OSHA and EPA Audit Documentation: What Inspectors Ask For First

The first hour of an inspection is often spent on documents. How quickly and completely you produce them shapes the rest of the visit. Here are the records OSHA and EPA inspectors most commonly ask for, and what to check before they arrive.

OSHA Records

• Injury and illness records (29 CFR 1904): OSHA Form 300 logs, 300A summaries, and 301 incident reports. Records must be kept for five years, and the 300A summary must be posted from February 1 to April 30 each year.
• Hazard communication (29 CFR 1910.1200): the written program, a chemical inventory, and accessible Safety Data Sheets for every hazardous chemical on site.
• Lockout/tagout (29 CFR 1910.147): the energy control program, machine-specific procedures, and periodic inspection records.
• Emergency action and fire prevention plans (29 CFR 1910.38 and 1910.39) where required.
• Training records for forklifts, respirators, confined spaces, and other covered activities.

EPA and State Environmental Records

• Permits: air permits, wastewater or stormwater permits, and the monitoring and reporting they require.
• Hazardous waste (RCRA): generator status documentation, manifests, and weekly container inspection logs.
• Oil spill prevention (40 CFR Part 112): a current SPCC plan if your facility meets the storage thresholds.
• Community right-to-know (EPCRA): Tier II reports, due March 1, and Toxics Release Inventory reports where applicable.

The Three Most Common Document Problems

1. Out of date: the program describes equipment or chemicals that are no longer on site.
2. Incomplete: required annual reviews, inspections, or signatures are missing.
3. Not practiced: the written procedure does not match what employees actually do.

Organize Before Anyone Asks

Keep one index of every required record, where it lives, and who owns it. Being able to hand over a document within minutes tells an inspector that the system is managed. Searching for an hour tells them the opposite.

Related reading: Environmental Compliance Audit Checklist.

How Compliance Fortress Solves This: The Exceleor Path

1. Discovery: understand the problem, measure where things stand today, and agree on what success looks like.
2. Define the engagement path: most organizations don't know the path. We do. A proven method, tailored to your situation.
3. Training: bring your people to a clear understanding of the requirements.
4. Implement and engage: carry out the work jointly, with your people involved from day one.
5. Verify: confirm the work was done and meets the requirement.
6. Validate: confirm the original problem is actually solved, measured against the success measures from Discovery.
7. Transfer ownership: we collaborate throughout, so your team can run it without us.
8. Sustain and grow: we stay close, check in, and catch the next need early. We're here to make sure you succeed.

Is this your situation? See how we approach it on the Regulatory Compliance Audit Coming page, or request a Situation Review. You can also email [email protected].