Last updated 2026-07-11

TL;DR
Most small warehouses need at least seven written OSHA programs: Hazard Communication, Lockout/Tagout, Emergency Action Plan, forklift (powered industrial truck) safety, Respiratory Protection if respirators are used, a Bloodborne Pathogens Exposure Control Plan if applicable, and a written walking-working surfaces plan. Each comes from a specific 29 CFR 1910 standard. Skip one and you face serious-violation citations up to $16,131 each in 2024.
Which written OSHA programs does a small warehouse actually have to have?
There is no single OSHA checklist titled "programs a warehouse must have." The requirement for a written program lives inside each individual standard. Trigger the standard, and the written program is mandatory. No debate.
For a typical small warehouse, one that handles receiving, storage, order picking, and shipping, these written programs are almost always required [1]:
1. Hazard Communication (HazCom) Program (29 CFR 1910.1200) 2. Lockout/Tagout (LOTO) Energy Control Program (29 CFR 1910.147) 3. Emergency Action Plan (EAP) (29 CFR 1910.38) 4. Powered Industrial Truck (Forklift) Safety Program (29 CFR 1910.178) 5. Respiratory Protection Program (29 CFR 1910.134), required only if respirators are in use 6. Bloodborne Pathogens Exposure Control Plan (29 CFR 1910.1030), required if any workers have occupational exposure to blood 7. Walking-Working Surfaces / Housekeeping Program (29 CFR 1910.22)
Depending on your specific operation, you may also need written programs for Personal Protective Equipment (29 CFR 1910.132), Fire Prevention (29 CFR 1910.39), and Permit-Required Confined Spaces (29 CFR 1910.146) if your warehouse has pits, tanks, or enclosed areas workers enter.
Headcount changes almost nothing here. OSHA's written-program requirements carry no small-business exemption for most of these standards. A warehouse with five employees needs the same written HazCom program as one with five hundred. The only real carve-out is the Emergency Action Plan: businesses with ten or fewer employees can communicate the plan out loud rather than in writing under 29 CFR 1910.38(b) [1]. That is the exception, not the rule.
What does a Hazard Communication written program need to say?
A written HazCom program has to describe, in your own facility's terms, how you handle chemical labels, safety data sheets, and employee training. The Hazard Communication standard, 29 CFR 1910.1200, is the single most cited OSHA standard year after year. In fiscal year 2024 it ranked second across all industries [2]. Any warehouse holding a chemical, and that includes cleaning agents, battery acid, propane, or lubricants, needs one.
The standard at 1910.1200(e)(1) says your written program must describe "how the requirements for labels and other forms of warning, safety data sheets, and employee information and training will be met." That is the language, word for word [8].
Your written HazCom program needs to cover:
- A list of all hazardous chemicals in the facility (the chemical inventory)
- Where Safety Data Sheets (SDSs) are kept and how employees reach them
- How containers are labeled, including pipes and secondary containers
- How you train new hires and when you retrain
- How you handle non-routine tasks involving chemicals
- How you manage chemicals contractors bring in
Some warehouses stop at "we keep SDSs in a binder." That is not a written program. Inspectors look for the written description of your system, more than the sheets themselves. For how SDSs feed into the program, see what goes into an hcl safety data sheet.
Is a written Lockout/Tagout program required for warehouses?
Yes, if any worker services or maintains equipment where a surprise start-up could hurt someone. In most warehouses that means conveyors, pallet wrappers, dock levelers, HVAC units, and compactors. Lockout/Tagout is the standard people underestimate most, and it lands in OSHA's top five citations nearly every year.
29 CFR 1910.147(c)(1) requires a written energy control program. It has to cover the scope, purpose, and rules of the program, plus at least one procedure for each type of equipment where energy must be controlled before servicing [9].
That last piece trips people up. You cannot write one generic line that says "turn off and lock out all equipment." You need equipment-specific procedures unless the machine meets a narrow exception at 29 CFR 1910.147(c)(4)(i): a single energy source that can be locked out, full de-energization when locked, the worker doing the job holds the only key, and no other hazards exist. Most warehouse equipment fails at least one of those tests.
A workable LOTO program for a small warehouse has a policy statement, definitions, a list of affected equipment, energy-control procedures for each machine type, training requirements, and an annual inspection schedule. Plan on one to two pages per machine type.
Does a small warehouse need a written Emergency Action Plan?
