AppMatic Tech builds construction safety compliance systems that capture checklists, photos, incidents, and sign-offs in an offline-first Flutter app, store them with a full audit trail in Laravel and PostgreSQL, and draft compliance reports through an MCP server. AppMatic Tech is based in Ahmedabad, India, and its platform cut compliance report assembly from 20 to 40 minutes to under two.
Most construction companies keep safety records. Far fewer can produce the right record, complete and trustworthy, within minutes of an inspector, an insurer, or a client asking for it. The difference is rarely effort. It is whether records are captured once, at the point of work, in a structure that already matches what each regulator expects. This article explains what makes a safety record audit-ready, compares the main record-keeping duties in the United States, the United Kingdom, and three African markets, and shows how one digital trail can serve all of them.
This article summarises published requirements for general information. It is not legal advice. Requirements change, and each company should confirm its obligations with the regulator or with qualified counsel.
Key takeaways
One well-designed digital trail can satisfy several regulators at once.
| Point | Detail |
|---|---|
| Audit-ready means seven properties | Complete, contemporaneous, attributable, evidenced, versioned, retained, retrievable |
| United States | OSHA 300, 300A, and 301 records kept for five years; 300A posted February 1 to April 30 |
| United Kingdom | CDM 2015 construction phase plan and health and safety file; golden thread for higher-risk buildings |
| South Africa | Health and safety file under the Construction Regulations 2014; CIDB registration for public work |
| Kenya and Tanzania | Contractor registration with the NCA and the CRB respectively; national occupational safety laws |
| Measured result | Compliance report assembly fell from 20 to 40 minutes to under two |
What makes a construction safety record audit-ready?
An audit-ready safety record holds up when someone who was not on site examines it later. Seven properties decide whether it does.
- Complete
- Every required field is filled, because the capture form will not submit without them.
- Contemporaneous
- The record is created at the time of the inspection or event, with a capture-time timestamp, not written up days later.
- Attributable
- A named, authenticated person created and signed the record.
- Evidenced
- Dated and located photos support the record, linked to it rather than stored elsewhere.
- Versioned
- Every change is kept in a history showing what changed, when, and by whom.
- Retained
- The record is kept for the period each jurisdiction requires, then handled under a defined retention policy.
- Retrievable
- The record can be found in minutes by project, date, type, or person.
Paper forms and chat-group photos usually fail on attributable, versioned, and retrievable. Why chat groups fail as a record system is explained in why construction teams lose photos in WhatsApp groups.
What do US construction companies have to record under OSHA?
In the United States, injury and illness recordkeeping is set by OSHA's regulation at 29 CFR Part 1904. The core duties for covered employers are:
- Keep the forms. Employers with more than ten employees, other than those in partially exempt industries listed in the regulation, record work-related injuries and illnesses on the OSHA 300 log, the 300A annual summary, and the 301 incident report, or equivalent forms.
- Retain for five years. The records are kept for five years following the end of the calendar year they cover.
- Post the summary. The 300A summary is posted at each establishment from February 1 to April 30 each year.
- Submit electronically where required. Establishments above size thresholds in designated industries submit injury data to OSHA electronically each year.
- Report severe events quickly. Work-related fatalities are reported to OSHA within 8 hours, and in-patient hospitalisations, amputations, and losses of an eye within 24 hours.
Beyond OSHA, US contractors keep inspection records, toolbox talk attendance, and training records because owners, insurers, and general contractors require them contractually. A digital trail that captures incidents with photos and structured fields makes the OSHA forms a by-product of daily work rather than a separate task.
What do UK construction projects have to record under CDM 2015 and the Building Safety Act?
In the United Kingdom, three instruments shape construction safety records.
- CDM 2015. The Construction (Design and Management) Regulations 2015 require a construction phase plan, drawn up by the principal contractor, or the contractor on a single-contractor project, before the construction phase starts and kept up to date as work progresses. On projects with more than one contractor, a health and safety file is prepared by the principal designer, with relevant information supplied by the principal contractor, and handed to the client at the end of the project for use in future work.
