☎ (888) 264-7050
Contractor Prequalification Requirements: Which Half of Your Plant's RFP Is Actually Law
← Back to Blog Compliance

Contractor Prequalification Requirements: Which Half of Your Plant's RFP Is Actually Law

Half the contractor requirements in a manufacturing plant RFP carry a CFR section. The other half are the owner's choice, and they narrow the bidder field.

by iSi Environmental

The contractor requirements exhibit stapled to your last maintenance RFP was probably drafted by someone who no longer works at your company. It sets an experience modification rate ceiling in clause 4 and a process safety hazard disclosure duty in clause 11, formats them identically, numbers them consecutively, and gives a bidder no way to tell which one OSHA can cite your manufacturing plant for ignoring. It gives you no way either.

Every prequalification clause in that exhibit belongs in one of two columns. The left column holds duties with a Code of Federal Regulations section behind them, and they apply whether or not anyone buys software. The right column holds requirements that exist because an owner wrote them down, and no federal standard mentions any of them. Owners who have never separated the two tend to defend the whole exhibit as compliance, which is how a plant ends up with a field of one bidder on a scope three local crews could have run.

Here is the split, line by line, in the words a real exhibit uses.

Your contractor requirements exhibit, sorted into law and practice

Every line below carries a tag. LAW means a citable duty with the paragraph attached. PRACTICE means an owner contract term with an attribution, and PRACTICE is not a regulatory requirement.

Clause, roughly as your exhibit words itTagWhat actually sits behind it
Owner will obtain and evaluate the contractor’s safety performance and programs before award on process workLAW29 CFR 1910.119(h)(2)(i). No method, vendor, format or score is specified anywhere in the text
Owner will inform the contractor of known fire, explosion and toxic release hazards of the work and the process, and will explain the emergency action planLAW29 CFR 1910.119(h)(2)(ii) and (h)(2)(iii)
Owner will control contractor entrance, presence and exit in covered process areas and will keep an injury and illness log for contract employees working in those areasLAW29 CFR 1910.119(h)(2)(iv) and (h)(2)(vi)
Owner will periodically evaluate the contractor’s performance of its obligationsLAW29 CFR 1910.119(h)(2)(v). The word periodically is undefined in the standard, so the cadence is the owner’s to set
Contractor will train and instruct every worker in the hazards of the job, the process and the emergency action plan, and will document each worker’s identity, the training date and how understanding was verifiedLAW29 CFR 1910.119(h)(3) and (h)(3)(iii)
Owner will disclose that the site has permit spaces, what makes each one a permit space, the hazards, the owner’s own experience with the space and the precautions already in place, will coordinate entry and will debrief afterwardLAW29 CFR 1910.146(c)(8)(i) through (v)
Contractor will obtain the owner’s hazard and entry information, coordinate entry and report back the program it followed and any hazard it confronted or createdLAW29 CFR 1910.146(c)(9)
Owner and contractor will each inform the other of their respective lockout and tagout procedures, and the owner will make its own employees honor the contractor’s energy control restrictionsLAW29 CFR 1910.147(f)(2)(i) and (f)(2)(ii)
Owner will determine the presence, location and quantity of asbestos-containing material and presumed asbestos-containing material, and will notify bidders in writing on construction workLAW29 CFR 1910.1001(j)(3)(i), with the written notice to prospective bidders at 29 CFR 1926.1101(k)(2)(ii)(A)
A recordable injury to a contract worker is logged by whichever employer supervises that worker day to day, and the two employers reconcile so the case is recorded onceLAW29 CFR 1904.31(b)(3) and (b)(4)
Contractor will keep exposure records at least 30 years and medical records for the duration of employment plus 30 years, and will furnish access, or a written reason for delay and the earliest availability date, within 15 working daysLAW29 CFR 1910.1020(d)(1)(ii), (d)(1)(i) and (e)(1)(i)
Contractor will have its energy control procedure inspected at least annually by an authorized employee other than the ones using itLAW29 CFR 1910.147(c)(6)(i)
Contractor will hold an active account in good standing on the owner’s prequalification platform before a bid is acceptedPRACTICEOwner contract term. No OSHA standard names any third-party platform. The vendors themselves say the hiring client sets the requirements
Contractor’s three-year average experience modification rate will not exceed 1.0PRACTICEEFCOG Best Practice #271, a voluntary recommendation from the Energy Facility Contractors Group. No OSHA standard sets an EMR figure of any kind
Contractor’s recordable and DART rates will not exceed the NAICS average, with zero fatalities and zero willful or serious violations over three yearsPRACTICEThe rest of EFCOG #271’s recommended thresholds. Under that document a subcontractor can miss up to two rate targets and stay acceptable, while missing the fatality or willful target disqualifies
Contractor’s confined space program will be submitted for owner review and approval before mobilization, and owner permits will replace the contractor’sPRACTICEOwner contract term. 1910.146 requires the disclosure and coordination above. It contains no owner pre-approval step
Contractor will adopt the plant’s lockout and tagout program, locks and tags in place of its ownPRACTICEOwner contract term. 1910.147(f)(2)(i) requires a mutual exchange of procedures, not the surrender of one
Contractor will carry its own accredited inspector and complete its own asbestos survey at its own cost before biddingPRACTICEOwner contract term. It does not discharge the owner’s duty at 1910.1001(j)(3)(i) or 1926.1101(k)(2)
Contractor assumes all lead risk and warrants its own determination of lead-containing coatingsPRACTICEOwner contract term, and the one place in this table where the clause is doing work the regulation leaves undone. 29 CFR 1926.62 applies by the work performed, at (a), and creates no owner determination or disclosure duty
Contractor will report every incident into the owner’s system and stay under a contractual rate ceilingPRACTICEOwner contract term. 1904.31 allocates the recording duty between employers and sets no ceiling on anything
Contractor will supply three years of EMR history and three years of OSHA 300A data at bid time, and will open its training files to owner auditPRACTICEPlatform and owner practice. 1910.1020 governs how long records are kept and who may access them, not what a contractor discloses to a customer
Every worker on site will hold current HAZWOPER certification regardless of taskPRACTICEOwner contract term. 29 CFR 1910.120(e)(3)(i) scopes that training to the work performed, not to the badge
Contractor will meet the owner’s insurance limits, drug and alcohol panel, background check standard and written cybersecurity programPRACTICEOwner contract term in all four cases. OSHA sets none of them