Yes, with one exception. More than ten employees means your Emergency Action Plan must be in writing under 29 CFR 1910.38(b). Ten or fewer, and you can communicate it out loud [1].
The written EAP must cover: how employees report emergencies, evacuation procedures and route assignments, procedures for anyone who stays to run critical operations before evacuating, how you account for everyone afterward, procedures for employees performing rescue or medical duties, and the name or job title of a contact for questions.
Fire extinguisher use often connects here. Expect any employee to fight small early-stage fires, and you also need a Fire Prevention Plan under 29 CFR 1910.39. Set a policy of "everyone evacuates, nobody fights fires," and the Fire Prevention requirement gets lighter, but the EAP still applies.
Keep the EAP somewhere employees can get to it. OSHA requires you to make it available on request.
What are the written program requirements for forklift safety?
29 CFR 1910.178 does not use the phrase "written program" as bluntly as some standards, but it requires written operator evaluation records and documented certification. In practice, every warehouse running forklifts should keep a written forklift safety program covering training, evaluation, re-evaluation, and rules for the truck types in use.
The key requirements under 1910.178(l) [10]:
- Training before operation: Operators must be trained on the specific truck types they will run
- Written evaluation: You must evaluate each operator and certify it in writing, with the date, the truck type, and the evaluator's name
- Re-evaluation: Required after unsafe driving is observed, after an accident or near-miss, when a different truck type is assigned, or at least every three years
The certification record is what 1910.178 requires in writing, but any serious inspector also wants your operating rules, pre-shift inspection checklist, and refueling or battery-charging procedures. Document those too.
For the training piece, see our guide to forklift certification.
BLS data puts forklifts at roughly 85 fatal accidents and tens of thousands of serious injuries a year in the U.S. [3]. A written program with documented operator evaluations is one of your clearest defenses in a post-accident inspection.
When does a warehouse need a written Respiratory Protection Program?
Only when respirators are used. 29 CFR 1910.134(c)(1) is blunt: a written program is required when respirators are necessary to protect worker health [11]. That single sentence catches a lot of warehouses by surprise.
Common triggers:
- Workers using N95 dust masks to handle dusty products, once an assessment finds dust is a hazard and respirators are the control
- Propane forklift exhaust in an enclosed, poorly ventilated building
- Pesticide or fumigant exposure during receiving or pest control
- Spray painting or coating operations inside the warehouse
Issue any respirator to any employee for a mandatory reason, and the written program has to exist. It must address respirator selection, medical evaluations, fit testing, use (including emergencies), maintenance and storage, training, and program evaluation.
There is a narrow exception for voluntary use of filtering facepieces. Under 29 CFR 1910.134(c)(2), if use is truly voluntary and you determine the respirator itself creates no hazard, you only need to hand the employee Appendix D of the standard. No full program. But the moment respirator use is mandatory, or you move to any supplied-air or cartridge respirator, the full program applies.
What other written programs might a warehouse need depending on its operations?
The seven core programs cover most small warehouses. What you store, how the building is laid out, and what workers actually do can add more.
Personal Protective Equipment Hazard Assessment (29 CFR 1910.132): OSHA requires a written certification that you assessed the workplace for hazards needing PPE. Often a single page, but it has to exist, be dated, and be signed by a qualified person [12]. Plenty of warehouses skip this and get cited.
Permit-Required Confined Space Program (29 CFR 1910.146): Pits below dock level, storage tanks workers enter, or any space big enough to enter bodily with limited entry or exit and not designed for continuous occupancy all need evaluation. If a space holds atmospheric, engulfment, or entrapment hazards, it becomes permit-required and a written program is mandatory.
Fire Prevention Plan (29 CFR 1910.39): Required where triggering standards apply, including some flammable storage. Store flammable liquids in bulk and you should also review 29 CFR 1910.106.