- RIDDOR 2013. The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013 require certain workplace injuries, diseases, and dangerous occurrences to be reported to the enforcing authority.
- Building Safety Act 2022. For higher-risk buildings in England, meaning those at least 18 metres high or with at least seven storeys and with at least two residential units, the golden thread requires digital information showing compliance and the management of fire and structural safety risks, kept from design through occupation. The duty came into force on 1 October 2023.
The golden thread changes what a site record is for. Photos of concealed fire-stopping, inspection sign-offs, and change records become part of a building's permanent digital file. How to capture photos that meet that standard is covered in construction site photo documentation.
What do South Africa, Kenya and Tanzania require?
African construction markets combine contractor registration with occupational safety law. The three markets below have well-established frameworks. Requirements in other countries, including Nigeria, Egypt, and Ethiopia, vary by sector, state, and client, and public clients often specify records contractually.
| Country | Contractor registration | Safety records |
|---|---|---|
| South Africa | The Construction Industry Development Board (CIDB) grades contractors from 1 to 9 by class of work, and public-sector clients may only award contracts to registered contractors | The Construction Regulations 2014, under the Occupational Health and Safety Act 85 of 1993, require contractors to keep a health and safety file for the work, typically including the health and safety plan, risk assessments, and fall protection and emergency plans |
| Kenya | Contractors must be registered by the National Construction Authority (NCA) and hold a valid practising licence, in categories from NCA 1 to NCA 8; the NCA has warned it will remove contractors with unpaid annual fees from the register | Workplace safety duties sit under the Occupational Safety and Health Act 2007 |
| Tanzania | Contractors register with the Contractors Registration Board (CRB), established under the Contractors Registration Act 1997, with separate routes for local and foreign firms | Workplace safety duties sit under the Occupational Health and Safety Act 2003 |
For contractors working across several African countries, the practical challenge is keeping one consistent safety trail while producing the registration and safety documents each regulator and client expects. The broader market context is covered in construction technology in Africa 2026.
How do the requirements compare side by side?
| Region | Key instrument | Core records | What the digital trail must support |
|---|---|---|---|
| United States | OSHA 29 CFR 1904 | 300 log, 300A summary, 301 incident reports | Five-year retention, annual posting, electronic submission where required, fast severe-event reporting |
| United Kingdom | CDM 2015, RIDDOR 2013, Building Safety Act 2022 | Construction phase plan, health and safety file, incident reports, golden thread information | Version history, handover of the file to the client, long-term digital records for higher-risk buildings |
| South Africa | Construction Regulations 2014, cidb Act | Health and safety file, health and safety plan, risk assessments | A complete file available on site, contractor registration documents |
| Kenya | NCA Act 2011, Occupational Safety and Health Act 2007 | Registration and licence documents, workplace safety records | Current registration evidence alongside site safety records |
| Tanzania | Contractors Registration Act 1997, Occupational Health and Safety Act 2003 | Registration documents, workplace safety records | Local or foreign registration evidence alongside site safety records |
How should a digital safety trail be designed?
The design principle is to capture once and report many times. AppMatic Tech designs construction safety trails in this order:
- Capture at the point of work. Inspections, toolbox talks, observations, and incidents are recorded in the field app where they happen, offline if necessary.
- Require the fields that matter. Each form enforces the fields its regulator or client expects, so incomplete records cannot be submitted.
- Attach evidence automatically. Photos taken inside a record are stamped with time, location, and uploader and linked to it.
- Authenticate every signature. Sign-offs are tied to an authenticated user, not a typed name.
- Keep every version. Changes create a new version with a timestamp and author; nothing is overwritten.
- Apply retention by jurisdiction. Retention rules are set per record type and country, such as five years for OSHA records.