Twelve of those lines are law and eleven are choices, and the eleven decide how many companies can bid your work.

What the law actually requires of a manufacturing plant before a contractor mobilizes

What does OSHA actually require a plant to do before hiring a contractor?

29 CFR 1910.119(h)(2)(i) requires a host employer to obtain and evaluate information on the contract employer’s safety performance and programs when selecting a contractor for work on or adjacent to a covered process. It names no method, no vendor, no score and no format. Outside process safety management, no OSHA standard requires contractor prequalification at all.

That is the whole of the selection duty, and it is narrower than most corporate templates assume. 1910.119(h) reaches contractors doing maintenance, repair, turnaround, major renovation or specialty work on or next to a covered process, and it excludes incidental services such as janitorial, food service, laundry and delivery. A documented phone call to a reference, a completed questionnaire and a read of the contractor’s written programs satisfies the text of (h)(2)(i). So does a platform profile. The standard is indifferent between them.

The duties that follow selection are where the content lives. The host informs contract employers of the known fire, explosion and toxic release hazards tied to the work and the process, and explains the applicable provisions of the emergency action plan, under (h)(2)(ii) and (h)(2)(iii). The host develops and implements safe work practices controlling contractor entrance, presence and exit in covered process areas, (h)(2)(iv), periodically evaluates the contract employer’s performance, (h)(2)(v), and keeps an injury and illness log covering contract employees in process areas, (h)(2)(vi). The contractor side at (h)(3) carries the training, the hazard instruction, the documentation of identity, date and verification of understanding at (h)(3)(iii), enforcement of facility rules, and an affirmative duty to advise the host of unique hazards its own work creates or that it finds while working.

Read those paragraphs next to a prequalification profile and the mismatch is obvious. Every one of them is an exchange that happens between two named people at a specific plant about a specific job. None of them can be performed by a document upload completed six weeks earlier.