Hearing Conservation Program (29 CFR 1910.95): Required once noise reaches an action level of 85 dB(A) as an 8-hour time-weighted average. Loud conveyors or metal-on-metal dock work can cross that line.
| Written Program | Standard | Triggered by | Written Req. |
|---|---|---|---|
| Hazard Communication | 29 CFR 1910.1200 | Any hazardous chemical on site | Always |
| Lockout/Tagout | 29 CFR 1910.147 | Equipment servicing/maintenance | Always |
| Emergency Action Plan | 29 CFR 1910.38 | More than 10 employees | If over 10 employees |
| Forklift Safety | 29 CFR 1910.178 | Any powered industrial truck | Always |
| Respiratory Protection | 29 CFR 1910.134 | Respirators in use | If respirators used |
| Bloodborne Pathogens ECP | 29 CFR 1910.1030 | Occupational exposure to blood | If exposed |
| PPE Hazard Assessment | 29 CFR 1910.132 | Any PPE use | Written certification |
| Permit-Required Confined Space | 29 CFR 1910.146 | Qualifying spaces exist | If spaces exist |
| Hearing Conservation | 29 CFR 1910.95 | 85 dB(A) TWA or above | If threshold met |
How much does an OSHA citation cost if a written program is missing?
A missing written program usually lands as a "serious" violation, which maxes out at $16,131 per violation in 2024. A willful or repeated violation can reach $161,323 [4]. OSHA adjusts these limits every year for inflation.
Miss three programs and you are looking at roughly $48,000 before abatement costs, legal fees, or the disruption of an inspection tearing through your operation.
Small employers do get penalty reductions. Businesses with 25 or fewer employees get up to a 60% cut, and those with 26 to 100 employees get up to 40% [5]. A maximum $16,131 serious citation at a 20-person warehouse could drop to around $6,452. Still expensive. And these reductions are discretionary. A history of violations or evidence of willful disregard shrinks your odds of getting the full break.
The cheapest path is writing the programs before an inspector ever knocks. OSHA's free On-Site Consultation program, run through state agencies and kept separate from enforcement, will review your programs confidentially and cannot issue a citation [5]. For businesses that want to move faster, a tool like SafetyFolio can generate a compliant written program in about fifteen minutes instead of the fifteen hours most small employers burn cobbling one together.
For what an inspection looks like and how citations escalate, see our guide on OSHA basics.
Do written programs need to be updated, and how often?
There is no universal "update every X years" rule across all programs. But several standards bake in their own review requirements, and those are not optional.
- Lockout/Tagout (29 CFR 1910.147(c)(6)): Annual inspection of each energy control procedure. Add a machine or change a process, and update the procedure before the change goes live [9].
- Respiratory Protection (29 CFR 1910.134(l)(1)): Conduct and document annual program evaluations [11].
- Forklift operator evaluations (29 CFR 1910.178(l)(4)(iii)): Re-evaluate at least every three years, or sooner after incidents [10].
- Hazard Communication (29 CFR 1910.1200(e)(1)): Update the inventory and program whenever new chemicals arrive [8].
Beyond those timelines, review any program whenever the operation changes: new equipment, new chemicals, a facility expansion, a staffing shift that changes who does what. A program written in 2018 that still lists equipment you sold and chemicals you no longer stock is worse than stale. It is a liability in an inspection.
Most safety pros keep it simple: a January calendar reminder to walk the floor and ask one question. Does each written program still match what actually happens here? That takes a morning, not a week.
What training records must accompany the written programs?
A written program without training records is half a compliance program. OSHA regularly treats "program exists but training was never documented" as a separate, citable gap.
Here is what each major program asks you to keep on file:
HazCom (1910.1200): No retention period is stated in the standard, but the conservative habit is to keep records for the duration of employment plus 30 years for any chemical with long-latency health effects. At minimum, document who was trained, the date, and what was covered.
LOTO (1910.147): Annual inspection records showing the equipment inspected, the date, the employees involved, and who performed the inspection. Keep them at least three years.
Forklift (1910.178): Written certification for each operator with name, training date, evaluation date, and the evaluator's identity. No explicit retention period in the standard, so keep them for the length of the operator's employment.
Respiratory Protection (1910.134): Medical evaluation records (keep these separate and confidential), fit-test records, and training documentation. Retain fit-test records for the duration of employment.
For how OSHA training rules connect to your documentation duties, our OSHA training overview covers the full picture. And if you ever have a workplace injury, filing an incident report correctly matters as much as having the programs in place.
Can you use a free OSHA template, and are templates actually compliant?
Yes, use a free OSHA template as a structure. No, a blank template is not a compliant program. OSHA publishes sample programs on OSHA.gov for several standards, including HazCom and Respiratory Protection [6]. They are real starting points, and for a very simple operation they may be enough. The catch is that most templates are generic to a fault. They do not list your chemicals, your equipment, your emergency contacts, your forklift types, or your floor plan.
