Build your free safety document now
All articles

Last updated · Reviewed by the Riskora editorial team

How to Manage Subcontractor RAMS Without Drowning in Paperwork

Managing subcontractor documentation isn't glamorous, but it's fundamental to staying compliant and, more importantly, keeping people safe. For UK main contractors and project managers, the sheer volume of Risk Assessments and Method Statements (RAMS), COSHH assessments, insurance certificates, and competency records can quickly become overwhelming. Get it wrong, and you're not just risking project delays; you're looking at potential prosecution under regulations like the Construction (Design and Management) Regulations 2015 (CDM 2015) and the Health and Safety at Work etc. Act 1974 (HASAWA 1974).

The core principle is to ensure that anyone working on your site is competent, aware of the risks, and working to safe systems. This isn't just about ticking boxes; it's about verifying that they understand and *can* implement the controls they've documented. Drowning in paperwork isn't an option.

This article cuts through the noise to provide a practical framework for managing subcontractor health and safety documentation.

The Pre-Start Pack: Your First Line of Defence

A well-structured pre-start pack is crucial. This isn't just a request for documents; it's an opportunity to set expectations and identify potential issues early. Your pack should clearly list all required documentation with submission deadlines. Think of it as your contractual health and safety bible for subcontractors.

Typical requirements include:

You should demand these documents before any work commences on site. No exceptions. This proactive approach ensures you're not scrambling for paperwork when the subcontractor is already mobilised. Ignoring this step is a common failing and a direct breach of your duties as a principal contractor under CDM 2015 to plan, manage and monitor the construction phase.

  • Company health and safety policy (if 5 or more employees).
  • Specific RAMS for their scope of works, including any lifting operations, work at height, or use of hazardous substances.
  • COSHH assessments for all substances they bring to site (referencing Control of Substances Hazardous to Health Regulations 2002 (COSHH 2002)).
  • Evidence of adequate Employers' Liability and Public Liability insurance (minimum £5 million is standard for most projects).
  • Competency evidence: relevant qualifications (e.g., CSCS cards, specific plant operator tickets), training records, and in some cases, company accreditation (e.g., SMAS, CHAS, SafeContractor).
  • Any relevant licences or permits (e.g., asbestos removal licence, waste carrier licence).

Establishing Effective Version Control

RAMS and other safety documents are live documents, and they often undergo revisions. Without proper version control, you'll inevitably end up with outdated information or confusion over which document is current. This can be catastrophic if an incident occurs and you can't prove the latest safe system of work was being followed.

Every document should include a clear version number and date of issue. When a subcontractor submits a revision, insist on a new version number and issue date. Your internal tracking system (digital or physical) must reflect this. It's not enough to just store the latest version; you need an audit trail of changes.

For example,

Briefing and Sign-On: More Than Just a Signature

Receiving documents is one thing; ensuring they're understood and implemented is another entirely. A formal briefing and sign-on process is critical. This demonstrates that you've communicated crucial safety information and that the subcontractor's personnel have acknowledged it.

Before work begins, hold a site-specific induction that covers your site rules, emergency procedures, and critical risks. Following this, the subcontractor's supervisor (and ideally, their team) should formally sign on to their specific RAMS. This isn't just an administrative task; it's a vital communication step. It shows due diligence on your part, as required by HASAWA 1974 and MHSWR 1999, to ensure information, instruction, training, and supervision are provided.

If English isn't a first language for some operatives, consider providing briefings in their native tongue or using visual aids. A signature on a document they haven't understood is worthless in a court of law.

Document Expiry Tracking: Don't Let it Lapse

Many critical documents have expiry dates: insurance policies, competency cards (e.g., CSCS), training certificates (e.g., first aid, confined spaces), and even some COSHH assessments (though these should be reviewed periodically regardless). Letting these lapse creates significant exposure for you as the main contractor.

Implement a robust tracking system for expiry dates. This could be a simple spreadsheet with conditional formatting or a dedicated software solution. Set up automated reminders - both for yourself and the subcontractor - well in advance of expiry. Ideally, chase for updated documents at least 4-6 weeks before they are due to expire.

A lapsed insurance policy, for example, could mean you are liable for damages or injuries caused by an uninsured subcontractor. This is a fundamental failing in your duty to adequately resource and manage safety, as highlighted in HSE guidance L153 for CDM 2015.

Digital vs. Paper: Striking the Right Balance

The debate between digital and paper documentation continues, but a hybrid approach often works best for UK construction projects.

Digitise everything you can: RAMS, COSHH assessments, insurance certificates, competency records. Cloud-based platforms offer accessibility, version control, and audit trails. This is particularly useful for project managers who need access to documents on the go. Digital systems make it far easier to enforce version control and track expiry dates.

What to keep on paper (or readily accessible offline): Key site-specific documents that might be needed quickly in an emergency, such as fire plans, first aid points, and emergency contact lists. A hard copy of critical RAMS for the work currently underway in a specific area can also be useful for on-the-spot reference, especially if connectivity is an issue on site.

