Subcontractor safety prequalification program for small GCs

Last updated 2026-07-10

What is a subcontractor safety prequalification program?

A subcontractor safety prequalification program is a formal process a general contractor runs before awarding work to any subcontractor. It collects safety data, reviews that data against defined standards, and produces a pass, conditional-pass, or disqualify decision. The goal is simple: stop you from handing a contract to a company whose safety record will hurt your workers or blow up your OSHA numbers.

The process is not the same as a certificate of insurance check or a vendor registration form. Those are administrative gates. Prequalification is a safety gate. You are asking: does this company have a functioning safety program, acceptable injury rates, trained workers, and the documentation to prove it?

For large GCs, prequalification is often managed through third-party platforms like ISNetworld or Avetta, which charge subcontractors annual fees of roughly $800 to $1,500 per platform ^[1]. For small GCs (say, under $20M annual revenue or fewer than 50 field employees), those platforms are usually overkill. A well-designed internal questionnaire and a one-page scorecard will do the same job without the subscription cost.

The legal pressure to have a program comes from two directions. First, OSHA's multi-employer citation policy holds GCs accountable for hazards created by subcontractors if the GC had the ability to correct or prevent them ^[2]. Second, most general liability and builder's risk insurers now ask whether you prequalify subs, and some are tying premium credits to it.

Does OSHA require GCs to prequalify subcontractors?

No. OSHA has no regulation that says "you must prequalify subcontractors." The word prequalification does not appear in 29 CFR 1926 (construction standards) or 29 CFR 1910 (general industry standards).

What OSHA does have is the multi-employer worksite policy, laid out in OSHA's 1999 multi-employer citation policy directive (CPL 2-0.124) ^[2]. Under that policy, a GC can be cited as a "controlling employer" for hazards created by a sub, even if the GC's own workers are not exposed, if the GC had supervisory authority and did not take reasonable steps to prevent or detect the violation. A documented prequalification process is one of the strongest pieces of evidence that you took those reasonable steps.

So the honest answer is this: OSHA does not require a prequalification program, but not having one makes you more exposed to controlling-employer liability. The difference between a citation that sticks and one that gets reduced often comes down to whether you can hand an OSHA inspector a paper trail showing you vetted the sub.

Some states go further. California's IIPP standard (8 CCR 3203) and Washington's Accident Prevention Program rules both describe employer responsibility over the whole worksite in ways that create a stronger implicit expectation of sub oversight ^[3]. If you operate in a state-plan state, check your state's rules directly.

What TRIR score should you require from subcontractors?

Most GC programs draw the line at a TRIR of 1.0 for automatic approval. TRIR stands for Total Recordable Incident Rate. The formula is: (number of recordable incidents x 200,000) divided by total hours worked. A TRIR of 1.0 means the company had one recordable incident per 100 full-time workers per year.

BLS data for the construction industry shows the overall TRIR for construction was 2.5 per 100 full-time workers in 2022 ^[4]. Specialty trade contractors ran higher, around 2.7. So a sub with a TRIR of 2.5 is average, not safe.

Most owner-side safety programs and large GC requirements I have seen use a TRIR cutoff of 1.0 for automatic approval and refer anything between 1.0 and 2.0 for conditional review. Above 2.0 is typically automatic disqualification unless the company can explain the numbers (a single bad year driven by one incident at a small company, for example, can spike TRIR dramatically).

For a small GC setting your own threshold, I would suggest:

TRIR Range	Suggested Action
Below 1.0	Auto-approve (safety section)
1.0 to 1.99	Conditional: request 3-year trend and written explanation
2.0 to 2.99	Conditional: require site-specific safety plan before award
3.0 and above	Disqualify or require senior leadership meeting

One thing most small GCs miss: TRIR is calculated from OSHA 300 logs, and you should ask for three years of data, not one. A single year is statistically unreliable, especially for small subs with under 20 employees. A company that had one broken wrist in a crew of eight looks terrible on paper but may run a strong safety culture otherwise.

