The decisions that matter
- Transfer open work and responsibilities as well as files.
- Verify that the receiving team can retrieve and understand the records.
- Preserve required records and control access during the transition.
Keep one employer-owned view of the changeover
Name a person inside the business to coordinate the transition. The outgoing provider can explain its work, and the incoming provider can identify what it needs, but the employer must be able to see the whole changeover. Include the operational contacts who rely on the current arrangements.
Set out the intended dates, contractual notice requirements, current service commitments and decisions still to be made. Check which responsibilities continue between the old engagement ending and the new work beginning. A signed replacement proposal does not, by itself, tell a supervisor who will answer a question on the changeover day.
Build a handover register that includes unfinished work
A folder export is only part of the transition. Use the register below to connect records to the work and people they support. Replace the example roles with the actual custodians and receiving owners. Add a transfer date and exception owner when using it for your engagement.
Keep the general register free of unnecessary personal health or injury details. It can identify a restricted record collection and authorized custodian without exposing the underlying information to everyone involved in the transition.
Scroll sideways to see every column
| Record or workstream | Custodian → receiving owner | Transfer evidence | Exception to resolve |
|---|---|---|---|
| Current programs and procedures | Current document custodian → employer's program owner | Approved versions, revision context and retrievable files. | Unclear approval, obsolete copy or missing supporting material. |
| Open corrective actions | Current action coordinator → incoming coordinator and operational owners | Each action's concern, status, next step, owner and evidence. | Unassigned action or completion claimed without support. |
| Reporting dates and commitments | Current coordinator → designated employer owner | Calendar with requirement or commitment references and responsible roles. | A date with no confirmed source, owner or planned response. |
| Recurring site work | Current provider contact → incoming provider and site contact | Agreed schedule, visit purpose and latest outstanding findings. | An expected visit or activity absent from the new scope. |
| Contractor and project arrangements | Project or contractor contact → relevant operational owner | Current requirements, contacts and upcoming coordination needs. | Changed project work that has not reached the receiving team. |
| Systems and access | Account administrator → authorized employer administrator | Confirmed accounts, roles and access to required information. | Access dependent on an outgoing person's account. |
| Archives and retained records | Records custodian → authorized records owner | Inventory, agreed storage location and retrieval check. | Unreadable export, missing period or unresolved retention rule. |
Reconcile the meaning of each open action
Ask the outgoing and receiving teams to work from the same action list. Check whether the status describes an action being planned, implemented or reviewed. Preserve the original concern and the evidence already collected so the new provider does not have to rediscover the reason for the work.
Resolve differences visibly. If one list says complete and another says awaiting review, record the difference, the evidence available and who will decide the next step. Avoid quietly resetting targets or marking items closed to make the transition look tidy. Missing information belongs in an exception list with an owner.
A provider change does not reset record obligations
For the specified injury and illness records, OSHA 1904.33 requires retention for five years after the covered calendar year ends. It covers the OSHA 300 Log, any privacy case list, annual summary and OSHA 301 Incident Reports. It also describes required updates to stored OSHA 300 Logs.
That is a specific recordkeeping provision, not a five-year rule for every EHS document. Other records can have different requirements. Determine the relevant retention and access arrangements before consolidating archives. Keep the employer able to retrieve required material after the outgoing provider's involvement ends.
Sources: OSHA 1904.33: Retention and updating
Agree what a usable transfer includes
Discuss file formats, attachments, revision history, ownership and access before the final export. A PDF report may explain findings while leaving the working action list elsewhere. A spreadsheet may omit linked evidence. Confirm what the employer is entitled to receive under the engagement terms and how the receiving team will use it.
Test a small representative transfer early. Check that links and attachments resolve, key fields retain their meaning and authorized users can open the files. Keep necessary access arrangements in place until the employer has verified the required handover, then adjust access deliberately according to the transition plan. Do not leave access decisions to an untracked last-day email.
- Readable records and any agreed editable working files.
- Attachments or clear references to controlled storage.
- Version, approval and status information needed to interpret the material.
- Authorized access and an identified administrator.
- An exception list for items not yet transferred or understood.
Confirm who responds while the relationship changes
Tell relevant supervisors and operational contacts when the arrangements change and which contact to use for each type of question. Include scheduled work, active projects and outstanding decisions. If the incoming scope differs, explain who will cover work that was previously included.
OSHA's management leadership guidance supports clearly defined responsibilities and authority. Apply that principle to the transition itself: an internal owner should know what remains active, who can make decisions and which concerns require immediate attention. Day-to-day operational responsibilities continue while files and contracts change hands.
Sources: OSHA management leadership guidance
Test the handover with one record and one action
Before accepting the transfer, ask an authorized receiving team member to retrieve a current approved procedure and explain its revision status. Then ask them to locate one open action, describe its next step and identify the operational owner without relying on the outgoing provider to interpret it.
This is an illustrative acceptance check, not a complete audit. Choose additional samples according to the importance and variety of your records. If a check fails, identify whether the problem is missing information, unclear ownership, inaccessible storage or an unfamiliar process. Resolve it or record an agreed exception with responsibility and timing before treating the handover as complete.
- Can the receiving person locate the right record?
- Can they distinguish an approved version from a draft?
- Can they explain what is still open and who acts next?
- Can the employer see and manage the remaining exceptions?
Use the transition to define the next service clearly
The incoming provider should understand what has been received and what remains uncertain. Separate inherited work from new assignments, and agree which items need an initial review. Avoid assuming that a previous provider's conclusion has been independently verified simply because its report was transferred.
If you are considering PreventX for ongoing Managed EHS, bring the current scope, open work list and intended changeover date. We can discuss the first assignment and the records and responsibilities needed to scope the new engagement. This makes the transition part of the work plan from the beginning.
Questions employers ask
Do we need the outgoing provider's cooperation to change providers?
The practical steps depend on the contract, record access and current arrangements. Start by checking the employer's available records and transfer rights, then identify what must be requested or clarified. Keep operational responsibilities active and document exceptions. Do not assume that a new provider can reconstruct missing work from a final report alone.
Can we delete the old provider's files after importing them?
Do not use a successful import as a reason to delete the original material. Verify completeness, readability, attachments and required context first, and determine the applicable retention and contractual requirements. Different record types may need different arrangements. Any later archive or access change should be a deliberate employer decision.
Sources & further reading
Official references for the requirements and program principles discussed above. Examples and buying checklists are PreventX editorial guidance.
- OSHA 1904.33: Retention and Updating OSHA · Checked September 7, 2026
- OSHA: Management Leadership OSHA · Checked September 7, 2026