Working in highly regulated industries like construction, renewable energy, aviation, and transportation means managing a lot of safety documentation. Each document has an owner, a deadline, and, in many cases, a regulator who expects to see it.
This article covers the 15 safety documents most workplaces need, grouped by the role they play in your inspections. For each one, you’ll see what it’s for, whether the law requires it, and a free Fluix template to start from.
What Are Safety Documents?
Safety documents are the written policies, procedures, forms, and records an employer uses to identify hazards, control risks, and prove compliance with occupational safety law.
They fall into three groups: documents that set the standard (a safety policy or lockout procedure), documents that check against it (inspection checklists), and documents that record what happened next (corrective actions, incident reports, injury logs).
Essential Safety Documents List at a Glance
| Document | What it’s for | Required? |
|---|---|---|
| 1. Health and safety policy | States commitments, roles, and arrangements | Depends (UK: yes for 5+ employees) |
| 2. Hazard identification checklists | Lists hazards and their controls | Depends (UK: yes for 5+ employees) |
| 3. Risk assessment and method statement (RAMS) | Sets the safe sequence for a specific job | Best practice |
| 4. Lockout/tagout procedure checklists | Controls hazardous energy and high-risk work | Depends |
| 5. Emergency action plan | Defines evacuation, alarms, and roles | Depends |
| 6. Hazard communication program | Explains chemical hazards and handling | Yes, if hazardous chemicals are on site |
| 7. Safety inspection checklists | Records the condition of sites and equipment | Depends (many equipment standards) |
| 8. PPE inspection checklists | Confirms PPE is available, fitted, and in good condition | Depends |
| 9. Safety compliance checklists | Checks the program against regulations | Best practice |
| 10. Corrective action log | Tracks each finding to a verified fix | Best practice |
| 11. Near-miss reports | Records events that could have caused harm | Best practice |
| 12. Incident reports | Records what happened and why | Depends |
| 13. Injury and illness records | Legal record of work-related injuries | Yes, for covered employers |
| 14. Safety training records | Proves who is trained for what | Depends |
| 15. Toolbox talk records | Logs short on-site safety briefings | Best practice |
Choosing a tool to keep these records in one place? Compare the best health and safety management software.
Essential Safety Documents for Your Business
1. Health and Safety Policy
A health and safety policy states who is responsible for safety and how the company manages it. In the UK, employers with five or more employees must have it in writing. In the US, there’s no single federal “safety policy” requirement. Instead, individual OSHA standards require specific written programs, such as hazard communication or energy control.
Either way, the policy is only useful if your inspections reference it. If the policy says scaffolds are inspected before every shift, the inspection records must show that they were. For how the policy fits into the wider system, see what a safety management system includes.
2. Hazard Identification Checklist
A hazard identification checklist is the practical tool for detecting hazards: it walks you through the categories of hazard on a site.
Every control in the risk assessment should appear as a checkpoint on an inspection form. If the assessment says “guardrails on all open edges”, the inspection should ask whether they are there today. For the hazard types to cover, start with the hazard identification checklist template.
3. Risk Assessment and Method Statement (RAMS)
RAMS pairs a task-level risk assessment with a method statement: the step-by-step sequence for doing the job safely. It’s standard practice in UK and Commonwealth construction, and contractors are often asked for it before they can start work. The US equivalent is closer to a job hazard analysis (JHA).
A RAMS document gives a supervisor something concrete to check during the job: is the work being done in the sequence that was approved? Use our ready RAMS template if you manage many task assessments.
4. Lockout/Tagout Procedure Checklist
Lockout/tagout (LOTO) procedures describe how to isolate hazardous energy before servicing equipment. In the US, written energy control procedures are required under OSHA’s lockout/tagout standard (29 CFR 1910.147). LOTO was #4 on OSHA’s preliminary list of most-cited standards for fiscal year 2025, with 2,177 citations.
It is checked on site before work starts. Is each energy source locked, is the permit signed, do conditions still match the permit? Start with the lockout procedure template.
5. Emergency Action Plan
An emergency action plan (EAP) sets out how people are alerted, how they evacuate, where they assemble, and who does what. Under OSHA’s EAP standard (29 CFR 1910.38), the plan must be in writing where an OSHA standard requires one, though employers with ten or fewer employees may communicate it orally. In the UK, the equivalent duties sit with the fire risk assessment and emergency procedures.