Ask for the Days Away, Restricted, or Transferred (DART) rate alongside TRIR. DART isolates the more serious incidents and is a better predictor of future severe injuries. The BLS industry average DART for construction was 1.4 in 2022 ^[4].

What documents should you collect during prequalification?

This is where most small GC programs fall apart. They ask for too much (and never review it) or too little (and miss obvious red flags). Here is a working document list, split by what is essential and what is optional.

Essential documents:

• OSHA 300A Summary for the past three calendar years (signed). This is the legally required annual summary and must be signed by a company executive. If a sub can't produce it, that's a red flag by itself.
• Experience Modification Rate (EMR) letter from their workers' comp insurer. An EMR below 1.0 means the company's claims history is better than the industry average. Most owners and large GCs require EMR below 1.0 or 0.9. Ask for the current year and one prior year.
• Written safety program (or at minimum a safety manual table of contents). You are not reading every page. You are checking whether one exists, whether it covers the work types they will perform for you, and whether it has a date and a signature.
• Proof of OSHA 10 or OSHA 30 completion for supervisors. If their foremen are doing OSHA 30 training and yours are not, that is useful competitive intelligence for you too.
• Certificate of insurance (COI) with your company listed as additional insured. This is not a safety document, but collecting it in the same package keeps the file complete.

Useful but optional:

• Substance abuse policy
• Sample incident report form (shows they actually document near-misses)
• Training records for specific trades (e.g., forklift certification, lockout tagout training)
• References from two other GCs

Do not ask for documents you will never review. If you request a 50-page safety manual and file it unread, it helps nobody and creates a paper liability if an incident later reveals an obvious program gap you apparently ignored.

How do you score and make a prequalification decision?

Use a weighted checklist, not a complex algorithm. That is the fastest workable scoring system for a small GC. Here is a version you can put to work today.

Category	Points Available	How to Score
TRIR (3-year average)	30	<1.0 = 30, 1.0-1.99 = 20, 2.0-2.99 = 10, 3.0+ = 0
EMR (current year)	20	<0.85 = 20, 0.85-1.0 = 15, 1.0-1.2 = 8, >1.2 = 0
Written safety program exists	20	Covers relevant trades = 20, generic only = 10, none = 0
Supervisor OSHA training	15	All sups with OSHA 30 = 15, OSHA 10 = 8, none = 0
OSHA citations last 3 years	15	Zero willful/repeat = 15, one serious = 8, willful or repeat = 0

Total: 100 points. A score of 75 or above approves automatically. 50-74 goes to conditional review, where you require a pre-job safety meeting and a site-specific plan. Below 50, do not award work without a documented conversation with their safety director or owner.

The OSHA citation check is one most small GCs skip, but it is free and takes three minutes. Go to OSHA's establishment search and type in the company name. You will see every OSHA inspection, violation type, and penalty on record ^[5]. A single serious citation from five years ago is not disqualifying. A willful citation in the last two years is a different conversation.

Document every decision. Keep the completed scorecard in a file with the sub's name and contract date. If OSHA ever audits your worksite after an incident, this is what you hand them.

What should a subcontractor safety questionnaire include?

The questionnaire is the engine of the program. It collects the information your scorecard needs. Keep it to two pages or fewer. Long questionnaires get abandoned or filled out by whoever has time, not whoever knows the answers.

Core questions to include:

1. Company legal name, address, NAICS code, and number of field employees. 2. Total hours worked in each of the past three calendar years (needed to verify their self-reported TRIR). 3. Number of OSHA recordable incidents in each of the past three years. 4. DART rate for each of the past three years. 5. Current EMR and insurer name. 6. Have you received any OSHA willful or repeat citations in the past five years? If yes, describe. 7. Do you have a written Injury and Illness Prevention Program (or equivalent safety manual)? When was it last updated? 8. What percentage of your field supervisors hold OSHA 30 cards? 9. Do you conduct pre-task planning or job hazard analysis before high-hazard work? Describe your process briefly. 10. Who is responsible for safety on your jobsites (name and title)? 11. Do you have a substance abuse testing program? 12. List any trade-specific training you require (e.g., confined space, fall protection, hazard communication).