Inspectors are experienced readers. A template that still says "List chemicals here" where you never filled in the list is not a written program. It is a blank form. Citations have been written for exactly that.
A compliant program has to be specific to your workplace. That means:
- Named chemicals from your actual inventory
- Equipment-specific LOTO procedures for the machines in your building
- Evacuation routes that match your real floor plan
- Names or job titles of the people responsible for each program element
So fill it in completely, have someone who knows the facility walk through it for accuracy, and date it.
Want to skip the blank-page problem? SafetyFolio's generator walks you through the facility-specific questions and produces a filled-in, OSHA-structured program for each required type. Any tool, ours or anyone else's, still needs you to verify the output matches what actually happens in your warehouse.
What does an OSHA inspector look for when reviewing written programs?
OSHA's Compliance Safety and Health Officers follow Field Operations Manual procedures during inspections [7]. For written programs, they check five things in order.
First, does the program exist at all? Sounds obvious, but a large share of small-business citations come from programs that were simply never written.
Second, is it facility-specific? A generic template with blanks unfilled is not a program.
Third, does it match actual practice? An inspector will interview employees. If your LOTO program says workers use red locks assigned to each person, and the inspector finds one shared lock in a drawer, that gap is a citation.
Fourth, is it current? A chemical inventory listing products you dropped two years ago and missing the ones you added last spring is out of date, and out of date is citable.
Fifth, do employees know it exists and know how to reach it? HazCom requires employees to know where SDSs are kept. Respiratory Protection requires training on the program. The inspector will ask employees directly.
To see how OSHA training requirements connect to program compliance, or if your supervisors could use structured safety leadership training, an OSHA 30 course is worth the time. Supervisors who understand OSHA's framework catch the gaps that turn into citations.
Frequently asked questions
Does a small warehouse with fewer than 10 employees need written OSHA programs?
Mostly yes. The only meaningful small-employer carve-out is the Emergency Action Plan: employers with 10 or fewer employees can communicate it out loud instead of in writing under 29 CFR 1910.38(b). Every other major written program, HazCom, LOTO, forklift operator certification, applies regardless of headcount. Size does not exempt you.
What is the most commonly cited OSHA violation for warehouses?
Hazard Communication (29 CFR 1910.1200) and Powered Industrial Trucks (29 CFR 1910.178) sit consistently among the top standards cited in warehousing. Lockout/Tagout (29 CFR 1910.147) regularly makes OSHA's top-ten list across all industries. In fiscal year 2024, fall protection led all industries combined, with HazCom close behind at number two.
Do I need a written safety program if I only have a few hazardous chemicals on site?
Yes. 29 CFR 1910.1200 sets no quantity threshold before the written Hazard Communication program is required. If any hazardous chemical is present, the standard applies. Even a single container of a cleaning product with a Safety Data Sheet qualifies. The program just needs to address the chemicals you actually have.
Is a written Lockout/Tagout procedure required for every single piece of equipment?
You need an equipment-specific written procedure for each machine unless all four conditions of the exception at 29 CFR 1910.147(c)(4)(i) are met: single energy source, complete de-energization when locked, the worker holds the only key, and no other hazards exist. Most warehouse equipment, conveyors, compactors, dock levelers, fails at least one, so separate procedures are required.
How long do I need to keep written safety program records?
It varies by standard. LOTO annual inspection records: at least three years. Forklift operator certifications: duration of employment. Respiratory protection medical records: duration of employment plus 30 years per 29 CFR 1910.1020. HazCom training records: no explicit period stated, but employment duration plus 30 years is the conservative standard. When in doubt, keep it longer.
Can I download a free OSHA written program template and use it as-is?
No. OSHA publishes sample programs as starting points, but a template with unfilled blanks is not a compliant written program. You must populate it with your chemicals, equipment, procedures, emergency contacts, and responsible personnel. Inspectors routinely cite employers for generic templates that do not reflect actual workplace conditions.
Does OSHA require a written program for Personal Protective Equipment?
Not a full program document, but 29 CFR 1910.132(d)(2) requires a written certification of the hazard assessment: the workplace evaluated, the person certifying it, the date, and a document identifier. It is sometimes one page, but it must exist and be signed. Many small warehouses skip this and get cited during inspections.
What is OSHA's free consultation program and does it help with written programs?
OSHA's On-Site Consultation Program, run through state agencies and funded by OSHA, provides free confidential workplace safety reviews for small businesses. Consultants review your written programs, identify gaps, and recommend fixes. It is separate from enforcement; consultants cannot issue citations. Results are not shared with OSHA enforcement unless an imminent danger is found and left uncorrected.
