A contractor arrives on site with an expired public liability certificate. Nobody catches it. Two weeks later there is an incident — and the client's insurer walks away because the RAMS on file was never signed, the induction record can't be found, and the permit-to-work was raised verbally over WhatsApp. This is how UK contractor compliance fails: not through malice, but through paperwork scattered across email chains, spreadsheets and filing cabinets. Oxmaint pulls contractor records, RAMS, inductions, permits and job cards into one workflow. Book a demo to see contractor management workflows in action.
UK CONTRACTOR CONTROL · ONE CONNECTED WORKFLOW
RAMS · Inductions · Permits · Job Cards — all traced to the same contractor record
CDM 2015
Construction (Design & Management) Regulations — the statutory backbone of UK contractor duties
HSG159
HSE guidance on managing contractors — the procurement-to-monitoring playbook
SSIP
Safety Schemes in Procurement — CHAS, SafeContractor, Constructionline, SMAS
The Contractor Lifecycle — 5 Stages Where It All Goes Wrong (Or Right)
Contractor management isn't a single event — it's a five-stage lifecycle that starts before the contractor has stepped onto site and doesn't end until the last job card is signed off. Each stage carries its own document set, compliance checkpoint and failure mode. The failures at each stage are documented and consistent across UK operations, and every one of them is prevented by having the right record in the right place at the right time.
01
Pre-qualification
SSIP · Insurance · Competence
SSIP certificate (CHAS/SafeContractor/Constructionline), £2m+ public liability, professional indemnity, CIS registration, competency evidence per trade — verified before any PO is raised.
Common failure: expired insurance certificate on file
02
Onboarding
RAMS · Method Statements · Approval
Contractor-specific Risk Assessment & Method Statement submitted for the actual scope of work, reviewed by responsible person, formally approved with sign-off before mobilisation.
Common failure: RAMS approved verbally, no signed record
03
Site Induction
CDM Reg 15 · Site-Specific · Recorded
Site-specific induction before first access — hazards, emergency procedures, permit systems, welfare, RIDDOR reporting. Recorded with attendee name, date, content covered, comprehension check.
Common failure: signed sheet exists but content not evidenced
04
Permit to Work
Hot Works · Confined Space · Height · Isolation
Task-specific permit raised, controls verified, authorised signatory approves, permit issued for defined duration, physically returned and closed on completion. No permit means no work.
Common failure: verbal permission on radio, no paper trail
05
Work & Sign-Off
Job Card · Handback · Certification
Job card completed against asset, evidence captured (photos, test certificates, F-gas records, waste transfer notes), asset returned to service with documented handback and, where relevant, statutory certification.
Common failure: work done, records never filed against asset
The Three Pillars — What UK Contractor Compliance Actually Requires
Underneath every UK contractor workflow sit three pillars that inspectors, insurers and auditors look for. Miss any one and the compliance picture collapses. Getting them right isn't complicated — but they have to sit in one connected system, not scattered across contractor email inboxes, printed folders and shared drives that nobody remembers to update.
R
RAMS
Risk Assessment & Method Statement
Contractor's written analysis of hazards for the specific task, controls in place, sequence of work, PPE and emergency arrangements. Required by Management of Health and Safety at Work Regulations 1999 for all significant risk activities. Every subcontractor needs their own — not a shared document.
Reviewed & approved before mobilisation
I
INDUCTION
Site-Specific Safety Induction
Pre-access briefing covering site hazards, emergency assembly points, first-aid arrangements, permit systems and reporting protocols. CDM 2015 Regulation 15 places the duty on principal contractors — including for subcontractors, delivery drivers and visiting consultants.
Recorded with attendee & comprehension check
P
PERMIT
Permit to Work
Task-specific written authorisation for high-risk work — hot works, confined space, working at height, live electrical, isolation of safety systems. Verifies controls, sets duration, names authorising signatory, returned on completion.
Issued fresh per task · closed on completion
See Contractor Compliance Live
Walk through contractor profiles with document expiry alerts, RAMS submission and approval flow, site induction records, permit-to-work issuance, and job card linkage to the asset — configured against your site's contractor register. Thirty minutes with the Oxmaint team.
The UK Compliance Stack — What Every Framework Actually Requires
UK contractor management sits inside a stack of overlapping regulatory frameworks. Each has specific record-keeping expectations, and inspectors know exactly which document to ask for. The table below maps the framework to the record it requires — the shape of what a compliant contractor file actually looks like.
Framework
Required Record
Duty Holder
CDM 2015 Reg 15
Site induction record per worker before access
Principal Contractor
MHSWR 1999
Written RAMS for all significant risk activities
Contractor / Employer
HSG159
Documented contractor selection, monitoring & review
Client organisation
SSIP schemes
Valid pre-qualification certificate on file
Contractor
HSG250
Permit-to-work for high-hazard tasks · issued & closed
Site operator / PC
RIDDOR 2013
Reportable incident records within statutory timeframe
Employer / duty holder
F10 (CDM)
HSE notification for notifiable projects (30+ days, 500+ person-days)
Client
Every one of these records lives against the correct contractor, project and asset in Oxmaint — no filing cabinet, no missing signatures, no scramble when the HSE inspector visits. Sign up free to structure your contractor evidence chain.