End with a certification statement: "I certify that the information above is accurate and complete. I understand that material misrepresentation is grounds for immediate disqualification and contract termination." Get a signature from an officer or owner, not an admin.

Some GCs also ask about subcontractor insurance limits here. I would keep that in a separate COI process so the safety questionnaire stays focused and the safety decision doesn't get muddled with procurement.

How do you handle a conditional approval or a borderline subcontractor?

Not every borderline sub should be rejected. Sometimes your best local framing contractor has a 2.1 TRIR because of one bad year, and the next option is a three-hour drive away. Conditional approval lets you be honest about risk while still making the award.

A conditional approval should include at least two of the following requirements, documented in writing and signed by the sub:

• A pre-mobilization meeting with their safety lead and your project super before work starts.
• A site-specific safety plan submitted and approved before mobilization.
• Weekly safety walks by your superintendent on any crew days they are on site.
• A reduced scope: they handle lower-hazard portions of the work only.
• A probationary period (say, the first project) with a formal re-evaluation before any second award.

Put the conditions in the subcontract agreement itself, more than in a letter. Your contract can specify that failure to maintain an acceptable safety record during the project is grounds for termination. Some GCs include a clause requiring the sub to notify them within 24 hours of any recordable injury on the project.

One thing that genuinely works: a required pre-task plan or job hazard analysis (JHA) before every high-hazard operation. Ask the sub to submit it to your super the morning of the task. This costs the sub maybe 20 minutes and creates a documented habit of hazard thinking. OSHA's 1926.502 fall protection standard and 1926.62 lead standard, among others, already require written plans for specific tasks. Extending that expectation to all high-hazard work is not an unreasonable ask ^[6].

How often should you re-screen subcontractors you've already approved?

Annual re-screening is the standard. Most large owner programs and GC prequalification platforms require subs to re-submit every 12 months because EMR, TRIR, and OSHA citation records all update on a 12-month basis.

For a small GC, annual re-screening of every approved sub is probably too much administrative work unless you have a dedicated safety coordinator. A risk-tiered approach makes more sense:

• Tier 1 (high-hazard trades: roofing, steel erection, excavation, electrical): re-screen annually, no exceptions.
• Tier 2 (medium-hazard: framing, mechanical, plumbing): re-screen every two years or after any recordable incident on one of your projects.
• Tier 3 (lower-hazard: painting, landscaping, cleaning): re-screen every three years.

Beyond the calendar, three things should trigger an immediate re-screen regardless of tier: any recordable incident on your project, any OSHA inspection of the sub's work on your site, or a change in the sub's ownership or safety leadership.

The practical way to manage this for a small GC is a simple spreadsheet with one row per sub, columns for approval date, tier, next re-screen date, and TRIR/EMR at last review. Set a calendar reminder. That is genuinely all the infrastructure you need.

What are the biggest mistakes small GCs make in sub prequalification?

Collecting documents and never reviewing them. This is the most common failure. A GC builds a binder of safety manuals and OSHA 300A forms, files them, and treats the act of collection as the safety program. It is not. You need someone who actually looks at the numbers and makes a decision.

Using TRIR for small subs without adjusting for company size. A company with eight field employees that had two recordable injuries has a TRIR of roughly 5.0. That looks catastrophic. But statistically, two incidents in a tiny workforce tells you almost nothing about safety culture. When a sub has fewer than 20 employees, weight the written program, JHA process, and OSHA training more heavily than the rate.

Not checking OSHA's inspection history. It is free, public, and takes minutes. A sub can put excellent numbers on a questionnaire and have a willful citation on record for an unguarded trench or a missing fall arrest system. Check it.

