contractors
Contractor Compliance: What to Verify Before Site Access
Insurance, license, induction, escort rules and the sign-in record that proves it. Which contractor checks happen before arrival and which have to happen at the door.
By InstaCheckin Team Updated September 26, 2026

A refrigeration tech pulls up to the loading dock, tells the guard he’s here for the chiller, and signs a notebook: Dave, cooling. Nobody asks whether his employer’s insurance is current, whether he’s been on your site before, or who’s walking him past the ammonia room. Three weeks later something goes wrong and you’re asked to prove you did your part.
Contractor compliance is that proof. It’s the set of checks you run on outside workers before they touch your site, and the record showing you ran them. Most of the checks are paperwork you do ahead of time. The record has to be made at the door.
This post splits the two, so you know which half a sign-in system can carry and which half stays in your contractor file.
Contractor Compliance Is Five Checks, Not One Form
Every site’s list differs by trade and contract. These five cover most of what an auditor, insurer or investigator will ask about:
- Insurance. A current certificate from the contractor’s insurer showing the coverage your contract requires. Read the expiry date. A certificate is a snapshot, and it goes stale the week after you file it.
- License. The trade license or registration the work requires (electrical, gas, crane operation), matched to the person doing the work rather than the company on the invoice.
- Induction. Site hazards, exclusion zones, PPE, emergency procedure. Given before work starts, acknowledged in writing.
- Escort and access rules. Which areas they can enter alone, which need a host, and which need coordination before anyone touches a machine.
- The record. Who signed in, when, who they came to see, what they agreed to, when they left.
Checks one and two are document checks. They belong in your contractor onboarding, days before anyone shows up. Three through five happen at the door, and that’s exactly where a paper logbook falls apart.
Hiring a Licensed Contractor Doesn’t Hand Off the Risk
The instinct is that if the contractor is insured and licensed, their workers are their problem. Regulators don’t see it that way.
OSHA’s Multi-Employer Citation Policy (CPL 2-0.124) sorts employers on a shared worksite into four roles: creating, exposing, correcting and controlling. The controlling employer is defined as “an employer who has general supervisory authority over the worksite, including the power to correct safety and health violations itself or require others to correct them.” If you own or run the site, that’s probably you.
Some standards spell out the handoff. OSHA’s lockout/tagout standard, 1910.147 says that when outside personnel service equipment, “the on-site employer and the outside employer shall inform each other of their respective lockout or tagout procedures.” Sign-in is the natural moment to hand over yours and get theirs.
Chemical plants get stricter. OSHA’s process safety management standard, 1910.119 requires covered employers to “control the entrance, presence and exit of contract employers and contract employees in covered process areas” and to “maintain a contract employee injury and illness log.” Most sites aren’t covered by it. It’s still a useful picture of what a regulator considers a controlled contractor process.
This post summarizes public OSHA text and describes product features. It isn’t legal advice, and your obligations depend on your industry, contracts and state plan. Check with your safety director or counsel before treating any of this as a compliance program.
Paperwork Before They Arrive, Proof at the Door
Be blunt about the limits here. InstaCheckin doesn’t read certificates of insurance or check a license against a registry. Those checks live in your contractor file, whoever owns it: procurement, EHS, the facilities lead.
What you can do is make the file the gate. Hosts pre-register expected visitors in the admin panel, and the invitation goes out with the location, date and host details. Set one rule: nobody gets invited until their insurance and license are on file. The invitation list then becomes a record of who was approved, and a contractor who turns up uninvited is visibly outside the process.
At the door, the kiosk does the parts paper can’t:
- Captures name, company, reason for visit and a photo.
- Shows your site rules or safety waiver and captures a signature on the touchscreen before the badge prints.
- Routes different documents to different visitor types, so a contractor sees the safety briefing and a sales visitor sees the NDA.
- Emails and texts the host the moment the contractor checks in, so the escort question gets answered in minutes and not “whenever someone notices.”