Where UK Contractor Management Actually Breaks Down
The failure modes are consistent across UK operations: an expired SSIP certificate that nobody spotted at renewal, a RAMS submitted by email that never got signed off in writing, a contractor who signed the induction register but couldn't identify the emergency assembly point, hot-works permits issued verbally over site radio, and job cards completed on paper that never made it back to the asset record. Every one of these is an administrative gap that becomes a legal exposure the moment something goes wrong on site. A connected contractor management platform closes each gap by making the record itself the workflow — you can't proceed to the next stage without the previous stage being complete and documented. Sign up free to eliminate contractor compliance gaps.
Expert Perspective — What HSE Inspectors Actually Interrogate
"
HSE inspectors don't audit contractor files randomly. They pick a name off the sign-in sheet and follow the paper trail: show me their SSIP certificate; show me the RAMS for what they were doing that day; show me the induction record; show me the permit-to-work; show me the sign-off. Every break in that chain becomes an improvement notice or worse. The sites that pass inspection cleanly are the ones where the trail is one platform deep — every record tied to the contractor, the project and the asset, with dates and signatures the inspector can verify in minutes. The sites that fail are the ones where the trail is scattered across three inboxes and a filing cabinet that hasn't been opened in six months.
01
Document expiry alerts
SSIP, insurance, competence certificates all tracked with 90/30-day expiry alerts. No contractor works on expired credentials.
02
RAMS approval workflow
RAMS submitted, reviewed and formally approved with digital sign-off before mobilisation. Verbal approval never appears.
03
Induction tied to access
Site induction status linked to physical access records. No induction, no access — the control is structural, not administrative.
04
Full chain per contractor
Every record — pre-qualification through sign-off — retrievable per contractor in one click for audit, incident investigation or renewal.
Who Uses Oxmaint for Contractor Management
The platform is used by the UK operational roles that carry contractor and permit accountability: facilities managers running third-party maintenance across multi-building portfolios, principal contractors managing subcontractor mobilisation on live sites under CDM 2015, engineering managers coordinating specialist contractors for shutdown and turnaround work, health & safety managers issuing and closing permits-to-work across high-hazard sites, compliance managers auditing SSIP status and insurance currency across the contractor base, procurement teams onboarding new contractors against pre-qualification requirements, and site managers running daily contractor sign-in and induction workflows. Each role sees the same contractor data filtered to their view — document expiry queue, RAMS pending approval, live permits, or audit pack. Sign up free to configure roles for your contractor team.
Getting Contractor Management Live
Deployment starts with importing your existing contractor list, contract terms and current document set — SSIP certificates, insurance schedules, competency evidence — into the Oxmaint contractor module. Each contractor record inherits expiry alerts so credentials never lapse silently. RAMS submission and approval workflow, site induction template and permit-to-work forms configure inline. Contractors get scoped access to submit their own RAMS and receive induction content ahead of arrival. Most portfolio deployments move from initial scoping to live contractor workflows inside 30 days. Book a walkthrough to see live UK contractor deployments.
Turn Contractor Chaos Into a Managed Compliance System
Oxmaint gives facilities, engineering and safety teams one platform for contractor records, RAMS, inductions, permits-to-work and job cards — with document expiry alerts, approval workflows and full evidence chain per contractor, project and asset.
Frequently Asked Questions
What is contractor management software?
Contractor management software is a platform that centralises every contractor record and workflow in one place — pre-qualification credentials (SSIP, insurance, competence), RAMS submission and approval, site induction records, permit-to-work issuance, and job cards tied to assets. In a CMMS context (like Oxmaint) it goes further by linking contractor work directly to the asset it was performed on, so every job carries a complete evidence chain from mobilisation to sign-off. This replaces the scattered spreadsheets, email chains and filing cabinets that make traditional contractor management so fragile at audit time.
What is RAMS and does every contractor need one?
RAMS stands for Risk Assessment & Method Statement — the contractor's written analysis of hazards for a specific task, controls in place, sequence of work, PPE requirements and emergency arrangements. Under the Management of Health and Safety at Work Regulations 1999 and CDM 2015, every contractor on a project needs their own RAMS for the work they're actually doing — subcontractors cannot rely on the main contractor's document. Oxmaint holds RAMS against the specific contractor and the specific work package, with formal approval workflow before mobilisation is authorised.
Are digital site inductions accepted under CDM 2015?
Yes. CDM 2015 Regulation 15 requires site-specific inductions before workers begin work, but doesn't prescribe the delivery format — face-to-face, video, digital module or hybrid are all acceptable, provided content is site-specific and comprehension is evidenced. The critical requirements are that the induction covers the actual site hazards (not a generic deck), that attendee identity and date are recorded, and that some form of comprehension check exists beyond a signature. Oxmaint holds digital induction content per site with structured completion records tied to the individual contractor.
Can permit-to-work forms be managed digitally?
Yes. Digital permit-to-work is now the UK industry standard for high-hazard tasks — hot works, confined space entry, working at height, live electrical, isolation of safety systems. Oxmaint holds permit templates per task type, routes to the authorised signatory for approval, issues the permit with defined start/end times, links it to the RAMS and induction records for the assigned contractor, and requires physical return with sign-off on completion. Every permit carries a complete audit trail — issued, verified, closed — retrievable per contractor, per asset or per date range.
Can contractor work be linked to specific assets and job cards?
Yes — this is the specific advantage of managing contractors inside a CMMS rather than a standalone contractor system. Every job card generated for contractor work links to the specific asset serviced, the contractor performing the work, the approved RAMS, the site induction record and the permit-to-work (if applicable). When the work is signed off, the completion evidence — photos, test certificates, statutory documentation — lives against the asset. This gives future maintenance teams the full contractor history per asset, and gives auditors one continuous evidence chain from mobilisation to handback.