- Generate the outputs. OSHA forms, CDM files, and South African health and safety file sections are generated from the same underlying records.
- Draft reports with AI, approve with people. An LLM connected through an MCP server drafts compliance summaries from the structured records, and a responsible person reviews and approves them.
Because capture works offline, the trail stays complete on sites with no signal, which is the problem solved in how offline-first construction apps sync field data. Daily reports built on the same records are covered in construction daily reports.
How AppMatic Tech builds audit-ready safety records
AppMatic Tech has shipped 330+ products since 2017 with an 83% client retention rate and a 5.0 Clutch rating. On its construction project management platform, safety compliance checklists are completed in an offline-first Flutter app, stored in a Laravel backend on PostgreSQL with data isolated per company, and exposed through a Construction MCP Server that lets Claude and GPT-4 draft compliance summaries from live records. Compliance report assembly fell from 20 to 40 minutes to under two, and the platform saved teams 32% of project management time across 100+ projects.
Builds for specific trades and company types are listed under construction software by role, the industry context is on the construction industry page, and the service scope is on the construction technology service page. Contact AppMatic Tech at contact@appmatictech.com to design a safety trail for the markets you work in.
Sources
| Claim used in this article | Source |
|---|---|
| OSHA forms, five-year retention, 300A posting, electronic submission, severe injury reporting | OSHA recordkeeping requirements and 29 CFR Part 1904 |
| CDM 2015 construction phase plan and health and safety file duties | HSE, Managing health and safety in construction (L153) |
| Golden thread scope and duties for higher-risk buildings | Building Safety Act 2022 and IStructE, implementing the golden thread |
| South Africa health and safety file under the Construction Regulations 2014 | Guidelines to the Construction Regulations, 2014 |
| CIDB registration for public-sector work | Construction Industry Development Board |
| Kenya NCA registration and licensing | National Construction Authority, local contractor registration |
| Tanzania CRB registration | Mondaq, construction industry in Tanzania |
| Compliance report assembly time, 32% time saved | Construction project management platform case study and AI in construction: 5 workflows |
Frequently Asked Questions
- What makes a construction safety record audit-ready?
- A construction safety record is audit-ready when it is complete, captured at the time of the event, attributable to a named person, supported by dated and located photos, protected against undetected changes by a version history, retained for the period the law requires, and retrievable in minutes. AppMatic Tech builds safety records with these properties into offline-first Flutter field apps backed by Laravel and PostgreSQL.
- How long must US construction companies keep OSHA injury records?
- Under OSHA's recordkeeping regulation, 29 CFR 1904, covered employers keep the OSHA 300 log, the 300A annual summary, and 301 incident reports, or equivalent forms, for five years following the end of the calendar year the records cover. The 300A summary is posted at each establishment from February 1 to April 30 each year. Employers should confirm current obligations with OSHA.
- What records does CDM 2015 require on UK construction projects?
- CDM 2015 requires a construction phase plan, drawn up by the principal contractor, or by the contractor on single-contractor projects, before the construction phase begins and kept up to date. On projects with more than one contractor, a health and safety file is prepared by the principal designer, with information from the principal contractor, and handed to the client at the end of the project.
- What is the golden thread under the UK Building Safety Act?
- The golden thread is the digital information about a higher-risk building, meaning one at least 18 metres high or with at least seven storeys and at least two residential units, that shows how the building complies with building regulations and how fire and structural safety risks are managed. The duty to keep it came into force in England on 1 October 2023 and runs from design through occupation.
- What construction safety records are required in South Africa and Kenya?
- In South Africa, the Construction Regulations 2014, made under the Occupational Health and Safety Act 85 of 1993, require contractors to keep a health and safety file for the work, and public-sector work requires CIDB registration. In Kenya, contractors must be registered with the National Construction Authority and hold a valid practising licence, and workplace safety duties sit under the Occupational Safety and Health Act 2007.