Subcontractor Onboarding: A Document Compliance Workflow That Keeps Sites Moving

A good subcontractor onboarding workflow collects every required document before the start date, reads and records expiry dates, chases what is missing and shows the site team a clear pre-start status. Automation can handle the requests, filing and reminders. Approving a subcontractor to start, judging competence and completing tax checks stay with authorised people.

A crew arrives at the gate on Monday and the office realises their liability certificate expired on Friday. The work stops, or worse, goes ahead anyway. That is what happens when compliance lives in a spreadsheet, an inbox and one administrator's memory.

This guide covers what to collect, how each stage can be automated, who checks what, and which rules differ between the US, UK, EU, Canada and Australia. It goes deeper on one part of the picture covered on our page on automation for construction firms.

Why subcontractor paperwork keeps breaking

The documents are not complicated. The problem is volume, timing and the number of people involved.

• Many expiry dates. One subcontractor might hold liability, workers' compensation or employers' liability cover, a trade licence, training cards for each worker and a safety plan per activity, each with its own renewal date.
• Every format. Phone photos, scanned PDFs, forwarded broker emails and attachments called "doc1.pdf".
• Split ownership. The administrator holds insurance and tax forms, the safety manager holds method statements, and the superintendent or site manager finds out at the gate.
• Rules vary by job. Work across several states, provinces or countries means different licence, tax and safety requirements on each project.

Most of this needs a reliable daily process, not clever technology.

What a compliance pack usually contains

Your contracts, insurer and local law decide the exact list, but most firms ask for documents in five groups.

1. Insurance evidence. In the US this is usually a certificate of insurance (COI), often an ACORD 25 form, which states that it does not amend, extend or alter the policies. As legal commentary on certificates notes, when additional insured status matters, ask for the endorsement itself.
2. Licences and registrations. Many US states license contractors and offer a public lookup, such as California's CSLB Check a License. Elsewhere, trade registrations or competence cards play this role.
3. Tax status forms. These differ most between countries (see below).
4. Safety and competence documents. Method statements, hazard analyses, training records and the cards the site requires.
5. Premium and wage clearances. Some places protect the hiring contractor from a subcontractor's unpaid premiums or wages if the right document is held.

The subcontractor onboarding workflow, step by step

Each stage has a trigger, an automated action and a person who reviews.

1. A new package or start date triggers a check

Trigger: a subcontract is awarded, a purchase order is raised, or a start date appears on the schedule. Action: the subcontractor's record is compared with the checklist for that type of work and jurisdiction. Who reviews: the administrator confirms the checklist suits the package. A crane hire firm and a drywall crew need different packs.

2. A request goes out listing exactly what is missing

Action: one message lists the outstanding items by name, with a secure upload link and a due date. Who reviews: the administrator approves the request template once.

These emails come from your domain, so make sure they reach the inbox. Run the free email deliverability checker on the sending domain before you switch on automatic chasing.

3. Uploads are filed and dates are read

Action: each upload is renamed consistently, filed against the subcontractor and package, and key fields are read: insurer, policy number, limits, expiry date and named insured. Who reviews: staff confirm every date and figure read from the document. A misread expiry date undermines the whole system, so a person confirms it before it counts.

A training card sent as an iPhone photo can be converted with the HEIC to JPG converter or turn straight into a PDF with the image to PDF tool. When a client or main contractor asks for one compliance pack per subcontractor, the PDF merge tool combines the files into a single document.

4. Tax details are gathered for the official step

Action: the tax information the firm needs is collected and checked for obvious gaps, such as a missing signature or a number with the wrong number of digits. Who reviews: an authorised person completes any official verification, filing or withholding decision. Automation prepares, it does not file.

5. Safety documents get a completeness check

Action: method statements or hazard analyses are checked against the firm's checklist for expected sections, such as sequence, hazards, controls, emergency arrangements and sign-off. Who reviews: a competent person reads every document in full and accepts or rejects it. The check only spots gaps. It never decides whether a method is safe.

6. A pre-start status shows who is ready

Action: a simple view shows each subcontractor on each project as complete, outstanding or expired, with the reason. Who reviews: the project manager and superintendent decide whether the subcontractor may start, even when every box is green.

7. Expiry reminders run for the whole project

Action: reminders go out ahead of each renewal, for example 30 and 7 days before expiry, and the status changes if a document lapses. Who reviews: the administrator follows up, and the project manager decides what happens on site if cover lapses. The working days calculator helps set lead times around public holidays.

