Key Health and Safety Documents Every Business Needs

Why the paperwork actually matters

If you run a small business, health and safety paperwork can feel like the least glamorous part of your week. But those documents are doing two important jobs: they help keep your team safe, and they show an inspector that you are managing risk sensibly. When someone from the Health and Safety Executive or your local authority turns up, they will not expect a perfect filing system. They will expect to see evidence that you have thought about the risks in your workplace and done something about them.

The good news is that most small businesses need far less paperwork than they fear. The trick is knowing which documents matter, keeping them current, and storing them somewhere you can find them in minutes rather than hours.

Your health and safety policy

If you employ five or more people, you must have a written health and safety policy. This is a legal requirement under the Health and Safety at Work etc. Act 1974. If you have fewer than five employees, you still need a policy, but it does not have to be written down. In practice, writing it down is worth doing anyway, not least because it forces you to think through who does what.

A good policy does not need to be long. Most small business policies are two or three pages and cover:

• A short statement of your commitment to health and safety, signed and dated by the most senior person in the business
• Who is responsible for what, by name or job role
• Arrangements for the day-to-day things, such as risk assessments, first aid, fire safety, training and reporting accidents
• How you will consult with your team and review the policy, usually annually or after any significant change

Review it when something changes: new premises, new equipment, new staff, a new way of working. A dated review note in the margin is enough evidence that it is being kept alive.

Risk assessments

Risk assessments are the backbone of your health and safety records. You must assess the risks your work creates and record the significant findings if you employ five or more people. Again, smaller employers are not legally required to write them down, but most find it helpful, and inspectors will want to see them if you have five or more staff.

Keep them practical. A risk assessment should identify the hazard, who might be harmed and how, what you already do to control it, and what else needs doing. You do not need to assess every conceivable risk, only those that are significant and could realistically cause harm.

Typical assessments for a small business might include:

• A general workplace assessment covering slips, trips, manual handling, electrical safety and working at height
• Fire risk assessment, which is required in writing for all premises with employees
• COSHH assessments for any hazardous substances you use, including cleaning chemicals and dusts
• Display screen equipment assessments for regular computer users
• Young person or new and expectant mother assessments where relevant

Date each one and review it at least annually, or sooner if the work changes. An out-of-date assessment is only slightly better than no assessment at all.

Training and induction records

Training records are the documents small businesses most often forget. They matter because they show that your team knows how to work safely, and they are often the first thing an inspector asks for after an incident.

Keep a simple record for each employee covering:

• Induction training, including fire procedures, first aid arrangements and who to report problems to
• Job-specific training, such as manual handling, food hygiene, forklift operation or asbestos awareness
• Refresher dates, so nothing quietly expires
• Signed confirmation that the person understood the training

A spreadsheet or a folder of certificates works perfectly well. What counts is that the dates are current and the records match the people actually doing the work.

Accident, first aid and insurance records

Every employer must have an accident book where staff can record incidents, and if you have ten or more employees it is a legal requirement. Record near misses too, even though you do not have to. Patterns in near misses often reveal a problem before someone gets hurt.

You also need to know your duties under RIDDOR, which requires reporting certain injuries, occupational diseases and dangerous occurrences to the HSE. Keep a copy of anything you report, along with the date. Alongside this, hold your first aid needs assessment and the certificates of trained first aiders, plus your employers' liability insurance certificate, which must be kept for 40 years.

Statutory inspection records matter if you have equipment such as pressure systems, lifting equipment, or gas and electrical installations. Keep those certificates together with your other documents so nothing gets lost.

Keeping everything inspection-ready

The best system is the one you will actually maintain. A ring binder or a shared folder with clear sections works well for most small businesses. Use consistent file names, such as "Risk assessment – workshop – March 2025", and keep a simple index or contents page at the front.

Once every quarter, spend half an hour checking that assessments are in date, training has not lapsed and any changes to the business have been reflected in your policy. If an inspector does visit, that half hour is what lets you hand over what they ask for without a scramble. More importantly, it means your paperwork is genuinely doing its job: keeping the people who work for you safe, and giving you the confidence that you are meeting your legal duties.