Safety Training Records: What OSHA Wants on Paper and How Small Businesses Get It Right

Walk into ten small businesses and ask the owner whether their crew has been trained on lockout/tagout, forklifts, hazard communication, or personal protective equipment, and ten owners will say yes. Ask for the records, and the conversation usually slows down. Somebody trained them, sure. There was a video, a vendor visit, a morning meeting. But the sign-in sheet is in a binder in the warehouse, or on a thumb drive that left when the previous foreman did, or it never quite got written down because everyone in the room knew everyone in the room. This is the gap where OSHA citations live. The compliance officer is rarely arguing that training did not happen. They are arguing that the employer cannot prove it happened, and under most general industry standards, the burden of that proof sits with the employer.

Why "We Trained Them" Is Not the Defense You Think It Is

Several OSHA standards require not just training, but a written record demonstrating that the training was completed and that the employee can perform the task safely. The PPE standard at 29 CFR 1910.132(f)(4) requires the employer to verify training through a written certification that identifies the employee, the dates of training, and the subject of the certification. The lockout/tagout standard at 1910.147(c)(7)(iv) requires certification that includes employee name and dates of training. The powered industrial truck rule at 1910.178(l)(6) requires written certification that the operator has been trained and evaluated, including the name of the trainer and the date of evaluation. The bloodborne pathogens standard at 1910.1030(h)(2) goes further and demands records that include training dates, content summary, the trainer's name and qualifications, and the names and job titles of attendees, kept for three years. Hazard communication, respiratory protection, confined space entry, and fall protection all carry similar documentation duties scattered across their paragraphs. When an inspector asks for these records and a small employer cannot produce them, the citation writes itself, even if the work itself was being done correctly.

What a Usable Training Record Actually Contains

A training record that holds up in an inspection does not need to be elegant, but it does need to answer a short list of questions without ambiguity. Who was trained, identified by full name and ideally an employee number or signature so the document cannot be challenged later? What was covered, written specifically enough that a reader can see the topic matched the standard, not just "safety training" but "Lockout/Tagout authorized employee training covering 1910.147 procedures for the press brake and hydraulic shear"? Who delivered the training and what makes them qualified to do so, whether that is an internal supervisor with documented experience, a vendor with credentials, or an outside consultant? When did it happen, with both the training date and, where the standard demands it, the date of practical evaluation? And finally, how was competency verified, whether through a written quiz, a hands-on demonstration, or supervisor sign-off after observation? A single page with these answers and signatures from both the trainer and the trainee will satisfy almost every general industry standard. A blurry photo of a sign-in sheet with first names only will not.

How Long to Keep It, and Where

Retention requirements vary by standard, but the safe practice for small businesses is to default to the longest applicable period and keep one set of records for the whole program. Bloodborne pathogens training records must be kept for three years from the date the training occurred. Medical surveillance records under 1910.1020, which include records related to exposure to toxic substances, must be retained for the duration of employment plus thirty years. PPE certifications and forklift evaluations have no specific retention period in the rule, but should be kept for the duration of employment and for several years after, because they may be needed to defend a claim or a citation long after the employee has moved on. Storing these records in a single, backed-up location, whether a locked cabinet, a shared drive with controlled access, or a learning management system, is more important than the format. What kills small businesses is decentralization, when each supervisor keeps their own folder, the records are technically present but cannot be produced on demand during an inspection.

The System a Small Shop Will Actually Use

The best training documentation system is the one a small employer will keep up with after the consultant leaves. For most shops with fewer than fifty employees, that means a simple matrix spreadsheet listing every employee on one axis and every required training topic on the other, with cells showing the most recent training date, refresh due date, and a link to the underlying signed certificate. Behind the matrix sits a folder, physical or digital, holding the actual signed certifications, agendas, and quiz results. This pairing accomplishes two things. The matrix gives the owner a one-page view of who is overdue for refresher training, which is where citations cluster, while the folder satisfies the paper trail when an inspector asks for proof. Free templates are available from OSHA's training resources and from state on-site consultation programs, and most small employers can stand up a working system in an afternoon if they commit to it.

The reason this matters in 2026 is that OSHA's enforcement priorities continue to weight repeat and willful violations heavily, and "we trained them but cannot prove it" frequently gets recharacterized as a serious or repeat citation when the same gap shows up across multiple inspections. The training record is one of the cheapest pieces of compliance work a small business can do, and one of the highest-leverage when an inspector eventually walks through the door.