6. Hazard Communication Program
A hazard communication (HazCom) program explains how employees learn about the chemicals they work with: labels, safety data sheets (SDSs), and training. In the US it’s required wherever hazardous chemicals are present (29 CFR 1910.1200). In the UK, COSHH assessments play a similar role. HazCom was the #2 most-cited OSHA standard in fiscal year 2025, with 2,546 preliminary citations. Most of those are documentation failures, not chemical accidents.
7. Safety Inspection Checklists
A safety inspection checklist lists the conditions to verify on a site, piece of equipment, or vehicle. The completed checklist (with date, inspector, findings, and photos) becomes the inspection record. Many OSHA standards require equipment to be inspected before use, including forklifts, cranes, and ladders.
This is the document most other documents depend on. A policy, risk assessment, or emergency plan only matters if someone checks that the site matches it, and the inspection record is the proof that they did. If you run inspections across several sites or crews, safety inspection software keeps checklists, photos, and findings in one place, so every record is ready when you need it.
8. PPE Inspection Checklist
A PPE checklist confirms that the right protective equipment is available, fits the worker, and is in good condition: harness webbing intact, respirator cartridges in date, gloves rated for the task. In the US, OSHA requires employers to assess workplace hazards for PPE and certify that assessment in writing (29 CFR 1910.132(d)).
A PPE inspection is a focused version of the general site inspection. Run it before high-risk tasks, not only on a schedule. Use this PPE checklist.
9. Safety Compliance Checklist
A safety compliance checklist looks at the program, not the site: are written programs current, are training records complete, are injury logs posted on time? It’s what you’d use to prepare for a regulator’s visit or an internal audit.
Think of it as an inspection of your documents. Run it quarterly, and use the safety compliance checklist as a starting point.
10. Corrective Action Log
A corrective action log tracks every finding from discovery to verified fix: what was found, who owns it, when it’s due, and how it was closed. No regulation requires it by that name, but it’s the first thing an experienced auditor asks for. Auditors pick a finding from an old inspection and trace it forward: was it fixed, by whom, and is there proof?
11. Near-Miss Reports
A near-miss report records an event that could have caused injury or damage but didn’t: a dropped tool that missed someone, a forklift that stopped just in time. It isn’t legally required, but near misses are the cheapest warning you’ll get.
Each report should trigger a question: when was this area last inspected, and did the inspection miss it? Use the near miss report template.
12. Incident Reports
An incident report records what happened, who was involved, the immediate cause, and the root cause. In the US, recordable cases must be documented on OSHA Form 301 or an equivalent within seven calendar days. In the UK, certain injuries and dangerous occurrences must be reported under RIDDOR.
After an incident, re-inspect the area and check the last inspection record for that location. If the hazard was already recorded and never fixed, that’s the real finding. For a step-by-step guide, see how to write an incident report, and use this incident report form.
13. Injury and Illness Records
These are the legal records of work-related injuries and illnesses. In the US, covered employers keep the OSHA 300 Log, the 300A annual summary (posted from February 1 to April 30), and 301 incident forms. All of them must be kept for five years after the end of the year they cover (29 CFR 1904.33). In the UK, RIDDOR records must be kept for at least three years. US private-industry employers reported 2.5 million nonfatal injuries and illnesses in 2024, according to the Bureau of Labor Statistics.
The 300 Log is also where your total recordable incident rate (TRIR) comes from. But it’s a lagging record: it tells you where people got hurt, and your inspections should tell you where they might.
14. Safety Training Records
Training records show who was trained, on what, when, and by whom. Several OSHA standards require written training certification, including fall protection in construction and forklift operation. Fall Protection – Training Requirements drew 1,907 preliminary citations in fiscal year 2025, and the most common violation was providing no training at all.
Before high-risk work, an inspection should confirm not just the equipment but the person: is this operator certified for this lift? Use the safety training checklist.
15. Toolbox Talk Records
A toolbox talk record logs a short on-site safety briefing: date, topic, presenter, and attendee signatures. It’s best practice in most places, though some jurisdictions require regular meetings. Cal/OSHA, for example, requires construction toolbox talks at least every 10 working days.
The most useful talks come from last week’s inspection findings, and the record shows that the crew heard about them. For ideas, see our 100 toolbox talk topics, and log each talk with the toolbox talk template.
Commonly Confused Safety Documents
Safety policy vs. safety program vs. safety management system. A policy is a short statement of commitment and responsibilities. A safety program is the US term for the set of written procedures that put it into practice. A safety management system, such as one built to ISO 45001, is the framework that controls all of them, including how they’re reviewed and improved.