Failing to document decisions. If you decide to approve a borderline sub without conditions, write down why. "Owner reviewed TRIR of 2.3, confirmed single incident in 2022 drove rate, reviewed corrective action letter, approved for limited scope." Three sentences. This is what keeps a controlling-employer citation from becoming a willful one.

Building the program once and never updating it. Safety standards change. Your own insurance requirements change. If you set your TRIR threshold in 2018 and BLS industry rates have shifted since, you may be approving companies your insurer now considers high-risk ^[4].

If you need a written safety program foundation before you can meaningfully evaluate your subs', SafetyFolio's program generator walks you through building your own GC safety program in about 15 minutes, which gives you a baseline to measure subs against.

How does sub prequalification connect to your own OSHA written programs?

Your prequalification program does not stand alone. It is one component of your overall safety management system, and it only works if your own house is in order first.

If you are asking subs for a written safety program and you don't have one yourself, that inconsistency will surface during any serious incident investigation. OSHA inspectors and plaintiff attorneys both notice when a GC demands documentation from subs that the GC has never produced for its own workers.

The specific OSHA written program requirements that apply to most GCs include: Hazard Communication (29 CFR 1910.1200) ^[7], fall protection plans where required (29 CFR 1926.502), an emergency action plan (29 CFR 1910.38) ^[10], and, if you have 11 or more employees, accurate OSHA injury and illness recordkeeping (29 CFR 1904) ^[8].

If you are running OSHA training for your own crew and requiring OSHA 30 for your supers, you are in a much stronger position when you ask subs to meet the same bar. The credibility of your prequalification program depends partly on the visible safety culture of your own crews.

For GCs who want to understand OSHA enforcement mechanics more broadly, knowing what the agency is actually authorized to do and how it prioritizes inspections helps you calibrate how much prequalification documentation is genuinely protective versus how much is theater.

What does a complete prequalification program cost to build and run?

If you build it yourself, the direct cost is close to zero. You need a questionnaire (two pages), a scorecard (one page), a simple tracking spreadsheet, and a document folder per sub. You can build all of that in a day.

The real cost is time. Reviewing one subcontractor's submission takes roughly 30 to 60 minutes if the documents are organized, longer if they are not. For a small GC that uses 15 to 20 unique subs per year, that is maybe 20 hours of review time annually, plus another 5 to 10 hours for re-screens and conditional conversations.

Third-party platforms (ISNetworld, Avetta, Browz/Veriforce) shift that burden to the platform, but the sub pays the annual fee, typically $800 to $1,500 per platform ^[1]. Some subs on multiple platforms pay $3,000 or more per year just to maintain registrations. This is a real cost that goes into their bids. For small GC/sub relationships, an internal program is usually more practical for both parties.

Hiring a safety consultant to build the program from scratch typically runs $1,500 to $5,000 depending on how much customization you need. That is money you probably do not need to spend. A good questionnaire, a clear scoring rubric, and a commitment to actually reviewing submissions is the program. The sophistication is in the discipline, not the paperwork.

OSHA's penalty structure creates real financial motivation here. A serious violation carries a maximum penalty of $16,550 per violation (adjusted annually for inflation) ^[9]. A willful or repeat violation tops out at $165,514. If a sub's unguarded trench or missing fall protection lands on your site and you get cited as the controlling employer, a prequalification program with documented decisions is often the difference between a penalty and a referral to abatement.

How do you introduce a prequalification requirement to existing subcontractors?

Existing relationships are where the program gets awkward. You have worked with the same framing crew for six years. Now you are sending them a five-page questionnaire and a scoring rubric. Done badly, this reads as bureaucratic disrespect. Done well, it reads as professionalism.

The framing matters. Send a brief cover letter that explains the program's purpose in plain terms: your insurance carrier is requiring it, your larger project owners are increasingly requiring it, and you want to get ahead of it before it becomes a problem. Be honest that it is also in your interest to know you are putting the right companies on your sites.