If my warehouse does not use forklifts, do I still need a forklift written program?
No. 29 CFR 1910.178 applies only where powered industrial trucks are used. If your operation runs only manual pallet jacks and hand trucks, you do not need a forklift safety program. You would still assess whether those tools create ergonomic or other hazards addressed under different standards.
Does a written Bloodborne Pathogens Exposure Control Plan apply to most warehouses?
Only if workers have occupational exposure to blood or other potentially infectious materials. For most warehouses, no. The exception: if you have a designated first-aid responder whose duties include rendering aid involving blood, that person has occupational exposure and a written Exposure Control Plan is required under 29 CFR 1910.1030. A warehouse with no designated first responder role generally does not trigger it.
How do state OSHA plans affect written program requirements for warehouses?
Twenty-two states and two territories run their own OSHA-approved state plans. They must be at least as effective as federal OSHA and can be more stringent. California (Cal/OSHA), for example, requires a written Injury and Illness Prevention Program (IIPP) for nearly all employers, which goes beyond federal OSHA. Check your state plan's requirements alongside the federal 29 CFR 1910 standards.
What happens if an OSHA inspector finds that my written programs exist but employees do not know about them?
That is a citable violation. Multiple standards require employees to be informed of the program and trained on it. Under HazCom, employees must know how to access SDSs and understand the labeling system. Under Respiratory Protection, employees must be trained on the written program. A document sitting in a file cabinet that no one has seen satisfies none of these requirements.
Can I write all my required OSHA programs myself or do I need a consultant?
You can write them yourself. OSHA does not require a certified consultant to author a written program. The programs must be accurate, specific to your workplace, and compliant with the applicable standard, but there is no credentialing requirement for the author. Most small warehouse operators can produce compliant programs using OSHA's published guidance, filling in workplace-specific details carefully, and reading the relevant CFR sections.
Sources
- OSHA, 29 CFR 1910.38 Emergency Action Plans: Employers with 10 or fewer employees may communicate the Emergency Action Plan orally rather than in writing
- OSHA, Top 10 Most Cited Standards FY2024: Hazard Communication was the second most cited OSHA standard across all industries in fiscal year 2024
- Bureau of Labor Statistics, Census of Fatal Occupational Injuries: Forklifts are involved in roughly 85 fatal accidents and tens of thousands of serious injuries annually in the U.S.
- OSHA, Penalties (Federal Civil Penalty Inflation Adjustments): Maximum penalty for a serious violation is $16,131 per violation and for a willful or repeated violation is $161,323 per violation as of 2024
- OSHA, On-Site Consultation Program: OSHA's free On-Site Consultation program is separate from enforcement and cannot result in citations; businesses with 25 or fewer employees receive up to a 60% penalty reduction
- OSHA, Small Business and Compliance Assistance resources: OSHA publishes sample written programs for several standards including Hazard Communication and Respiratory Protection
- OSHA, Field Operations Manual (FOM): OSHA Compliance Safety and Health Officers follow Field Operations Manual procedures during inspections, including review of written programs
- OSHA, 29 CFR 1910.1200 Hazard Communication standard text: 1910.1200(e)(1) requires a written program describing how label, SDS, and training requirements will be met; applies whenever any hazardous chemical is present
- OSHA, 29 CFR 1910.147 Control of Hazardous Energy (LOTO): 29 CFR 1910.147(c)(1) requires a written energy control program; 1910.147(c)(6) requires annual inspection of each energy control procedure
- OSHA, 29 CFR 1910.178 Powered Industrial Trucks: 1910.178(l) requires written operator evaluation and certification records including date, truck type, and evaluator name; re-evaluation required at least every three years
- OSHA, 29 CFR 1910.134 Respiratory Protection: 29 CFR 1910.134(c)(1) requires a written respiratory protection program when respirators are necessary; 1910.134(c)(2) provides a narrow exception for voluntary use of filtering facepieces
- OSHA, 29 CFR 1910.132 Personal Protective Equipment: 29 CFR 1910.132(d)(2) requires a written certification that a workplace hazard assessment for PPE was performed, including the date and certifying person's identity
- OSHA, State Plans: 22 states and 2 territories run OSHA-approved state plans that must be at least as effective as federal OSHA and may be more stringent