Risk assessment vs. JHA vs. method statement. A risk assessment covers hazards and controls for a workplace or activity; it’s the UK’s legal term. A job hazard analysis (JHA, also called JSA) breaks one task into steps and identifies hazards at each step; it’s common US practice. A method statement describes the safe sequence of work, and paired with a risk assessment it becomes RAMS.
Incident report vs. near-miss report vs. OSHA 301. An incident report is your internal record of any event. A near-miss report covers events where nobody was hurt. OSHA Form 301 is the regulatory record, required only for recordable cases. A clean injury log doesn’t mean a safe site. As Joe Gilliland, Senior Director of HSE at Sanofi US, put it on Fluix’s Field Intelligence podcast:
Inspection checklist vs. audit report. An inspection checks conditions: is the guardrail there, is the extinguisher charged? It’s frequent and done by supervisors or technicians. An audit checks the system: are inspections happening, are findings closed, are records complete? It’s periodic and usually done by someone independent of the site.
Required vs. best-practice documents. The law sets the minimum. Best-practice records such as near-miss reports and corrective action logs are what auditors, insurers, and clients use to judge whether the required documents reflect what actually happens on site.
How Fluix Helps You Manage Safety Documents
Fluix is inspection management software for field teams. It’s built to get accurate records from the field, and keep them connected once they’re there.
- Turn any document into a digital form. Start from a Fluix template or upload your existing checklists, permits, and reports. Crews fill them out on a phone or tablet, with photos, e-signatures, and GPS location attached.
- Work offline. Inspections, toolbox talks, and incident reports can be completed on a turbine, in a basement plant room, or on a remote pipeline. Data syncs once the device is back online.
- Route documents automatically. A completed inspection goes straight to the right reviewer. A failed item becomes a corrective action with an owner and a due date, and it stays open until it’s closed with evidence.
- Keep every record findable. Completed documents are stored, timestamped, and searchable, and can sync to the cloud storage your company already uses. When an auditor asks for last year’s scaffold inspections, you search for them instead of opening binders.
- See what’s overdue. The reports shows inspection completion, open corrective actions, and repeat findings by site, so gaps show up before an audit does.
Centuri runs JSA checklists, toolbox talk records, and inspection logs for more than 2,000 field users in Fluix, and cut reporting time by up to 75%. Read the Centuri case study.
FAQ
- What safety documents are legally required?
It depends on your location and work. In the US, covered employers must keep OSHA 300, 300A, and 301 injury records, plus written programs required by specific standards, such as hazard communication and lockout/tagout. In the UK, employers with five or more employees need a written health and safety policy and recorded risk assessment findings.
2. How long should safety records be kept?
In the US, OSHA 300, 300A, and 301 records must be kept for five years after the end of the year they cover. In the UK, RIDDOR records must be kept for at least three years. Inspection records should be kept at least until the next inspection, and longer if an incident or claim could reference them.
3. What documents does a safety officer maintain?
Typically the safety policy, risk assessments, inspection checklists and records, corrective action logs, incident and near-miss reports, injury records, training records, and toolbox talk records. The exact list depends on the industry and jurisdiction.
4. What is the difference between a safety policy and a safety program?
A safety policy is a short statement of commitment and responsibilities. A safety program is the set of written procedures, inspections, and training that put the policy into practice.
5. Is a JSA the same as a risk assessment?
Not quite. A risk assessment covers hazards across a workplace or activity. A job safety analysis breaks a single task into steps and identifies the hazards and controls for each step.
6. What is the difference between an inspection checklist and a safety audit?
An inspection checklist verifies physical conditions on a site or piece of equipment, usually daily or weekly. A safety audit reviews the whole safety system, including whether inspections are done and their findings closed.
7. Can safety records be kept digitally?
Yes. OSHA accepts electronic records if they contain the same information as its forms and can be produced when requested. Digital records also make it easier to link inspections, findings, and corrective actions.
8. Can I use my existing safety forms in Fluix?
Yes. You can upload your current PDF forms and checklists, or start from Fluix templates, then turn them into digital forms that crews complete on mobile, online or offline.
9. How does Fluix help with safety audits?
Every inspection, corrective action, and signed document is timestamped and stored in one place, so you can find any record by site, date, or form type. Auditors can trace a finding from the original inspection to its verified fix without searching through paper files.