Give existing subs a longer lead time, say 60 days, to assemble documents that new subs get 30 days to provide. Offer a 15-minute phone call to walk them through the questionnaire. Many smaller subs have excellent safety records but have never formalized their documentation, and a little help makes the process go faster for everyone.

For subs who score conditionally, have the conversation before the next bid invitation, not after. Nothing damages a relationship faster than awarding a contract and then adding conditions retroactively.

If a long-term sub refuses to participate at all, that is important information. A company that won't document its safety record is either disorganized or hiding something. Both are problems on a jobsite.

If you want to understand more of what you're actually required to provide workers, what does OSHA stand for and the broader enforcement framework is useful background for any GC building their first formal safety infrastructure.

Frequently asked questions

Is subcontractor prequalification legally required by OSHA?

No, OSHA has no regulation that explicitly requires prequalification. But under OSHA's multi-employer citation policy (CPL 2-0.124), a GC can be cited as a controlling employer for hazards created by subcontractors if the GC had supervisory authority and didn't take reasonable steps to prevent them. A documented prequalification program is strong evidence of those reasonable steps.

What TRIR threshold is most commonly used for subcontractor approval?

Most GC prequalification programs use a TRIR of 1.0 as the automatic-approval threshold and refer anything between 1.0 and 2.0 to conditional review. The BLS construction industry average TRIR was 2.5 in 2022, so 1.0 is a meaningfully higher bar. For small subs with fewer than 20 employees, weight their written program and training records more heavily than the rate, which can swing wildly from a single incident.

Can a subcontractor be disqualified based on OSHA inspection history?

Yes, and you should check it. OSHA's online establishment search is free and public. A willful or repeat citation in the past two to three years is a legitimate basis for disqualification or at minimum a conditional-approval conversation. A single serious citation from several years ago, with documented corrective action, is generally not disqualifying on its own. Document whatever decision you make.

What is an EMR and what number should I require from subs?

EMR stands for Experience Modification Rate. It is a workers' compensation insurance multiplier calculated by your state's rating bureau, comparing the company's actual claim losses to what a similar company would expect. An EMR of 1.0 is average; below 1.0 is better than average. Most GC programs require EMR below 1.0, with some requiring 0.85 or lower. Ask for a letter from the insurer, more than the sub's word.

Do I need to prequalify subs for every trade or just high-hazard work?

A tiered approach makes more sense than treating all trades the same. Require full prequalification for high-hazard trades like roofing, excavation, steel erection, and electrical. Apply a lighter-touch review for lower-hazard trades like painting or landscaping. The threshold should reflect the realistic injury risk. Applying the same scrutiny to a commercial cleaning crew as to a roofing contractor wastes everyone's time.

How long does it take to set up a subcontractor prequalification program?

If you build it internally, you can have a working program (questionnaire, scorecard, tracking spreadsheet, document folder system) in roughly one to two days of focused work. Reviewing each sub's submission takes 30 to 60 minutes. Third-party platforms remove much of the review burden but charge the subcontractor $800 to $1,500 per year. For most small GCs with fewer than 20 regular subs, the internal approach is faster and cheaper.

What happens if a subcontractor won't provide safety documentation?

Refusal to provide basic safety documentation is itself a red flag. At minimum, you should not award work without a signed statement of TRIR, EMR, and acknowledgment that the sub maintains a written safety program. A sub who genuinely can't produce OSHA 300A logs may be out of compliance with OSHA's recordkeeping rules, which apply to employers with 11 or more employees. Document the refusal and make a conscious decision about whether to proceed.

How do I handle a subcontractor who had a bad injury year but otherwise has a good record?

Ask for three years of data, not one, and look at the trend. A company with a TRIR spike in one year followed by improved numbers and a written corrective action plan is a different risk than one with a consistently high rate. For small companies, one injury in a small crew can produce a TRIR of 4 or 5 with no pattern behind it. Use conditional approval, require a site-specific safety plan, and document your reasoning.

