Construction site safety records: what to keep and how long

Why safety records matter

Safety records serve three purposes. First, they are evidence of compliance. When HSE visits your site, they will ask to see specific records: induction logs, training records, risk assessments, permit histories. Producing them quickly and completely demonstrates that you are managing your obligations actively, not just on paper.

Second, they are evidence in the event of an incident. If a worker is injured on your site, the subsequent investigation will examine your records in detail. Did the worker receive a site induction? Were they trained for the task they were performing? Was a risk assessment in place? Were inspections up to date? Your records are your defence.

Third, they are a management tool. Records of near misses reveal patterns. Inspection trends highlight areas of recurring non-compliance. Training records show gaps in workforce competence. Used proactively, safety records drive improvement, not just compliance.

What records to keep

The records a UK construction site should maintain fall into several categories:

Worker records

• Site induction completion (name, date, content version, acknowledgement)
• CSCS card verification records
• Training records (toolbox talks attended, formal training courses completed)
• Competency records (qualifications, certifications, and their expiry dates)
• Right-to-work check records
• Attendance records (sign-in/sign-out times, by individual)

Site safety records

• Risk assessments (task-specific and site-wide)
• Method statements
• COSHH assessments (for every hazardous substance used on site)
• Permit-to-work records (hot works, confined space, height, excavation)
• Scaffold inspection records (before first use, after any event that could affect stability, and at intervals not exceeding seven days)
• Excavation inspection records
• Lifting equipment inspection records
• Fire risk assessments and drill records

Incident records

• Accident reports (including the accident book entries)
• RIDDOR reports (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations)
• Near-miss reports
• First aid records
• Environmental incident records

For a full breakdown of what HSE expects to see during an inspection, see our guide to HSE inspections.

Retention periods

Different record types have different retention requirements. Some are set by specific regulations. Others are driven by limitation periods for civil claims. Here are the key periods:

• RIDDOR reports: 3 years from the date of the incident (RIDDOR Regulation 12).
• Accident book entries: 3 years from the date of the entry. Note that under GDPR, personal data in accident books should be stored so that individual entries can be removed when the retention period expires.
• COSHH assessments and exposure records: COSHH assessments must be reviewed regularly and retained for as long as they are relevant. Health surveillance records for workers exposed to hazardous substances must be retained for 40 years from the date of the last entry (COSHH Regulation 11). This is one of the longest retention periods in any UK health and safety regulation.
• Asbestos exposure records: 40 years (Control of Asbestos Regulations 2012).
• Training records: No specific statutory retention period, but best practice is to retain for the duration of the worker's employment plus six years (the limitation period for civil negligence claims).
• Risk assessments: No specific statutory period, but retain for at least three years or until replaced by an updated assessment.
• Scaffold and lifting equipment inspections: Retain until the next inspection is completed, then for at least three months afterwards (Work at Height Regulations and LOLER).
• Fire risk assessments: No specific retention period, but the responsible person must keep the assessment under review. Retain previous versions to demonstrate the review process.
• Attendance records: No statutory requirement for specific retention, but useful for Working Time Directive compliance (retain for at least two years) and for FILO reporting in the event of an incident (retain for the project duration plus six years).

The 40-year COSHH retention period is the one that catches most organisations out. If a worker was exposed to a hazardous substance on your site in 2026, you need to be able to produce the health surveillance record in 2066. Paper records are unlikely to survive that long without dedicated archival storage. For more on RIDDOR obligations, see our RIDDOR reporting guide.

Paper vs digital storage

Paper records have been the construction industry standard for decades. They have one advantage: simplicity. A form is filled in, signed, and put in a folder. No technology required.

The disadvantages are significant:

• Physical deterioration: Paper degrades over time. A 40-year retention requirement for COSHH records means the paper needs to survive four decades of storage.
• Loss and damage: Fire, flood, office moves, and simple misfiling all result in lost records. Once a paper record is lost, it is gone.
• Retrieval speed: Finding a specific record in a filing cabinet of hundreds or thousands of documents takes time. When HSE asks for a specific induction record, you need to produce it quickly.
• No searchability: Paper cannot be filtered, sorted, or queried. You cannot ask a filing cabinet "show me all workers whose first aid certificate expires in the next 30 days."
• Duplication cost: Creating backup copies of paper records requires physical photocopying and off-site storage.

Digital storage eliminates these problems. Records are stored in the cloud, automatically backed up, searchable, and accessible from anywhere. A specific record can be retrieved in seconds. Expiry-based queries ("show me all expiring CSCS cards") are trivial. And the records survive indefinitely without physical degradation.

For organisations managing multiple sites, digital storage also centralises records that would otherwise be scattered across site offices. A SHEQ manager can review compliance across the entire portfolio from a single dashboard, rather than requesting individual reports from each site.

Responding to HSE record requests

When an HSE inspector asks for records, the request is typically specific: "Show me the induction record for this worker." "Show me the permit-to-work for the hot works activity that was happening this morning." "Show me the scaffold inspection records for the past month."

Your ability to respond quickly and completely makes a direct impression on the inspector. Producing the requested record in under a minute signals a well-managed site. Spending 20 minutes searching through filing cabinets signals the opposite.

With a digital system, responding to HSE requests is straightforward. Search by worker name, by date, by record type, or by site. Export the relevant records as PDF or CSV. Provide them on the spot or email them within minutes.

AttendIQ stores all safety records digitally: inductions, competencies, attendance, form submissions, and permits. Every record is timestamped, attributed to a specific worker or site, and searchable. When HSE asks, you can produce the answer before the inspector has finished writing the request.

Compliance exports and reporting

Beyond responding to ad-hoc requests, safety records need to feed into regular reporting. Common reporting requirements include:

• Monthly H&S reports: Incident rates, near-miss reports, inspection findings, training completion rates.
• Client reports: Many clients require monthly or quarterly compliance reports from their principal contractors, covering attendance, competency status, and incident data.
• Board reports: Senior management need summary data on safety performance across the portfolio.
• Audit preparation: ISO 45001 (occupational health and safety management) audits require evidence of systematic record-keeping and review.

Generating these reports from paper records requires significant manual effort: pulling data from multiple sources, collating it in a spreadsheet, and formatting it for presentation. This is typically a multi-day exercise each month.

From a digital system, these reports can be generated automatically. Define the report template once, set the schedule, and the system produces it at the required interval. AttendIQ's reports module includes a library of standard compliance reports, a custom report builder, and scheduled report delivery via email.

The shift from paper to digital is not just about convenience. It is about the ability to use your safety data proactively, spotting trends, identifying risks, and demonstrating compliance continuously rather than scrambling to produce evidence after the fact.