The workflow at a glance

Tax status forms: the rules differ by country

A template from another country can cause real problems here. Some examples:

• United States. Contractors ask subcontractors for Form W-9, which provides the correct taxpayer identification number for information returns. If a payee does not provide a TIN, or provides an obviously incorrect one, the payer must apply backup withholding, currently 24% according to IRS Publication 1281.
• United Kingdom. Under the Construction Industry Scheme, contractors must verify new subcontractors with HMRC before paying them. HMRC confirms the deduction rate or gross payment, and the details must exactly match the subcontractor's registration.
• Germany. Without a valid exemption certificate (Freistellungsbescheinigung), the recipient of construction work generally withholds 15% of the payment for the tax office. The exemption can be checked online with the Federal Central Tax Office, as set out in section 48b of the Income Tax Act.
• Canada (Ontario). A WSIB clearance certificate protects the hiring party from a contractor's unpaid premiums for its validity period of up to 90 days, so long projects need renewals.
• Australia (New South Wales). A principal contractor can be liable for a subcontractor's workers' compensation premiums, payroll tax and wages unless it holds a valid subcontractor's statement, with a certificate of currency attached where required.

Short validity periods, like Ontario's, are exactly where automated reminders earn their keep. These are examples only. Check the rules where you operate with your accountant or tax adviser.

What stays with people

These decisions stay with named, authorised people:

• Approving a subcontractor to start. A complete pack is a prerequisite, not an approval.
• Judging competence. In the UK, HSE guidance under the CDM Regulations says contractors must check that workers they employ or appoint have the skills, knowledge, training and experience for the work. Similar duties apply under OSHA in the US and work health and safety laws in Australia and Canada.
• Approving safety documents and deciding whether work is safe to proceed.
• Tax verifications, filings and withholding decisions.
• Deciding what happens when cover lapses mid-project.

In Australia, for example, workers generally need a general construction induction "white card", and NSW notes that a site safety induction is still needed on each new site. Software can record that a card is held. Whether the crew is right for the job is a human call.

Data protection and legal checks

A compliance pack is full of personal data: home addresses of sole traders, tax and Social Security or National Insurance numbers, training records and sometimes photo ID.

1. Collect only what you need. Skip the passport scan if a card number will do.
2. Set retention periods. The ICO's guidance on storage limitation says you should not keep data indefinitely "just in case". In Australia, APP 11 requires reasonable steps to destroy or de-identify personal information that is no longer needed, unless a law requires you to keep it. Tax and contract records often have their own legal retention periods, so balance the two.
3. Check every service the data passes through. Under GDPR in the UK and EU, upload portals and automation platforms need a processor agreement and a lawful transfer route. US state privacy laws and Canada's PIPEDA set their own expectations.
4. Lock down tax identifiers. Restrict access and avoid sending them by plain email.
5. Keep an audit trail of who confirmed each date and approved each start. It shows reasonable checks were made.

How to start small and measure it

You do not need a platform rollout to begin. Make It Flow usually suggests this order:

1. Pick one live project with several subcontractors starting soon.
2. Write the checklist down for each package type. This alone often exposes gaps.
3. Automate requests and filing first. Keep expiry dates confirmed by a person from day one.
4. Add the pre-start status view and share it with the superintendent.
5. Switch on renewal reminders once the dates in the system are trusted.

Measure it in plain terms: fewer crews held at the gate, less time chasing, gaps seen earlier. Ask the people doing the work and adjust before adding a second project. For a broader view of where automation fits in a contractor's office, see our guide to AI in construction.

If you would like help designing a workflow around your own systems and rules, talk to us.

FAQ

What documents should a subcontractor provide before starting work?

Usually insurance evidence, required licences, tax forms such as a W-9 in the US or CIS details in the UK, safety documents and crew training records. Some places add clearances, such as Ontario's WSIB certificate or a NSW subcontractor's statement. Your contracts, insurer and local law decide the final list.

Is a certificate of insurance enough proof of cover?

Not always. A certificate summarises policies at a point in time, and the standard ACORD 25 form states that it does not change the coverage. If your contract requires additional insured status, ask for the endorsement itself. Also check limits, the named insured and expiry dates, and set reminders so lapsed cover is spotted quickly.

Can automation verify a subcontractor's tax status?

It can gather the forms and details, flag obvious gaps and remind staff when checks are due. The official step should stay with an authorised person, whether that is a CIS verification with HMRC, a TIN matter in the US or an exemption check in Germany. Those steps carry legal consequences, and the details must be right.

How far ahead should expiry reminders go out?

Many firms send a first reminder around 30 days before expiry and a second about a week before, but choose what suits your subcontractors and insurers. Short-lived documents, such as Ontario WSIB clearances valid for up to 90 days, need a tighter cycle. Whatever you choose, a person should follow up when a reminder goes unanswered.

Do we need special software for subcontractor compliance?

Not necessarily. Prequalification and construction management systems often include compliance features, so start there if you have one. Smaller firms can build a reliable workflow from shared storage, an upload form, a tracker and an automation tool. What matters most is a written checklist and confirmed dates.

Who is responsible if a subcontractor's documents lapse mid-project?

It depends on your contract and local law, but the hiring contractor usually carries the risk of letting work continue without required cover or clearances. Automation can flag a lapse the day it happens. A project manager then decides what to do, in line with the subcontract.