What must a plant tell a contractor before permit-required confined space entry?

29 CFR 1910.146(c)(8) requires the host to inform the contractor that the workplace contains permit spaces and that entry is allowed only under a compliant permit space program, (c)(8)(i); to say what makes each space a permit space, including the identified hazards and the host’s own experience with it, (c)(8)(ii); to describe the precautions already in place, (c)(8)(iii); to coordinate entry operations, (c)(8)(iv); and to debrief at the end, (c)(8)(v).

The host’s own experience with the space is the clause that gets skipped. A plant that lost a sump to a nitrogen blanket in 2019 holds information no survey will produce, and (c)(8)(ii) obliges the plant to hand it over. The contractor’s mirror duties at 1910.146(c)(9) require it to obtain that information, coordinate, and report back the program it followed and any hazard it confronted or created.

The debrief at (c)(8)(v) is the other one nobody schedules. It exists so the plant learns what the crew found, which is the only mechanism in the standard that improves the next entry.

The lockout exchange almost nobody writes into the exhibit

29 CFR 1910.147(f)(2)(i) states that “the on-site employer and the outside employer shall inform each other of their respective lockout or tagout procedures”, and (f)(2)(ii) makes the on-site employer ensure its own employees understand and comply with the outside employer’s energy control restrictions and prohibitions.

This one applies in any plant with machinery, not only at process safety management facilities, and it is the most commonly missed of the host duties. It is also the duty most often inverted by contract. An exhibit clause requiring the contractor to abandon its own program and adopt the plant’s locks reads like a tightening of control. The standard asks for an exchange in both directions, and a contractor that surrenders its procedure has nothing left to inform the plant about.

Does a plant owner have to tell contractors about asbestos in the building?

Yes. 29 CFR 1910.1001(j)(3)(i) requires building and facility owners to determine the presence, location and quantity of asbestos-containing material and presumed asbestos-containing material at the work site, and to exercise due diligence in informing employers and employees about it. For construction work, 1926.1101(k)(2)(ii)(A) requires written or personal notice to prospective employers bidding the job.

The construction notice list runs further than most plants realize. 1926.1101(k)(2)(ii) reaches bidders at (A), the owner’s own employees who will work in or next to those areas at (B), every employer on a multi-employer site whose people will work in or next to them at (C), and tenants who will occupy the space at (D). The determination duty itself sits at (k)(2)(i).

One paragraph-level warning, because this citation is routinely published one paragraph off. 1910.1001(j)(2) is the presumption provision, the one that treats thermal system insulation, sprayed-on and troweled-on surfacing material, and asphalt and vinyl flooring installed no later than 1980 as asbestos containing. The owner’s determination and notification duty is at (j)(3). Records are kept for the duration of ownership and transferred to the next owner under (j)(3)(ii), and housekeeping employers get their own notice under (j)(3)(iii).

Does a plant owner have to tell contractors about lead paint?

No. 29 CFR 1926.62 applies by the work performed, at (a), and places no determination or disclosure duty on a building or facility owner. Its only multi-contractor provision, (e)(2)(ii)(H), sits inside the employer’s own written compliance program. A plant that wants lead disclosure has to write that clause itself, because the standard will not supply it.

The asymmetry is worth sitting with, because most plant contracts push asbestos and lead onto the contractor in the same sentence. On asbestos that clause does not discharge the owner’s duty under 1910.1001(j)(3)(i) or 1926.1101(k)(2). On lead paint the owner had no duty to begin with, so the clause is the only thing creating disclosure at all. A procurement lead who deletes both lines to simplify the exhibit has just made the lead job more dangerous and left the asbestos exposure exactly where it was.

Who records a contract worker’s injury, the plant or the contractor?

29 CFR 1904.31(b)(3) decides it by day-to-day supervision. Where the contractor directs the worker’s daily work, the contractor records the case. Where the host supervises the work day to day, the host records it. 1904.31(b)(2) applies the same test to temporary help and personnel supply workers, and (b)(4) requires the two firms to coordinate so each case is recorded once.

