Contractor safety management is how a host employer keeps outside workers safe on its site: prequalify contractors on their safety record, orient them to site-specific hazards, coordinate their high-risk work through permits, oversee the job, and evaluate performance afterward. Under OSHA's multi-employer policy, the host can be cited for a contractor's exposure.
That last sentence is the reason this matters to a plant manager and not just a purchasing agent. "They're a contractor, it's their problem" is not how OSHA sees a shared worksite. If your site controls the conditions, you carry duties for the people working in them, whether they are on your payroll or not. This post covers the lifecycle, the multi-employer rules, and the PSM contractor requirements. It is educational, not legal advice.
Why is the host employer responsible for contractors?
Because most work sites have more than one employer, and OSHA's Multi-Employer Citation Policy (CPL 02-00-124) lets it cite more than one for the same hazard. The policy sorts employers into four roles for any given hazard: the creating employer who caused it, the exposing employer whose workers are exposed, the correcting employer responsible for fixing it, and the controlling employer with general supervisory authority over the site. A host manufacturer is frequently the controlling employer, and a controlling employer must exercise reasonable care to prevent and detect violations, even though the standard of care is lower than for its own employees.
Control is usually established by contract, but it can also arise in practice if the host directs how and when work is done. The practical takeaway: you cannot outsource the hazard along with the labor. If a contractor's worker is hurt on a guard you removed or a system you failed to isolate, your name can be on the citation.
What does the contractor safety lifecycle look like?
Contractor safety is a lifecycle, not a sign-in sheet. It runs from before the contractor is hired to after the job is done, and the strongest programs treat each stage as a gate.
How do you prequalify a contractor on safety?
Before price, look at their safety record. Prequalification means reviewing a contractor's written safety programs, their training records, their OSHA citation history, and their objective injury metrics: the recordable rate (TRIR), the days-away/restricted/transfer rate (DART), and their experience modification rate (EMR), which insurers use to price workers' compensation and which is a rough proxy for loss history. A contractor with a strong safety program and a low EMR is telling you something about how they will behave on your floor. None of these numbers is perfect alone, so read them together and against the actual scope of work you are buying.
Prequalification is also where the paper meets reality. A contractor can hand you a binder of programs and still cut corners, which is why prequalification gates entry but oversight during the job is what confirms it.
What are the steps of managing contractors on site?
Run the lifecycle as a defined sequence so nothing depends on a busy supervisor remembering it.
- Prequalify on safety, reviewing programs, training, citation history, and injury metrics before selection, not after the crew shows up.
- Define the scope and its hazards with the contractor, and require a task-level job safety analysis for the work they will actually do.
- Orient the crew to your site, covering your specific hazards, emergency procedures, alarm signals, muster points, and the rules that apply on your floor before any work begins.
- Coordinate high-risk work through permits, tying hot work, lockout/tagout confined space entry and line breaking into your permit system so host and contractor are never working at cross purposes.
- Oversee the work in progress, with someone accountable for checking that what was planned is what is happening, and authority to stop work that is unsafe.
- Capture incidents and near misses from contractors in the same system as your own, feeding them through near-miss reporting instead of letting them vanish with the crew.
- Evaluate performance and close the loop, scoring the job and feeding the result back into whether that contractor prequalifies next time.
The coordination step is where multi-employer sites actually get hurt. A contractor cutting into a line your operator thinks is isolated, or doing hot work near a combustible dust accumulation, is a coordination failure, not bad luck.
What does OSHA's PSM standard require for contractors?
If the work is on or near a process covered by the Process Safety Management standard, 29 CFR 1910.119, paragraph (h) adds specific, written contractor duties on both sides. The host employer must obtain and evaluate information on the contract employer's safety performance and programs when selecting them, inform contractors of the known potential fire, explosion, and toxic release hazards of the process, explain the applicable emergency action plan, develop and enforce safe work practices controlling contractor entry and presence, evaluate the contractor's performance periodically, and keep an injury and illness log for contractors in the process areas. The contract employer, in turn, must train its workers on the hazards and safe practices, document that training, and make sure its people follow the site's rules.
| Host (controlling) employer under 1910.119(h) | Contract employer under 1910.119(h) |
|---|---|
| Evaluate contractor safety performance and programs when selecting | Ensure workers are trained in the work and its hazards |
| Inform contractors of process fire, explosion, and toxic hazards | Document that each worker received and understood the training |
| Explain the applicable emergency action plan | Ensure workers follow site safety rules and safe work practices |
| Develop and enforce safe work practices for contractor presence | Advise the host of hazards the contract work itself creates |
| Evaluate contractor performance periodically; keep the injury log | Advise the host of hazards found during the work |
How do you track contractor safety performance?
With both lagging and leading measures, and without pretending either one alone tells the story. The lagging measures are the familiar outcome numbers: the contractor's recordable rate, DART rate, and any incidents that happened on your site. They tell you what already went wrong. The leading measures are the ones that predict the next job: the percentage of crews that completed site orientation before starting, permit compliance, the rate of unsafe conditions caught and corrected during oversight, and how quickly the contractor closes findings you raise. A contractor with a clean lagging record but a habit of skipping orientation and starting hot work without a permit is a problem that has not surfaced yet. Score each job on both, keep the score, and let it drive prequalification for the next one. A contractor safety program that only reacts to incidents is measuring its own failures; one that watches leading indicators is preventing them, and the evaluation stage of the lifecycle is where that data gets captured.
What about temporary and staffing-agency workers?
Temporary workers are a related shared-employer situation, and OSHA treats the host and the staffing agency as jointly responsible for their safety. The staffing agency and the host should each know which safety duties they own: generally the agency handles general safety training and the host handles site- and task-specific hazards, training, and PPE. The failure mode is the same as with contractors: each side assumes the other covered it, and the temporary worker, often new and least familiar with the hazards, falls into the gap.
What do the numbers say?
The rules and the primary sources:
- Multiple employers can be cited for one hazard under OSHA's Multi-Employer Citation Policy (CPL 02-00-124) which defines the creating, exposing, correcting, and controlling roles.
- Contractor duties for covered processes are set in OSHA's Process Safety Management standard, 29 CFR 1910.119(h).
- OSHA and NIOSH's temporary worker initiative lays out the shared host and staffing-agency responsibilities for temporary workers.
The common thread is that a hazard does not care whose badge the worker wears. Neither, increasingly, does the citation.
Where contractor safety falls through the cracks
Contractor safety usually lives in three disconnected places: a prequalification binder in purchasing, a sign-in orientation sheet at the gate, and permits on clipboards out on the floor. Nobody can see all three at once, so a contractor with a lapsed program still gets a badge, and a hot-work permit is issued next to an uncleaned dust hazard. Harmony is an AI-native layer that connects machines, software, and paperwork into one operational layer, with no rip-and-replace: prequalification records, site orientations, permits, and contractor incident reports become structured data in one place instead of three, part of the everyday shape of connected worker technology. AI search returns cited answers across those records, so a supervisor can confirm a crew is oriented and their permit is active before work starts, and Harmony's digital workflows route each expiring qualification or open permit to an owner. It is not a safety-compliance product; it keeps the three piles from being three blind spots. Pair it with your own safety audits so contractor work is sampled against the same standard as everything else on the floor.