An auditor, inspector or GC safety manager doesn't want your opinion that the crew is trained. They want evidence, fast.
What "audit-ready" means
You can answer, within minutes:
- Who is on this site today?
- What training does each person have, with dates?
- Where's the proof (card photo, signed record)?
- Is anything expired or missing for this site's requirements?
What to keep per worker
- OSHA Outreach cards (photo, front and back)
- Employer-certified training records that OSHA standards require, such as fall protection (1926.503), forklift (1910.178) and hazard communication
- Competent-person designations and the basis for them
- Equipment evaluations with the evaluator's name
- Toolbox talk sign-ins
- Medical/fit test records, kept confidential and separate
Retention
Retention periods vary by standard, and some, such as exposure and medical records, are long. As a baseline, keep training records for as long as the worker is employed, plus a few years. Contract requirements may be longer.
Format
OSHA does not require paper. Digital records are fine if they're complete, legible and can be produced. Exports should show names, cert types, dates and issuers in one document.
The audit PDF
In OSHA Card Tracker, the Crew plan creates an audit PDF listing every worker with their certifications, status and dates. The Company plan adds site-by-site exports and QR proof pages that a GC can scan at the gate.
What an inspector usually asks for first
In my experience the first request is rarely "show me everything." It is specific to what the inspector saw or what triggered the visit. If they walked past an open edge, they ask for fall protection training. If a forklift was involved in an incident, they ask for that operator's evaluation. If the visit followed a chemical complaint, they ask about hazard communication. Inspectors focus on training related to the specific hazard, so the records you can find fastest should be the ones tied to your highest-risk work.
A good rule: for every hazard your crews face every week, you should be able to show the training record in under five minutes.
Training records by standard: what to keep and for how long
OSHA has no single training-record rule. Each standard sets its own requirements, and many require training without requiring a record at all. OSHA's own guide, Training Requirements in OSHA Standards (OSHA 2254), lists them standard by standard and says it is a good idea to keep a record of all safety training. Here are the ones that come up most on construction and warehouse jobs:
| Standard | What must be documented | Retention |
|---|---|---|
| Fall protection, construction (1926.503(b)) | Written certification: employee name, date(s) of training, signature of the trainer or employer | Keep the latest certification |
| Powered industrial trucks (1910.178(l)(6)) | Certification: operator name, training date, evaluation date, name of the evaluator | Not stated; evaluation at least every 3 years |
| Permit-required confined spaces, construction (1926.1207) | Certification of training: employee name, trainer signature or initials, dates | Not stated; keep for the employee's tenure |
| Lockout/tagout (1910.147(c)(7)(iv)) | Certification of training with employee name and dates | Not stated |
| Bloodborne pathogens (1910.1030(h)(2)) | Dates, contents or summary, trainer names and qualifications, attendee names and job titles | 3 years from training |
| Asbestos | Training records | 1 year beyond the last date of employment |
| Cranes, operator qualification (1926.1427) | Operator certification or qualification documents, and evaluation records | Available at the worksite while the operator works for you |
For everything else, such as hazard communication, respirators, noise and fire extinguishers, the standards require training but generally do not require a training record. Keep one anyway. Without a record, it is very hard to prove training happened.
The minimum fields for any training record
When a standard does not say what to record, use these fields. They cover what inspectors and GCs ask for:
- Date and length of the session.
- Specific topic (not "safety training"; write "scaffold erection and inspection, 1926.454").
- Trainer's name and qualification.
- Attendees' names, with signatures or initials.
- Language the training was given in.
- Method: classroom, on the job, online.
- How competence was checked: test score, observed demonstration, or questions answered.
The language field matters more than most people think. OSHA expects training in a language and vocabulary workers understand. If your crew works in Spanish and your sign-in sheet says the class was in English, expect questions.
A five-minute audit you can run on Friday
Pick one active site and do this:
- Count heads. Compare who is on site today with your list. Anyone missing from the list is your first gap.
- Pick three workers at random. For each, find their OSHA card photo, their fall protection certification and any equipment evaluations.
- Check one expiring credential. Find the next forklift evaluation or CPR card due to expire. Is a date booked?
- Check the subs. Do you have card copies for every subcontractor worker on site this week?
- Time yourself. If any record took more than a few minutes to find, fix the filing before you need it.
Do this every week on a different site and your records stay audit-ready without a big annual clean-up.
Paper, digital or both?
OSHA does not require paper. Digital records are fine if they are complete, legible and can be produced when asked. What matters is that the record exists, includes the required fields and can be shown on site. Practical points:
- Signatures: many standards ask for the signature of the trainer or employer, not the employee. Digital signatures and initials are widely used; keep the system's audit trail.
- Photos of sign-in sheets are fine as long as they are readable.
- Phones on site: foremen should be able to open a crew's records on a phone. Inspectors and GC safety managers are used to it.
- Backups: if all records live on one laptop, they are one spilled coffee away from gone.
Medical and exposure records are different
Medical evaluations for respirator use, audiograms and exposure monitoring results are not training records. They have their own confidentiality and retention rules, which can be long: exposure and medical records are generally kept for the duration of employment plus thirty years under 1910.1020. Keep them separate from training records and limit who can see them. Your training record can say "fit test current until June 2027" without exposing the medical details.
Subcontractor records on your site
If you are the general contractor, you are not required to keep your subs' training records for them, but under 1926.16 the prime contractor keeps overall responsibility for compliance on the project. In practice:
- Ask each sub for a crew list with card copies before mobilization.
- Keep those copies in a separate folder per sub.
- Check new arrivals on day one.
Our article on subcontractor safety requirements covers the full prequalification packet GCs ask for.
Keeping it current
Audit-ready is a habit, not a project. Four routines keep records honest:
- On hire: collect and photograph every card and certificate the day the worker starts. See the new hire safety onboarding checklist.
- After every training session: enter the record the same day.
- Weekly: review anything expiring in the next 60 days.
- Monthly: spot-check five records for missing photos or dates.
A crew card tracker or a simple training matrix makes these routines take minutes instead of hours.
Sources and further reading
These are the primary sources behind the record-keeping advice above.
- OSHA Outreach Training Program: cards, replacement and authorized trainers.
- OSHA recordkeeping rules, 29 CFR 1904: injury logs and retention.
- OSHA training requirements in OSHA standards (OSHA 2254): which standards require training and certification records.
- Your state plan agency, if you work in a state that runs its own OSHA program.