Higher-Risk Buildings in 2026: The Building Safety Act Health Check Every Small Contractor Needs

Higher-risk buildings are not just a London skyscraper issue. If your firm is replacing fire doors in a residential block, installing risers or running M&E on a care home, the Building Safety Act can land on your desk, your programme and your invoice. In 2026, the regime is less about headline legislation and more about evidence: can you prove, on paper and in a digital record, that the people doing the work are competent and the building is being kept safe? For smaller contractors, that is the bit that catches you out.

First, check whether the project is actually in scope

A higher-risk building is generally a building at least 18 metres tall or with at least seven storeys that contains at least two residential units. Hospitals and care homes can also fall into the regime during design and construction. If you are working on one of those jobs, even as a subcontractor, you are part of the evidence chain. The client, principal designer and principal contractor carry the headline duties, but your work, your records and your people will be examined.

This is where small firms get caught. A job can feel like a routine fit-out until someone asks for your competence matrix, your product data and your change-control records. By then, the programme is already under pressure.

What changed in 2026, in plain English

The direction of travel has been sharper this year. Gateway evidence is being read more closely, not just collected. At Gateway 2, before construction starts, the package needs to show that the design and construction approach is credible. At Gateway 3, before occupation, the evidence has to demonstrate that what was built matches what was approved. The Building Safety Regulator wants a coherent story, not a last-minute bundle of PDFs.

Competence evidence has also moved on from box-ticking. A folder full of CSCS cards is not a competence management system. Contractors are expected to show how each role is matched to the right skills, training, supervision and experience. That means knowing who is doing what, what evidence supports them and how gaps are being managed. For an SME, that can be as simple as a one-page role matrix, but it has to be real and kept current.

The golden thread is another phrase that gets overused. In practice, it means information is accurate, retrievable and kept up to date through design, construction and handover. A shared drive with 400 unlabelled PDFs is not a golden thread. A structured record with clear ownership, version control and a route for site changes is much closer. If a fire door specification changes on site, the record should show what changed, why, who approved it and what was installed.

Common gaps smaller contractors keep hitting

• Competence evidence sitting in HR folders and never mapped to the roles on the job.
• Golden thread information being treated as a handover task rather than a live site record.
• Subcontractor information not being pulled into the main record until the final week.
• No named person responsible for information control.
• Design or product changes agreed by WhatsApp and never formally recorded.
• Assuming the principal contractor or principal designer is covering everything.

None of these are unusual. They are normal SME pressures meeting a regime that expects audit-ready evidence. The fix is not a new department. It is a routine.

A pre-start checklist you can actually use

1. Confirm in writing whether the building is in scope and which duty holders are involved. If you are unsure, ask the client or principal contractor before you mobilise.
2. Map your role on the project. Are you a contractor, subcontractor or designer? What evidence does your part of the work need to produce?
3. Build a competence matrix for the people on the job. Match names to roles, training, qualifications, supervision levels and refresher dates.
4. Check that certificates and cards are current. Do not wait for the site induction to discover a lapsed ticket.
5. Agree who owns the golden thread information for your package. Name a person, not a team inbox.
6. Set an information protocol at the start: what you send, in what format, how often and to whom.
7. Verify product data and installation instructions before work begins. Keep the evidence with the relevant package.
8. Put a simple change-control process in place. Any change to specification, sequence or product should be recorded and approved before it is installed.
9. Keep a live list of gateway evidence for your package. Update it as work progresses, not the week before completion.
10. Give site supervisors a stop-work trigger. If the evidence is missing, the detail does not match or the change has not been approved, they should be able to pause and escalate.
11. Run a monthly five-minute evidence audit. Check names, dates, versions and missing documents.

If you are already on site

Do not panic and do not pretend the gaps are not there. A short gap assessment is better than a false assurance. Talk to the principal contractor, correct the evidence you can, record the decisions you have made and update the as-built information as you go. If something has changed without a paper trail, get it documented now. That is not an admission of failure; it is exactly what a competent contractor does.

The bottom line

The Building Safety Act is a commercial issue as much as a compliance one. Delays, withheld payments and lost future work often come down to evidence that cannot be produced. Smaller contractors do not need a full-time compliance team to get this right. They need a clear pre-start routine, a named information owner and the discipline to keep records live. Build that now, and the next higher-risk project becomes a lot less intimidating.