The badge prints with photo, name, host, date and your logo. A badge on a hard hat tells the next person on the floor that this one checked in. If you’re deciding between waivers and NDAs for these flows, our visitor NDA guide covers what each should say.
Electronic-record and e-signature rules vary by jurisdiction. Verify with counsel that a touchscreen signature holds up for the documents you’re collecting.
The Sign-In Record Is What You Hand the Investigator
After an incident, the questions are boring and specific. Was this person on site? What time did they arrive? Who was responsible for them? What were they told? A notebook answers maybe half of that, in handwriting.
The cloud log stores every visit with timestamps and photo, filterable by location, host, date range or visitor name, and exports to CSV or PDF. That’s the artifact for an insurer, an auditor or your own post-incident review. Export before the job closes out. Trailers get hauled away, and paper goes with them.
The log also feeds your evacuation. OSHA’s emergency action plan standard, 1910.38 lists “Procedures to account for all employees after evacuation” among the minimum plan elements. Contractors may not be your employees, but you can’t account for people you don’t know are inside. Our emergency evacuation plan guide covers how the headcount works in practice, and visitor log requirements covers what different frameworks expect the log to hold.
Same Five Checks, Different Gate
The checks don’t change. The door does.
- Loading docks and yards. Drivers and service crews arrive constantly and there’s rarely a receptionist. See warehouse visitor management for induction before the badge and dock-office setup.
- Construction sites. The gate is often unstaffed, and the population turns over daily. The construction site visitor management page and our post on the construction site sign in app cover the unstaffed-gate setup.
- Plants. Service techs and OEM engineers mix with tours and auditors. The manufacturing visitor management page shows the plant-gate flow.
You can run up to five kiosks per location, so a site with a dock door and a front entrance doesn’t need to funnel everyone through one iPad.
FAQ
What is contractor compliance?
It’s the set of checks you run on outside workers before they start on your site, plus the record showing you ran them. Typically that means current insurance, any required trade license, a site induction, clear escort and access rules, and a timestamped sign-in log.
How is contractor sign-in different from visitor sign-in?
A visitor is usually there to meet someone. A contractor is there to do work, often around equipment, energy sources or hazardous areas. So you need proof they were briefed and a record of exactly when they were on site. The kiosk is the same; the documents you route to each visitor type differ.
Can a sign-in system verify a contractor’s insurance or license?
InstaCheckin doesn’t read certificates of insurance or check licenses against a registry. Keep those in your contractor file and use pre-registration so only approved crews get invited. The kiosk adds the at-the-door proof: who arrived, when, who they came to see, and what they signed.
Who is responsible if a contractor’s employee gets hurt on my site?
It depends on the facts, and this isn’t legal advice. OSHA’s multi-employer policy can assign responsibility to the employer that controls the worksite, even when the injured worker belongs to someone else. Ask your safety director or counsel how it applies to your contracts.
Try the At-the-Door Half on Your Busiest Gate
Set up one iPad where contractors actually arrive, load your site rules as a signed document, and see what the log looks like after a week. Start a free trial or talk to us if you’re rolling this out across several sites.
Frequently asked questions
What is contractor compliance?
How is contractor sign-in different from visitor sign-in?
Can a sign-in system verify a contractor's insurance or license?
Who is responsible if a contractor's employee gets hurt on my site?
Related reading
Construction Site Sign In App: What OSHA Really Requires
OSHA never asks for a visitor log by name. It asks for hazard instruction and a headcount after evacuation — and a gate sign-in app is the cheapest way to evidence both.
Visitor Log Requirements: ITAR, C-TPAT, ISO, OSHA Guide
A consolidated look at what ITAR, C-TPAT, ISO 27001, and OSHA actually require for visitor logs — and where a paper sign-in sheet falls short of each one.
Warehouse Visitor Management: Induction and Headcounts
Drivers, contractors, temps, and auditors all come through a warehouse differently. Here's how to run sign-in so each one gets the right safety induction and turns up on your evacuation headcount.