Introduction
Most contractors know that every operative on site needs a valid CSCS card. Fewer have a reliable system for knowing which cards are about to expire, which already have, and whether the person turning up on Monday morning is still compliant.
This is not a niche problem. On a site with thirty operatives, you can have hundreds of active certifications between them, all running on different renewal cycles. CSCS cards, first aid certificates, IPAF, PASMA, asbestos awareness, SMSTS, SSSTS. Each one expires at a different point. Each one carries a different consequence if it lapses without being caught.
The standard approach at most contractors is some version of a spreadsheet. Someone owns it, usually in HR or operations, and it gets updated when people remember to update it. When it works, it works. When it does not, you find out at the worst possible moment: during a client audit, after an incident, or when a principal contractor refuses access to a worker whose card expired six weeks ago.
This article explains what needs tracking, why the spreadsheet approach breaks down at scale, and what a proper CSCS card and certification tracking system actually looks like in practice.
Why CSCS Card Tracking Matters
The Construction Skills Certification Scheme exists to demonstrate that workers have the training and qualifications for the work they are carrying out on site. A CSCS card is not optional on most UK construction sites. Principal contractors, major clients, and tier-one contractors all require valid cards as a baseline condition of site access.
The scheme covers a wide range of card types. Blue Skilled Worker cards, Gold Supervisory cards, Black Manager cards, Red Trainee cards. Each maps to a specific level of competence and qualification. And each has its own validity period, typically five years, after which it must be renewed.
Beyond CSCS, most site workers carry additional certifications that are equally mandatory for the tasks they perform. An operative working at height needs a valid PASMA or IPAF certificate. Anyone working with or near asbestos-containing materials needs current asbestos awareness training. Site managers need SMSTS. Supervisors need SSSTS. First aiders need a certificate that is less than three years old.
While the CSCS scheme is industry-led rather than a legal requirement in its own right, the underlying qualifications and competencies that the cards represent are required under health and safety legislation. The card is evidence of the competence. The competence itself is the legal obligation.
This distinction matters. A contractor cannot simply point to a spreadsheet of card numbers and consider the job done. The obligation is to ensure that every worker is genuinely competent for the work they are doing, and that their qualifications are current and verifiable.
What You Actually Need to Track
The mistake most contractors make when they set up a certification tracking system is scoping it too narrowly. They track CSCS cards and little else. The result is a system that gives partial visibility and creates a false sense of compliance.
A complete construction certification tracking system needs to cover at minimum the following categories.
Scheme cards
CSCS is the most common, but it is not the only card scheme operating on UK construction sites. CPCS (Construction Plant Competence Scheme) cards cover plant operators. CISRS (Construction Industry Scaffolders Record Scheme) covers scaffolding. EUSR covers water and utilities work. Depending on the trades you employ or engage, you may have workers carrying any combination of these alongside or instead of a CSCS card.
For each card you need: the card type, the card number, the expiry date, and a scanned copy of the card itself. Card numbers can be verified against the relevant scheme's online register, which is useful when onboarding new workers or when a card cannot be physically produced.
Health and safety certifications
This covers the mandatory training that site roles require regardless of trade. SMSTS for site managers. SSSTS for supervisors. First aid at work (three-year renewal). Emergency first aid at work (annual renewal). Manual handling. Working at height. Fire safety awareness. Asbestos awareness (annual renewal, despite often being overlooked).
Each of these carries a different renewal frequency and a different consequence for lapsing. A site manager without a current SMSTS certificate is not legally fit to manage a site. A first aider whose certificate has expired is not qualified to provide first aid in an emergency. These are not administrative technicalities.
Plant and equipment operator certifications
Any operative using plant or powered access equipment needs a specific certification for that equipment type. IPAF covers powered access platforms such as scissor lifts and boom lifts. PASMA covers mobile access towers. Forklift operator licences, crane operator licences, and telehandler CPCS cards all fall into this category.
These certifications tend to be overlooked because they are often assumed to be covered by a CPCS card. They are not always. An operative can hold a valid CPCS card for one category of plant and be unqualified to operate another type on the same site.
Trade and professional qualifications
Electricians must hold a current ECS card. Gas engineers working on commercial sites need Gas Safe registration. Plumbers and mechanical engineers may hold CIPHE membership or BPEC qualifications. These are ongoing professional registrations, not one-off training certificates, and they require annual renewal through the relevant professional body.