Day-to-day supervision is the entire test, and in an embedded arrangement it is often contestable. A crew that takes its daily work direction from a plant production supervisor is being supervised day to day by the plant, whatever the master service agreement says about independent contractor status.

That matters past the paperwork, because the log a case lands on becomes the rate a future prequalification screen reads. An owner who pushes recordability toward the contractor is building the number it will later use to judge that contractor. For the joint host and staffing-agency version of this problem, including entry work, see confined space work with staffing agency and temp workers.

How long must a contractor keep training, exposure and medical records?

29 CFR 1910.1020 sets at least 30 years for employee exposure records, (d)(1)(ii), and the duration of employment plus 30 years for employee medical records, (d)(1)(i). Access must be provided, or the reason for the delay and the earliest availability date stated, within 15 working days, (e)(1)(i). Process safety management training documentation is required separately by 1910.119(h)(3)(iii).

The 30-year exposure clock is the reason an industrial hygiene sampling event is a records event. Analyses using exposure or medical records are also held at least 30 years under (d)(1)(iii), and background sampling data can run on a one-year retention only when the results, the sampling plan, the method description and the relevant background summary are kept the full 30. If a contractor ceases business, records transfer to a successor under (h)(1), and with no successor the firm must notify affected current employees of their access rights at least three months before closing, (h)(2).

An RFP clause demanding a right to audit contractor training files is a practice term, and a reasonable one. It is not what 1910.1020 is about. That standard governs retention and employee access, not disclosure to a customer.

Which contractor training has a hard annual interval?

Four sit on an annual clock: the HAZWOPER 8-hour refresher, 29 CFR 1910.120(e)(8); the respirator fit test, required at least annually and on any facepiece change, 1910.134(f)(2); respirator retraining, 1910.134(k)(5); and the periodic inspection of the energy control procedure, 1910.147(c)(6)(i). Lead training repeats at least annually under 1926.62(l). Hazard communication training carries no fixed interval.

HAZWOPER initial training for a general site worker is 40 hours of off-site instruction plus at least three days of supervised field experience, 1910.120(e)(3)(i), documented by a written certificate under (e)(6). Respirator medical evaluation comes before fit testing or use, 1910.134(e)(1), which is the sequence most often reversed in the field. The annual energy control inspection at 1910.147(c)(6)(i) has to be performed by an authorized employee other than the ones using the procedure, which is a staffing constraint for a small contractor rather than a paperwork one.

Why owners built the second column in the first place

Can a plant be cited for its contractor’s OSHA violation?

Yes. OSHA’s Multi-Employer Citation Policy, CPL 02-00-124, effective December 10, 1999, allows more than one employer to be cited for the same hazardous condition, sorting employers into creating, exposing, correcting and controlling roles. In Acosta v. Hensel Phelps Construction Co., No. 17-60543 (5th Cir. Nov. 26, 2018), the court upheld citing a controlling employer whose own employees were never exposed.

The directive’s general rule opens with the clause that does the work: “On multi-employer worksites (in all industry sectors), more than one employer may be citable” for a hazardous condition that violates an OSHA standard. A plant that hires an embedded contractor is almost always a controlling employer, holding general supervisory authority over the site including the power to correct violations or require others to correct them, and it is frequently a creating employer as well, because the process, equipment, chemical or layout that produced the hazard belongs to the plant. A controlling employer owes reasonable care to prevent and detect violations by people it does not employ.

That is the honest motive for the right-hand column. Prequalification paperwork is how owners produce evidence that they exercised that care. It is a defensible motive and it is not a regulatory mandate, and both halves of that sentence are true at once.

The four-role analysis has already been worked through in detail elsewhere on this site rather than repeated here. The citation-policy mechanics and a contractor hazard communication gap at a host facility are covered in the multi-employer worksite citation walkthrough, and the controlling-employer trap as it reaches a property owner is covered in the scaffolding citation case.

On durability, Acosta v. Hensel Phelps held that 29 U.S.C. 654(a)(2) applies to all employers and overruled Melerine v. Avondale Shipyards (5th Cir. 1981), which had read the standards to protect only an employer’s own employees. It binds Texas, Louisiana and Mississippi directly. For a Kansas, Missouri, Oklahoma, Nebraska or Colorado plant it is persuasive evidence that the doctrine holds up under appellate review, not controlling law.

