Health and Safety Accreditation: The 4-Rung Evidence Ladder Tenders Actually Score

Since 24 February 2025, the Procurement Act 2023 has governed UK public procurement, and a conviction for corporate manslaughter is now a mandatory ground for excluding a supplier (Schedule 6). Exclusion is the extreme end. The everyday reality is quieter and more expensive: bids that never reach the pricing stage because the health and safety evidence was thin.

Most public and corporate tenders now score your health and safety management, and poor evidence loses the bid before the pricing. Many quality sections are pass/fail gates. Fail one, and your carefully modelled rate card is never opened.

The problem for software houses, AI firms, law firms, insurers and education suppliers is that most "health and safety accreditation" advice is written for site contractors. It pushes you towards schemes your buyers may not ask for, and ignores the evidence they will. This guide replaces that advice with a simple ladder: four rungs of evidence, what each one proves, which buyers accept it, and how far it travels internationally.

---

First, Clear Up One Misunderstanding: Accredited vs Certified

The terms are used interchangeably in tender documents, but they mean different things, and evaluators notice.

• Certification is what your organisation receives, for example an ISO 45001 certificate issued after an external audit.
• Accreditation is what the certification body receives. In the UK, UKAS accredits the bodies that certify management systems.

A certificate from an unaccredited body can look identical to a genuine one and still be rejected. Buyers increasingly check, and anyone can verify a body through the UKAS directory. Internationally, the International Accreditation Forum links national accreditation bodies so that a certificate issued under one is recognised by the others. That is why the top rung of the ladder travels across borders and the lower rungs often do not.

HSE also publishes a short explanation of health and safety accreditation schemes and what they can and cannot demonstrate.

---

The 4-Rung Evidence Ladder

Each rung builds on the one below it. You cannot skip to Rung 4 with nothing underneath: certification auditors, and good tender evaluators, will look straight through to Rung 1.

Rung 1: The Statutory Evidence Pack

What it is: the documents the law already requires. A written health and safety policy (mandatory in Great Britain once you employ five or more people), suitable and sufficient risk assessments, access to a competent person, training records, and incident reporting arrangements.

What it proves to a buyer: that you are legally compliant. Nothing more, but nothing less, and many pass/fail questions in a procurement specific questionnaire or corporate supplier form are testing exactly this.

Who it is enough for: low-risk, low-value contracts where your people never work on the client's premises, such as a small SaaS subscription bought by a single department.

International reach: local only. A UK policy does not cover your team in Amsterdam or Paris. Each country has its own baseline, which is why our Netherlands and France guides set out different mandatory documents.

Where bids are lost: policies signed by someone who left two years ago, risk assessments that do not mention hybrid or home working, and training records that cannot be produced on request.

Rung 2: A Verified Questionnaire Scheme

What it is: an independent assessment of your Rung 1 documents against a published standard. In the UK, schemes that are members of SSIP (Safety Schemes in Procurement) recognise each other's core assessments, which reduces duplicate questionnaires.

What it proves to a buyer: that someone independent has checked your paperwork, not just you.

Who it is for: suppliers whose people go onto client sites. That includes IT installation and support teams, field engineers, data centre service providers, and contractors working in schools, colleges and universities. Many education estates and facilities teams ask for a recognised scheme before work starts.

International reach: limited. These schemes are largely a UK procurement convention. An overseas buyer is unlikely to recognise them, and a UK scheme will not assess your compliance in other jurisdictions.

Where bids are lost: treating the scheme badge as the whole answer. A scheme confirms documents exist. It does not show that your system works, which is what weighted quality questions go on to ask.

Rung 3: Independent Audit With Measured Results

What it is: independent health and safety audits of how your system works in practice, followed by a documented action plan, closed actions and performance indicators you can quote.

What it proves to a buyer: that your arrangements are not just written but working, and that you improve when you find problems. This is the evidence that wins weighted quality marks, because it answers the "describe how you manage" questions with facts rather than adjectives.

Who it is for: office-based and professional services firms that do not send staff onto client sites, and so gain little from a contractor scheme. That is most legal, insurance and professional services businesses bidding for panel places or outsourced services, and most software companies selling into the public sector.

International reach: strong, if the audit covers each jurisdiction you operate in. A multi-country audit by international health and safety consultants gives you one report, in one format, that you can cite in bids anywhere. Remote options are covered in our guide to virtual health and safety audits.

Where bids are lost: audits that list findings but show no closure. An evaluator reading twelve open actions from last year sees risk, not maturity.

Rung 4: Certified Management System (ISO 45001)

What it is: ISO 45001 certification from an accredited certification body, after a two-stage external audit and with annual surveillance audits after that. Our post on ISO 45001 certification: two audits, seven clauses walks through the process.