Subcontractor worker certifications
This is where tracking most often breaks down. As the principal contractor or main contractor on a site, your duty of care extends to every worker operating within your health and safety framework, regardless of who employs them. A subcontractor operative with an expired CSCS card is your compliance problem as much as it is theirs.
This means your tracking system needs to cover subcontractor workers, not just your directly employed team. The practical implication is that you need a process for collecting, verifying, and storing certification information for every worker before they start on site, and a way of flagging when those certifications approach expiry.
Where the Spreadsheet Breaks Down
Spreadsheet-based tracking works reasonably well for a small, stable workforce. When you have twelve directly employed operatives who have all been with the company for years and whose certifications renew on predictable cycles, a well-maintained spreadsheet can hold together.
It breaks down in four situations that are all common in construction.
Scale. As your workforce grows, the number of certifications you are tracking grows faster. Twenty workers with an average of eight active certifications each is 160 rows to maintain. Add subcontractor workers across three live sites and that number becomes unmanageable as a manual task.
Turnover. Construction has one of the highest workforce turnover rates of any sector. New starters bring certifications that need to be logged. Leavers' records need to be marked inactive. Workers returning to a company after a gap may have certifications that renewed during the time they were away, or that lapsed. Every personnel movement creates an admin event that the spreadsheet does not handle automatically.
Expiry alerts. A spreadsheet can contain expiry dates. It cannot proactively tell you when a date is approaching. Someone has to look at it. In a busy HR or operations function, the spreadsheet often gets checked reactively rather than routinely, which means expiries get caught after the fact rather than before.
Auditability. When a client, principal contractor, or the HSE asks to see evidence that your workforce was fully certified at a specific point in time, a spreadsheet is difficult to interrogate. There is no audit trail, no version history that can be relied on, and no way to quickly produce a certified snapshot of your workforce's compliance status on any given date.
What Good CSCS Card and Certification Tracking Looks Like
A proper construction certification tracking system solves all four of these problems. Here is what it needs to do.
Centralised records for every worker. Every worker, directly employed or subcontractor, has a single record that holds all of their certifications in one place. Card numbers, expiry dates, scanned copies of physical cards, and any relevant notes. The record is linked to the individual, not to a project or a site, so it follows them wherever they work.
Automatic expiry alerts. The system flags certifications that are approaching expiry, typically at 90, 60, and 30 days, and sends notifications to the relevant manager or HR team. This removes the dependency on someone remembering to check. The alert is triggered by the data, not by human recall.
Document storage and verification. Physical cards and certificates should be scanned and stored against the relevant worker record. This makes them instantly accessible during an audit and removes the risk of documents being lost, damaged, or unavailable at short notice.
Coverage across all certification types. The system should handle every certification category described above: scheme cards, health and safety training, plant operator certifications, trade qualifications, and professional registrations. A tool that only tracks CSCS cards creates gaps elsewhere in the compliance picture.
Reporting for audits and site access. You should be able to produce a complete training matrix for any site, project, or the whole workforce at any time. This is what a principal contractor or client auditor will ask for. Having it available in two minutes rather than two hours is not just more convenient; it demonstrates that you take compliance seriously.
Mobile access for site managers. Site managers need to be able to check certification status before allowing someone to start work. If the system only lives on a desktop application at head office, it will not be used on site. Mobile access to at least the read-level certification data is essential.
StoneRise HR includes a complete training records module that covers all of the above. Certifications are stored against each worker's profile, expiry alerts are automatic, and the full training matrix is available as a report at any point. It is built specifically for construction businesses, which means it handles the mix of employed and subcontractor workers that most contractors manage.
Getting the Process Right: Onboarding and Ongoing
Tracking software is only as good as the data going into it. The system design matters, but so does the process around it.
The most effective approach is to make certification collection part of the onboarding process for every worker, before they set foot on site. This means having a clear checklist of what documentation is required, a process for collecting and uploading it, and a gate that prevents site access until the records are complete and verified.
For subcontractor workers, this is best managed through the subcontractor company rather than individual operatives. Require subcontractors to submit their workers' certification documentation as part of their site approval process. Make it a contractual requirement that certifications are kept current and that you are notified of any changes or renewals. Then verify what you receive against the card scheme's online registers before logging it in your system.