What the exposure costs is published. Maximum civil penalties under 29 CFR 1903.15(d) run $16,550 for a serious violation, (d)(3), and $165,514 for a willful or repeated violation, (d)(1) and (d)(2), with a statutory minimum of $11,823 for a willful. Those amounts are in effect for 2026, unchanged from 2025, because OMB Memorandum M-26-11 of April 17, 2026 cancelled the annual inflation adjustment for the year. The reasoning behind the freeze is laid out in the 2026 penalty schedule freeze.

What the law does not require, stated plainly

Nothing in federal OSHA regulation requires a prequalification platform. No standard names a third-party service, and none requires a contractor to hold an account anywhere. 1910.119(h)(2)(i) requires the host to obtain and evaluate safety performance information, and leaves the method entirely open.

Nothing in federal OSHA regulation sets an experience modification rate threshold, or mentions EMR at all. It is absent from the standards.

Nothing in federal OSHA regulation sets a recordable rate, DART rate or incident rate cutoff for contractor selection. There is no federal number a contractor can fail.

The EMR pass mark of 1.0 or less, which appears in corporate templates as though it came from an agency, traces to EFCOG Best Practice #271, Recommended Criteria and Thresholds for Safety and Health Metrics for Prequalifying Subcontractors, issued by the Energy Facility Contractors Group for the Department of Energy complex. That document describes itself as a voluntary best practice carrying minimum recommended criteria, not a regulatory requirement. Alongside the EMR line it recommends three-year recordable and DART averages at or below the NAICS average and targets of zero fatalities, zero willful violations and zero serious or repeated violations over three years.

The platforms say the same thing about themselves. Each of the three major vendors states in its own documentation that the hiring client sets the requirements, which means the number in your exhibit is yours. It was never handed to you.

One OSHA letter of interpretation gets cited in this space and should not be. A June 29, 1994 letter to Jeffrey D. Jefferson answering a question about 1910.119(h)(2)(i) in oil and gas well servicing resolves the question on scope grounds, because 1910.119(a)(2)(ii) excludes oil and gas well drilling and servicing, and reminds the inquirer that other applicable standards and the general duty clause still apply. It prescribes no method and endorses no third-party service. Cite it for the scope holding or not at all.

What an experience modification rate actually measures

Label this section insurance practice. None of it is regulation.

An EMR is a workers compensation premium multiplier. In the simplified form the National Council on Compensation Insurance uses in its own training material, the modification equals actual losses divided by expected losses, where expected losses are built from exposure and actual losses include both paid amounts and reserves on open claims. The result multiplies standard premium to produce the premium actually billed. The plan’s stated purpose is to recognize differences among individual employers by comparing each one against the average employer in the same classification.

The employer does not calculate it. Neither does the plant, OSHA, or the prequalification platform. NCCI produces it in most states, and a minority of states run their own rating bureau. NCCI’s own materials sort jurisdictions into four categories: NCCI state, independent bureau state with interstate participation, independent bureau state, and monopolistic state fund.

What is a good EMR for a contractor bidding plant work?

A modifier of 1.00 is average by design, and anything under it is a credit. The common pass mark is a three-year average at or below 1.0, which EFCOG Best Practice #271 recommends as a voluntary measure rather than a regulation. No OSHA standard sets any EMR threshold. The figure is an insurance rating factor, not a safety rating.

The Workers’ Compensation Rating and Inspection Bureau of Massachusetts, a state rating bureau, puts the arithmetic plainly on its experience rating plan page: “An experience modification factor of 1.00, or unity, does not change premium”. Below unity is a credit that reduces premium and reflects better-than-average loss experience. Above unity is a debit. Texas Mutual, the carrier created by the Texas Legislature, describes the same calculation and notes that the factor rests on claim experience from the last three completed policy years.

Four things an EMR is not, each of which an RFP clause tends to assume it is.

It is not a regulatory measure. No OSHA standard mentions it.