The HSE doesn't mandate a specific format, but they do require that information is readily available and understandable (e.g., MHSWR 1999, Regulation 10). Digital storage ticks many boxes, but always consider the practicalities of site access and use.

Red Flags: What to Spot During Document Review

Simply receiving documents isn't enough; you need to review them critically. Approving inadequate or generic RAMS provides a false sense of security and undermines your entire safety management system. Look out for these common red flags:

Spotting these issues early saves headaches down the line. It's your duty under CDM 2015 to ensure that contractors working on your site are competent and that their planned work is safe.

  • Generic RAMS: Documents that aren't specific to your project, site, or the actual task. They might be copy-pasted from a previous job with no specific details.
  • Lack of detail: Insufficient explanation of how risks will be controlled (e.g., 'wear PPE' without specifying *which* PPE, for *what* risk, and *how* it will be maintained).
  • Missing information: Absence of key contact details, emergency procedures, or clear identification of who is responsible for specific actions.
  • Outdated information: References to old legislation or standards, or expired training certificates/insurance.
  • Inconsistencies: Discrepancies between the RAMS and actual site practices you observe.
  • Poor readability: Jargon-filled, overly complex, or poorly structured documents that site operatives are unlikely to understand.
  • Missing COSHH data: Any hazardous substance brought to site *must* have a COSHH assessment and Safety Data Sheet (SDS). Absence is a warning sign.

Frequently asked questions

What is the main legal requirement for managing subcontractor safety documents?

The primary legal requirements stem from the Health and Safety at Work etc. Act 1974 (HASAWA 1974), the Management of Health and Safety at Work Regulations 1999 (MHSWR 1999), and for construction projects, the Construction (Design and Management) Regulations 2015 (CDM 2015). As a principal contractor under CDM 2015, you have significant duties to plan, manage, monitor, and coordinate the construction phase, which includes ensuring the competence of subcontractors and the adequacy of their safe systems of work.

Can I accept a subcontractor's generic company risk assessment?

No, not usually. While a company-level risk assessment sets out their general approach, you need task-specific RAMS for the work they will undertake on your project. Generic documents rarely account for the unique hazards and controls required for your specific site conditions or project scope. This is a common red flag the HSE would look for during an inspection.

How often should I review subcontractor documents?

RAMS should be reviewed before work commences, and then periodically or whenever there's a significant change to the scope of work, site conditions, or an accident/incident. Other documents like insurance and competency records should be tracked against their expiry dates, with reminders set well in advance. COSHH assessments should be reviewed if processes change or at a maximum of every five years, as per COSHH 2002 guidance.

What if a subcontractor refuses to provide required documents?

If a subcontractor refuses or fails to provide the required, adequate, and up-to-date documentation, they should not be allowed to start work on your site. Allowing them to proceed exposes you to significant legal, financial, and reputational risk. It’s a breach of your duties, particularly under CDM 2015, to appoint competent contractors and ensure work is properly planned and managed.

Is an electronic signature valid for RAMS sign-on?

Yes, electronic signatures are generally accepted in the UK, provided there is a robust system to verify the identity of the signatory and to ensure the integrity of the document (i.e., it hasn't been tampered with after signing). Digital RAMS sign-on systems can be highly effective for demonstrating that individuals have read and understood the documentation.

Summary

Effective management of subcontractor health and safety documentation isn't about bureaucracy; it's about robust risk control and legal compliance. By implementing structured pre-start packs, rigorous version control, thorough briefing processes, proactive expiry tracking, and critical document review, you can avoid drowning in paperwork and, more importantly, ensure a safer working environment for everyone on your project. Embracing digital solutions for storage and tracking, whilst retaining essential hard copies for site reference, offers the most pragmatic approach for today's UK construction industry. Your diligence here is a direct reflection of your commitment to health and safety, safeguarding lives, and protecting your business.

Related reading

Frequently asked questions

Who is responsible for collecting subcontractor RAMS?
The principal contractor under CDM 2015. They must request, review and accept RAMS from each sub-contractor before that contractor starts work, and store the accepted version with the construction phase plan.
How long should subcontractor RAMS be kept?
Keep the health and safety file for the lifetime of the structure (CDM 2015 requirement). Day-to-day RAMS are commonly retained for at least 3 years after project completion for civil liability and HSE inspection purposes.
Can subcontractors share one RAMS across multiple sites?
No. Each site needs its own version with the correct address, hazards and operatives. Subcontractors can reuse the structure and most of the content, but the document submitted must be site-specific.
Free RAMS builder

Create your RAMS free — preview before sign-up

Generate a preview first. Sign up only when you want to save, edit or export.

Final RAMS must be reviewed and approved by a competent person before use.

Create your RAMS instantly with Riskora

Generate structured safety documents in minutes — no blank templates, no guesswork.

Get Started Free