aheadReminder sent or dueExpired
An illustrative view. The decision that matters is what happens at the red dot: whether an expired document blocks sign-in, sends the arrival to an approver, or only warns.

Decide, document by document, what happens on expiry. Blocking sign-in is the strongest control, but it needs someone available to resolve exceptions quickly. Routing the arrival to an approver is often the practical middle ground. A warning that reception can click past is the weakest option, and should be reserved for low-risk documents.

Reminders should go to the contractor company and to the internal owner, well before expiry, with a second reminder closer to the date.

Keep on-site rules enforceable

The site rules a contractor accepts at sign-in should be short enough to read and specific enough to act on: where they may and may not go, what to do when the alarm sounds, who to report to, and how to sign out. Record the version they accepted, so that when the rules change you know who has seen which version.

Contractors also appear in your evacuation list, and often in areas visitors never reach, such as plant rooms and roof spaces. Make sure wardens know where contractors are working on a given day; our guide to running an evacuation roll-call covers how to build that into the process.

Where to go next

Contractor records contain personal data and often outlive the visit, so agree retention periods using GDPR and visitor data. If you are choosing a system, use how to write a visitor management RFP to put contractor scenarios at the heart of your demos, and check sign-in hardware for sites without a staffed desk with choosing visitor sign-in hardware. Products built for contractor-heavy industrial sites appear in the vertical-market category of the directory; for contractor features in other kinds of product, ask suppliers to demonstrate them against your own scenarios.