It is a loss-cost score rather than a measure of hazard control, driven by claim dollars including reserves on open claims. Because losses are split into primary and excess values at an annually indexed split point, with primary losses carrying full weight, frequency of small claims moves a modifier more than the severity of one large loss. A contractor with several minor recordables can carry a worse modifier than a contractor with a single catastrophic claim. An owner who reads a low modifier as the absence of serious injury risk has the mechanism backwards.

It is not current. It rests on completed policy years, so the modifier read at bid time describes a window that closed well before the crew badges in.

It is not universal. Experience rating attaches only above a premium threshold that varies by state, and NCCI does not publish a single national figure. For a concrete published example, the Massachusetts bureau states that intrastate rating requires premium of at least $11,000 from the last one or two years of the experience period, or an average annual premium of at least $5,500 where the period runs longer than two years, levels in place since October 1, 1991. Those are Massachusetts figures and they do not transfer to Kansas or Texas. The structural point is what matters for an exhibit: a contractor below its own state’s threshold is not experience rated and has no modifier to report, so a clause requiring an EMR under 1.0 excludes the smallest bidders by arithmetic rather than by judgment.

Does a Texas contractor even have an EMR?

Often not. The Texas Department of Insurance states that private employers can choose to carry workers compensation coverage and are not required to in most cases. Employers without it are nonsubscribers, must report that status to the state, and must report lost-time injuries, illnesses and work-related deaths to the Division of Workers’ Compensation. A nonsubscriber holds no policy, so no modifier exists.

A legitimate, well-run Texas contractor can therefore fail your EMR clause for a reason that has nothing to do with safety. A Texas plant running a national corporate template is excluding a slice of its own local market by accident. Note also that Texas modifiers, where they exist, are produced under NCCI’s experience rating plan. Texas is an NCCI jurisdiction, not an independently rated state, which is a common and consequential mix-up.

Kansas, Missouri, Oklahoma, Nebraska, Colorado and Texas are all NCCI jurisdictions, and all six are under federal OSHA jurisdiction with no approved State Plan covering private employers. So the left-hand column of your exhibit is identical across all six states. Every variation a procurement lead will actually meet across that footprint lives in the insurance layer and in the owner’s own template.

The research on whether these numbers measure anything

Do prequalification scores actually predict contractor safety performance?

Weakly at best. Hallowell, Quashne, Salas, Jones, MacLean and Quinn, writing in Professional Safety in April 2021, analyzed 3.26 trillion work hours and found that change in total recordable incident rate was 96 to 98 percent random, found no discernible association between the rate and fatalities, and stated that it should not be used to compare or to prequalify contractors.

The arithmetic behind that conclusion is the part a procurement lead should read. For a recordable rate of 1.00 to be stable to a precision of roughly plus or minus 0.05, the authors calculate that about 307.5 million work hours are needed. Two meaningful decimal places takes on the order of 30 billion hours. Historical rate predicted future rate only after more than 100 months of data, which led the authors to conclude that a contractor posting a rate of 0.75 cannot reasonably be expected to repeat it. Their illustrative small-firm case makes the problem concrete: a company with one injury in 1,000 hours carries a calculated rate of 200 with a 95 percent confidence interval running from 35.31 to 1,128.51.

Scale that down to the firm you are actually screening. A 15-person specialty crew does not work enough hours in three years to produce a stable rate. The number on its prequalification profile is a random variable with a decimal point, and the smaller the contractor, the more of it is noise. Which is a problem, because the small specialist is often the only crew in the region that has done your exact scope.

There is a second federal source pointing the same direction, and it names bid competition directly. GAO-10-10, published in October 2009, drew survey responses from 504 occupational health practitioners and found that 53 percent reported company officials pressuring them to downplay an injury or illness, 47 percent reported the same pressure from workers, and 67 percent had observed worker fear of discipline for reporting. GAO also reported that the people it interviewed named a motive, which is that employers may avoid recording injuries because higher rates raise workers compensation premiums and can hurt their competitiveness in contract bidding. GAO did not quantify how much under-recording results, so neither will this post. The structural point stands on its own. A rate ceiling in your exhibit adds pressure to the number the ceiling is meant to measure.