Should I require subcontractors to have OSHA 10 or OSHA 30?

For supervisors and foremen, requiring OSHA 30 is a reasonable and increasingly common expectation on commercial work. For all field workers, OSHA 10 is the standard ask. Neither is legally required by OSHA for most construction work, but many owners and GCs make it a contract condition. Some state and local jurisdictions do mandate OSHA 10 for workers on public projects. Check your project-specific requirements.

Can I use the same prequalification form for all subcontractors?

A single base questionnaire works fine, but consider adding a trade-specific supplemental page for your highest-hazard subcontractor types. A roofing sub needs questions about fall protection systems and anchor certification that are irrelevant to a drywall crew. Keeping a universal core with optional supplements is more practical than maintaining entirely separate forms for each trade.

What records do I need to keep from the prequalification process?

Keep the completed questionnaire, the scoring sheet with your decision noted, copies of OSHA 300A summaries for the years reviewed, the EMR letter, proof of OSHA training for supervisors, and any conditional approval letters or corrective action agreements. Retain these for at least five years, which matches OSHA's recordkeeping retention requirement for injury logs under 29 CFR 1904.33.

Does prequalification protect me from liability if a subcontractor worker gets hurt?

It reduces exposure, but it does not eliminate liability. A documented prequalification process is evidence that you exercised due diligence in selecting subs, which is relevant to both OSHA controlling-employer analysis and civil tort claims. However, if you observed a hazard on your site and did nothing about it regardless of who created it, prequalification does not insulate you. It is one layer of a broader site safety responsibility.

How do small GCs prequalify subs without a dedicated safety manager?

Assign the review to your project manager or operations manager with a clear checklist and scoring rubric so the decision is structured, not judgment-call. Build in a calendar system for re-screens. Budget two to three hours per new sub and 30 to 60 minutes per annual re-screen. A spreadsheet with approval dates, tiers, and document checklist status is sufficient infrastructure for most small GC operations with fewer than 25 regular subs.

Sources

1. ISNetworld, Subscriber Information Page: Third-party prequalification platforms charge subcontractors annual fees in the range of $800 to $1,500 per platform
2. OSHA, Directive CPL 2-0.124: Multi-Employer Citation Policy: OSHA's multi-employer citation policy holds controlling employers accountable for hazards created by subcontractors when the GC had supervisory authority and did not take reasonable steps to prevent violations
3. U.S. Bureau of Labor Statistics, Employer-Reported Workplace Injuries and Illnesses 2022: The overall construction industry TRIR was 2.5 per 100 full-time workers in 2022; the DART rate was 1.4; specialty trade contractors ran a TRIR of approximately 2.7
4. OSHA, Establishment Search Tool: OSHA's online establishment search shows every recorded inspection, violation type, and penalty for any employer by company name at no cost
5. OSHA, 29 CFR 1926.502 Fall Protection Systems Criteria and Practices: 29 CFR 1926.502 requires written fall protection plans for specific construction tasks, establishing a precedent for written pre-task planning on high-hazard work
6. OSHA, 29 CFR 1910.1200 Hazard Communication Standard: OSHA's Hazard Communication standard requires a written hazard communication program for employers whose workers may be exposed to hazardous chemicals
7. OSHA, 29 CFR 1904 Recording and Reporting Occupational Injuries and Illnesses: OSHA's recordkeeping regulations require employers with 11 or more employees to maintain OSHA 300 logs and retain them for five years per 29 CFR 1904.33
8. OSHA, Penalties Page: OSHA's maximum penalty for a serious violation is $16,550 per violation as of recent inflation adjustments; willful or repeat violations top out at $165,514 per violation
9. OSHA, 29 CFR 1910.38 Emergency Action Plans: 29 CFR 1910.38 requires a written emergency action plan for employers with more than 10 employees