What it proves to a buyer: that a complete management system exists, is independently audited every year, and covers leadership, worker participation, risk, competence, performance evaluation and improvement.

Who it is for: suppliers targeting large frameworks, enterprise customers, and multinational buyers. AI and data businesses selling into regulated enterprises increasingly find it requested alongside information security certifications in the same supplier review.

International reach: the widest of any rung. Because of international recognition between accreditation bodies, an accredited ISO 45001 certificate is understood by buyers in Europe, the Middle East, Asia Pacific and the Americas. In the EU, public procurement rules under Directive 2014/24/EU require contracting authorities to take account of suppliers' compliance with social and labour law obligations, and a recognised management system is one of the clearest ways to evidence it.

Where bids are lost: a certificate whose scope does not match the contract. If your certificate covers your London head office but the contract is delivered from Dublin and Munich, a careful evaluator will mark you down.

---

Which Rung Should You Aim For?

Match the rung to the buyer, not to what a competitor has on their website.

Your business	Typical buyer	Minimum rung	Rung that wins
SaaS or software vendor, remote delivery	Councils, NHS bodies, universities	Rung 1	Rung 3
IT services with on-site engineers	Schools, colleges, public estates	Rung 2	Rung 3
AI and data platform	Regulated enterprises, central government	Rung 3	Rung 4
Law firm	Corporate and public sector legal panels	Rung 1	Rung 3
Insurer or broker	Outsourcing and claims-handling contracts	Rung 1	Rung 3
Education provider or supplier	Trusts, local authorities, international schools	Rung 2	Rung 3 or 4
Multinational office-based group	Global enterprise procurement	Rung 3	Rung 4

The pattern is consistent: the minimum rung gets you through the gate, and the rung above it wins the quality marks. For sector context, see our education page.

---

What Evaluators Actually Read Between the Lines

Having the right rung is necessary. Presenting it well is what converts it into marks. Across UK public bids and international corporate tenders, evaluators reward the same things: evidence that is current (dated within the last year), evidence that matches the contract's locations and services, numbers rather than descriptions (audit scores, actions closed, training completion rates), and a named person accountable for health and safety.

Our earlier guides go deeper on the question formats themselves: health and safety supplier questionnaires: 8 sections and what they really check, 15 expert tips to win more contracts, and health and safety in tenders and procurement. The UK Government's Procurement Act 2023 guidance sets out how the new regime works for suppliers.

---

How Arinite Helps You Climb

Arinite has supported 1,500+ businesses across 50+ countries for 15+ years, protecting 100,000+ employees, with 95%+ client retention. Our qualified consultants build the evidence and our software keeps it current, so your bid team is never chasing documents the night before a deadline. Choose the level of support that fits:

• Done For You: our health and safety consultants build your Rung 1 pack, run your independent audit and prepare you for ISO 45001, then supply tender-ready evidence through our dedicated tenders support.
• Done With You: we work alongside your bid and operations teams to close audit actions, draft quality responses and align your health and safety manual to the contracts you are chasing.
• DIY: you manage your own evidence with our health and safety consultants and software platform, keeping policies, risk assessments, training records and audit actions dated, versioned and exportable for any bid.

For groups bidding across borders, our global health and safety consultants align each country's evidence to one standard, so a tender in Germany draws on the same system as a tender in the UK.

---

Frequently Asked Questions

What is the best health and safety accreditation for tenders?

There is no single best scheme. ISO 45001 certification from an accredited body carries the most weight and the widest international recognition. For contracts where your staff work on client sites in the UK, a recognised SSIP member scheme is often expected. Office-based firms usually gain more from an independent audit with measured results than from a contractor scheme.

Is health and safety accreditation a legal requirement?

No. The law requires you to comply, not to be accredited. Accreditation and certification are ways of proving compliance to buyers, and many tenders make them a condition of entry.

How does the Procurement Act 2023 affect health and safety in tenders?

The Act has applied to new UK public procurements since 24 February 2025. It lists corporate manslaughter as a mandatory exclusion ground, and contracting authorities continue to assess suppliers' health and safety arrangements through questionnaires and quality criteria.

Will a UK health and safety scheme be accepted in international tenders?

Usually not. Most UK questionnaire schemes are domestic procurement tools. For international bids, an accredited ISO 45001 certificate or an independent multi-country audit is far more likely to be recognised.

How long does it take to move up the ladder?

A solid statutory pack can often be put in place within weeks. An independent audit and closed action plan typically takes a few months. ISO 45001 certification usually takes longer, depending on how mature your existing system is. Starting with a gap analysis tells you which rung you are really on.

---

Know Your Rung Before the Next Deadline

Most organisations think they are a rung higher than their evidence shows. Book a free gap analysis with Arinite and we will assess your health and safety evidence against the tenders you are targeting, in the UK and internationally, and show you the fastest route to the rung that wins.

Request your free gap analysis