The practitioner literature reports a countervailing finding worth keeping in view. David W. Wilbanks, writing in Professional Safety in March 2021, reports from the literature that rate-based criteria are rarely tested for efficacy, that binary pass or fail criteria can disqualify good contractors and qualify poor ones, and that a cutoff distinction between 2.01 and 2.00 raises fairness questions. The same article reports research finding that actively managing contractors, prequalification included, is associated with lower incident rates than peers. So the process of contractor management has support in the literature even where the specific metrics do not.

The prequalification platforms as commercial practice

Every requirement described in this section is a private contract term. None of it is regulation.

Does OSHA require contractors to be in ISNetworld, Avetta or Veriforce?

No. No federal OSHA standard names any third-party prequalification platform. Membership is a private contract term the hiring client sets. ISN states that hiring client requirements are configured by the client, Avetta tells suppliers that their client invited them to join, and Veriforce’s contractor subscription terms oblige contractors to meet requirements a Veriforce client specifies.

The vendors are consistent and explicit about this. ISN’s hiring-client page states that “Hiring Client requirements can be configured by location, level of risk, or specific designations”. Avetta’s supplier page tells a supplier that its client invited it, that registration is what keeps it eligible for that client’s work, and that Avetta reviews the submitted information against that client’s requirements. Veriforce’s published contractor terms describe the company as a provider of services and a data-exchange platform, and require contractors to meet requirements a Veriforce client specifies when data is submitted in response to a client request. None of the three claims a regulation requires membership, and none claims to decide who gets hired.

The platforms also disclaim the outcome. Veriforce’s contractor subscription terms provide the services on an as-is and as-available basis and disclaim representations, warranties and guarantees about accuracy, reliability and availability, with liability capped at fees paid in the prior six months and the contractor representing that its own submitted data is accurate. That is the honest frame for an owner. These are document-collection and verification services, and they do not stand behind the safety outcome. A controlling employer’s reasonable-care duty does not transfer to a vendor that warrants nothing about the result.

What the requirement generates at the other end is worth understanding before you set it. No vendor publishes subscription pricing. ISN describes an annual subscription plus a one-time setup fee per country, scaled by workforce size using a three-year average employee count. Avetta states that supplier cost varies with the kind of work the supplier does and with what the client requires, and quotes individually during registration. Veriforce’s terms run a calendar-year subscription that renews automatically unless either party gives 30 days’ written notice, allow a rate increase at renewal on 45 days’ notice, and charge interest on late balances at 1.5 percent per month. Fees scale with workforce size and client count, and every vendor quotes individually.

The burden is multiplicative rather than additive. A contractor serving plants on three different platforms maintains three profiles with overlapping but non-identical requirements, uploads insurance certificates per hiring client against each client’s own limits, and keeps feeding quarterly and annual injury data, monthly hours and headcount by site, annual insurance renewals, training on one-, two- and three-year clocks, and per-worker site orientation. None of that stops after setup.

iSi has been on the receiving end of this as a registered contractor. Listing a full service catalog on a platform generates a required list of written programs long enough to stall a registration, and narrowing the listed services to the scope actually being performed for that owner shrinks the list substantially. The lesson runs both ways. If your exhibit requires a full-catalog profile from a contractor doing one narrow scope, you are paying for a list of written programs that has nothing to do with your work, and you are paying for it in bid price.

If you are the contractor on the other side of this exhibit rather than the one writing it, the gather-everything guide for contractors is here.

The three exchanges your prequalification package cannot perform

On February 18, 2026, OSHA issued news release 26-200-PHI following an August 2025 explosion at the U.S. Steel Clairton Coke Works that killed two employees and injured 12. OSHA cited both the plant operator and MPW Industrial Services, a cleaning services contractor working at the site. The release describes workers exposed to explosion, struck-by and high-pressure injection hazards. U.S. Steel received 7 serious and 1 other-than-serious violations with proposed penalties of $118,214, for failing to use required safety management and energy control practices for hazardous work involving flammable gas. MPW received 4 serious and 2 other-than-serious violations with proposed penalties of $61,473, for failing to provide a relief valve on a high-pressure water system and for failing to coordinate energy control practices for hazardous work involving flammable gas. The release does not use the multi-employer category labels and names no CFR sections, and the employers had 15 business days to comply, request an informal conference or contest. Penalties in a release are proposed, not final.