Ongoing, the process should be driven by the system's expiry alerts. When an alert fires, the responsibility for chasing the renewal should sit with a named person, and there should be a clear escalation path if the renewal is not completed before the expiry date. An operative whose certification has lapsed should not be permitted on site until it is renewed and the updated documentation is in the system.
This sounds straightforward. In practice, it requires clarity about who owns the process. In most contractors, certification tracking sits somewhere between HR, operations, and site management, and the ambiguity means things fall through the gaps. Assigning ownership explicitly and making the system the single source of truth removes that ambiguity.
The Cost of Getting It Wrong
The consequences of poor certification tracking fall into three categories, all of which have real financial implications.
Incident liability. If an operative is injured while performing work for which they did not hold a valid certification, the contractor's liability position is significantly worse than if the certification had been current. Health and safety law requires that workers are competent for the tasks they carry out. An expired or absent certification is evidence that this requirement was not met.
Client and principal contractor penalties. Most construction contracts include obligations around workforce competency. Failing a client audit or having site access refused for a worker with an invalid card results in programme delays, which can trigger liquidated damages clauses. In some cases, repeated compliance failures lead to a contractor being removed from an approved supply chain.
Regulatory action. The HSE has the power to issue improvement notices and prohibition notices where health and safety breaches are identified. Where a pattern of competency failures is found, enforcement action can follow. The cost of responding to an enforcement investigation, even where no prosecution results, is significant.
None of these outcomes are common where a contractor has a genuinely well-maintained certification tracking system. They are common where certification management relies on a spreadsheet that nobody checks consistently.
Conclusion
CSCS card and certification tracking is not complicated in principle. You need to know what certifications your workforce holds, when they expire, and what happens when they do not get renewed in time. The problem is that at any meaningful scale, doing this manually creates gaps that are almost impossible to avoid.
The fix is a system that holds every certification in one place, alerts you before expiry dates arrive, and gives you an auditable record of your workforce's compliance status at any point. For a construction business managing employed and subcontractor workers across multiple sites, this is not a nice-to-have. It is a basic operational requirement.
If your current approach relies on a spreadsheet or a shared drive, the gap between where you are and where you need to be is not large. But every week that passes without fixing it is another week of certifications expiring without being caught.
See Construction Certification Tracking in Action
Request a demo of StoneRise HR to see how construction businesses manage their full training matrix, from CSCS cards to professional qualifications, in one system.
FAQ
Is a CSCS card a legal requirement on construction sites? CSCS cards are not a standalone legal requirement, but the competencies and qualifications they represent are required under health and safety legislation. In practice, the vast majority of UK construction sites require valid CSCS cards as a condition of site access, and principal contractors routinely check them as part of their safety management processes.
How long is a CSCS card valid for? Most CSCS cards are valid for five years, though this varies by card type. The Blue Skilled Worker card and Gold Supervisory card are both five-year cards. Trainee cards have shorter validity periods tied to the duration of the relevant apprenticeship or training programme. All cards must be renewed before expiry to maintain site access.
Who is responsible for tracking subcontractor workers' certifications? The principal contractor or main contractor carrying out works on a site holds responsibility for ensuring that all workers, including those employed by subcontractors, are competent for the work they are doing. This means verifying and tracking certifications for subcontractor workers, not just directly employed staff.
What happens if a worker's CSCS card expires while they are on site? An operative with an expired CSCS card should not be permitted to continue working on site until the card is renewed and a valid replacement is produced. Allowing an uncertified worker to continue working creates a compliance risk for the contractor and, depending on the task being carried out, a potential health and safety liability.
What other certifications do construction workers need beyond CSCS? Beyond CSCS, common requirements include: SMSTS for site managers, SSSTS for supervisors, first aid at work certificates (three-year renewal), IPAF for powered access work, PASMA for mobile access towers, asbestos awareness training (annual), and trade-specific certifications such as ECS for electricians and CPCS for plant operators. Each has its own renewal cycle and must be tracked separately.
How far in advance should contractors chase certification renewals? Most experienced HR and operations teams start chasing renewals at 90 days before expiry. This gives enough time to book the course, complete the training, and receive the updated card or certificate before the current one lapses. Some certifications, particularly specialist courses with limited availability, may need longer lead times.
Last updated: March 2026