Read the failure mode rather than the dollar figures. Coordination of energy control between a host and its embedded contractor appears in the contractor’s citation. That coordination is the 1910.147(f)(2)(i) exchange in substance, and it happens on a shift, between two people standing at a valve. A prequalification profile completed in January does nothing to make it happen in August.

The same is true of the two other exchanges with the heaviest content in the standards. The process hazard and emergency action plan briefing at 1910.119(h)(2)(ii) and (h)(2)(iii) is a conversation about this process, this unit, this week. The permit space disclosure and debrief at 1910.146(c)(8)(ii) and (c)(8)(v) requires the plant to hand over its own history with a specific space and to take back what the crew found. A profile cannot perform any of the three. OSHA’s enforcement record, as found in this research, cites hosts for failures of hazard information, energy control coordination and process safety management. It does not cite owners for choosing the wrong prequalification platform or the wrong threshold, which is precisely why the paperwork is not the defense owners believe it is.

Writing a requirements exhibit that holds up

Start by re-sorting your existing exhibit into the two columns above and dating the result. That document alone is better evidence of reasonable care than any platform grade, because it shows a named person at your plant evaluated each requirement against the work.

Then build the left column out properly, because it is where citations come from. Name the person who performs the 1910.119(h)(2)(ii) hazard briefing and the 1910.146(c)(8) permit space disclosure, and put the (c)(8)(v) debrief on the mobilization schedule rather than leaving it to good intentions. Make the lockout exchange at 1910.147(f)(2)(i) run in both directions and record both halves. Set an actual interval for the periodic evaluation at (h)(2)(v), since the standard leaves the cadence to you. Decide in writing, before the first incident, who supervises the crew day to day under 1904.31(b)(3), and reconcile the logs under (b)(4). Specify the training documentation you want under 1910.119(h)(3)(iii) and the retention you expect under 1910.1020.

Then price the right column. Each line there narrows the field, and some of that narrowing buys you something real. A verified, dated record that you evaluated the contractor is exactly what 1910.119(h)(2)(i) and the controlling-employer reasonable-care standard ask for, and forcing the written-program and training-record exchange before mobilization beats discovering the gap after an incident. What it does not buy is a defense the vendor stands behind, or a metric that distinguishes a competent 15-person crew from an incompetent one. Hold the rate and modifier thresholds as tiebreakers between otherwise qualified bidders rather than as gates, and the field stops shrinking for reasons nobody chose.

iSi works the plant side of this from inside the fence. Facility Support puts 50-plus personnel on site across first, second and third shift, authorized by production line and cost center, and the division has two decades of embedded aerospace experience with a major aerospace OEM behind it. The components your left column actually needs are named services: written safety programs, safety and environmental training with the records to prove it, OSHA compliance and audits, and industrial hygiene monitoring that generates the exposure records 1910.1020 makes you keep for 30 years. The firm operates in 40 states from a Wichita headquarters.

iSi also works the platform layer itself, maintaining its own prequalification status as an embedded contractor and managing platform compliance, so the exhibit advice above comes from a firm that has to pass these screens to keep its own crews on client floors.

If you want the embedded execution, start with Facility Support. If you would rather build the program capability than buy a screen, the EHS COOP retainer runs $15,000 to $90,000 per year against $130,000 to $195,000 for a fully loaded senior environmental hire, with a national team instead of one person with PTO: EHS COOP. Send us your contractor requirements exhibit and we will tell you which column each line belongs in. Same-day response.

Sources

Primary government and regulatory sources (verified 2026-10-14)

Rating bureau and insurance sources (private rating organizations and carriers, not regulators; verified 2026-10-14)

Vendor documentation (commercial sources, not regulatory; verified 2026-10-14)

Industry body and research sources (voluntary practice and peer-reviewed or practitioner literature, not regulatory; verified 2026-10-14)

Tags: